]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - net/sched/act_mirred.c
cls_flower: Fix incorrect idr release when failing to modify rule
[mirror_ubuntu-bionic-kernel.git] / net / sched / act_mirred.c
CommitLineData
1da177e4 1/*
0c6965dd 2 * net/sched/act_mirred.c packet mirroring and redirect actions
1da177e4
LT
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
8 *
9 * Authors: Jamal Hadi Salim (2002-4)
10 *
11 * TODO: Add ingress support (and socket redirect support)
12 *
13 */
14
1da177e4
LT
15#include <linux/types.h>
16#include <linux/kernel.h>
1da177e4 17#include <linux/string.h>
1da177e4 18#include <linux/errno.h>
1da177e4
LT
19#include <linux/skbuff.h>
20#include <linux/rtnetlink.h>
21#include <linux/module.h>
22#include <linux/init.h>
5a0e3ad6 23#include <linux/gfp.h>
c491680f 24#include <linux/if_arp.h>
881d966b 25#include <net/net_namespace.h>
dc5fc579 26#include <net/netlink.h>
1da177e4
LT
27#include <net/pkt_sched.h>
28#include <linux/tc_act/tc_mirred.h>
29#include <net/tc_act/tc_mirred.h>
30
3b87956e 31static LIST_HEAD(mirred_list);
6bd00b85 32static DEFINE_SPINLOCK(mirred_list_lock);
1da177e4 33
53592b36
SL
34static bool tcf_mirred_is_act_redirect(int action)
35{
36 return action == TCA_EGRESS_REDIR || action == TCA_INGRESS_REDIR;
37}
38
8dc07fdb 39static bool tcf_mirred_act_wants_ingress(int action)
53592b36
SL
40{
41 switch (action) {
42 case TCA_EGRESS_REDIR:
43 case TCA_EGRESS_MIRROR:
8dc07fdb 44 return false;
53592b36
SL
45 case TCA_INGRESS_REDIR:
46 case TCA_INGRESS_MIRROR:
8dc07fdb 47 return true;
53592b36
SL
48 default:
49 BUG();
50 }
51}
52
a5b5c958 53static void tcf_mirred_release(struct tc_action *a, int bind)
1da177e4 54{
86062033 55 struct tcf_mirred *m = to_mirred(a);
dc327f89 56 struct net_device *dev;
2ee22a90 57
6bd00b85
WC
58 /* We could be called either in a RCU callback or with RTNL lock held. */
59 spin_lock_bh(&mirred_list_lock);
a5b5c958 60 list_del(&m->tcfm_list);
dc327f89 61 dev = rcu_dereference_protected(m->tcfm_dev, 1);
2ee22a90
ED
62 if (dev)
63 dev_put(dev);
dc327f89 64 spin_unlock_bh(&mirred_list_lock);
1da177e4
LT
65}
66
53b2bf3f
PM
67static const struct nla_policy mirred_policy[TCA_MIRRED_MAX + 1] = {
68 [TCA_MIRRED_PARMS] = { .len = sizeof(struct tc_mirred) },
69};
70
c7d03a00 71static unsigned int mirred_net_id;
a85a970a 72static struct tc_action_ops act_mirred_ops;
ddf97ccd 73
c1b52739 74static int tcf_mirred_init(struct net *net, struct nlattr *nla,
a85a970a 75 struct nlattr *est, struct tc_action **a, int ovr,
c1b52739 76 int bind)
1da177e4 77{
ddf97ccd 78 struct tc_action_net *tn = net_generic(net, mirred_net_id);
7ba699c6 79 struct nlattr *tb[TCA_MIRRED_MAX + 1];
16577923 80 bool mac_header_xmit = false;
1da177e4 81 struct tc_mirred *parm;
e9ce1cd3 82 struct tcf_mirred *m;
b76965e0 83 struct net_device *dev;
b2313077 84 bool exists = false;
16577923 85 int ret;
1da177e4 86
cee63723 87 if (nla == NULL)
1da177e4 88 return -EINVAL;
fceb6435 89 ret = nla_parse_nested(tb, TCA_MIRRED_MAX, nla, mirred_policy, NULL);
b76965e0
CG
90 if (ret < 0)
91 return ret;
53b2bf3f 92 if (tb[TCA_MIRRED_PARMS] == NULL)
1da177e4 93 return -EINVAL;
7ba699c6 94 parm = nla_data(tb[TCA_MIRRED_PARMS]);
87dfbdc6 95
65a206c0 96 exists = tcf_idr_check(tn, parm->index, a, bind);
87dfbdc6
JHS
97 if (exists && bind)
98 return 0;
99
b76965e0
CG
100 switch (parm->eaction) {
101 case TCA_EGRESS_MIRROR:
102 case TCA_EGRESS_REDIR:
53592b36
SL
103 case TCA_INGRESS_REDIR:
104 case TCA_INGRESS_MIRROR:
b76965e0
CG
105 break;
106 default:
87dfbdc6 107 if (exists)
65a206c0 108 tcf_idr_release(*a, bind);
b76965e0
CG
109 return -EINVAL;
110 }
1da177e4 111 if (parm->ifindex) {
c1b52739 112 dev = __dev_get_by_index(net, parm->ifindex);
87dfbdc6
JHS
113 if (dev == NULL) {
114 if (exists)
65a206c0 115 tcf_idr_release(*a, bind);
1da177e4 116 return -ENODEV;
87dfbdc6 117 }
dcf80034 118 mac_header_xmit = dev_is_mac_header_xmit(dev);
b76965e0
CG
119 } else {
120 dev = NULL;
1da177e4
LT
121 }
122
87dfbdc6 123 if (!exists) {
b76965e0 124 if (dev == NULL)
1da177e4 125 return -EINVAL;
65a206c0
CM
126 ret = tcf_idr_create(tn, parm->index, est, a,
127 &act_mirred_ops, bind, true);
86062033
WC
128 if (ret)
129 return ret;
1da177e4
LT
130 ret = ACT_P_CREATED;
131 } else {
65a206c0 132 tcf_idr_release(*a, bind);
215c90af 133 if (!ovr)
1da177e4 134 return -EEXIST;
1da177e4 135 }
a85a970a 136 m = to_mirred(*a);
1da177e4 137
2ee22a90 138 ASSERT_RTNL();
e9ce1cd3
DM
139 m->tcf_action = parm->action;
140 m->tcfm_eaction = parm->eaction;
b76965e0 141 if (dev != NULL) {
e9ce1cd3 142 m->tcfm_ifindex = parm->ifindex;
843e79d0 143 m->net = net;
1da177e4 144 if (ret != ACT_P_CREATED)
2ee22a90 145 dev_put(rcu_dereference_protected(m->tcfm_dev, 1));
1da177e4 146 dev_hold(dev);
2ee22a90 147 rcu_assign_pointer(m->tcfm_dev, dev);
16577923 148 m->tcfm_mac_header_xmit = mac_header_xmit;
1da177e4 149 }
2ee22a90 150
3b87956e 151 if (ret == ACT_P_CREATED) {
6bd00b85 152 spin_lock_bh(&mirred_list_lock);
3b87956e 153 list_add(&m->tcfm_list, &mirred_list);
6bd00b85 154 spin_unlock_bh(&mirred_list_lock);
65a206c0 155 tcf_idr_insert(tn, *a);
3b87956e 156 }
1da177e4 157
1da177e4
LT
158 return ret;
159}
160
dc7f9f6e 161static int tcf_mirred(struct sk_buff *skb, const struct tc_action *a,
e9ce1cd3 162 struct tcf_result *res)
1da177e4 163{
a85a970a 164 struct tcf_mirred *m = to_mirred(a);
53592b36 165 bool m_mac_header_xmit;
1da177e4 166 struct net_device *dev;
feed1f17 167 struct sk_buff *skb2;
53592b36
SL
168 int retval, err = 0;
169 int m_eaction;
170 int mac_len;
1da177e4 171
2ee22a90 172 tcf_lastuse_update(&m->tcf_tm);
2ee22a90 173 bstats_cpu_update(this_cpu_ptr(m->common.cpu_bstats), skb);
1da177e4 174
2ee22a90 175 rcu_read_lock();
53592b36
SL
176 m_mac_header_xmit = READ_ONCE(m->tcfm_mac_header_xmit);
177 m_eaction = READ_ONCE(m->tcfm_eaction);
2ee22a90
ED
178 retval = READ_ONCE(m->tcf_action);
179 dev = rcu_dereference(m->tcfm_dev);
180 if (unlikely(!dev)) {
181 pr_notice_once("tc mirred: target device is gone\n");
3b87956e 182 goto out;
183 }
184
2ee22a90 185 if (unlikely(!(dev->flags & IFF_UP))) {
e87cc472
JP
186 net_notice_ratelimited("tc mirred to Houston: device %s is down\n",
187 dev->name);
feed1f17 188 goto out;
1da177e4
LT
189 }
190
e578d9c0 191 skb2 = skb_clone(skb, GFP_ATOMIC);
2ee22a90 192 if (!skb2)
feed1f17 193 goto out;
1da177e4 194
53592b36
SL
195 /* If action's target direction differs than filter's direction,
196 * and devices expect a mac header on xmit, then mac push/pull is
197 * needed.
198 */
8dc07fdb 199 if (skb_at_tc_ingress(skb) != tcf_mirred_act_wants_ingress(m_eaction) &&
a5135bcf
WB
200 m_mac_header_xmit) {
201 if (!skb_at_tc_ingress(skb)) {
53592b36
SL
202 /* caught at egress, act ingress: pull mac */
203 mac_len = skb_network_header(skb) - skb_mac_header(skb);
204 skb_pull_rcsum(skb2, mac_len);
205 } else {
206 /* caught at ingress, act egress: push mac */
82a31b92 207 skb_push_rcsum(skb2, skb->mac_len);
53592b36 208 }
feed1f17 209 }
1da177e4
LT
210
211 /* mirror is always swallowed */
bc31c905
WB
212 if (tcf_mirred_is_act_redirect(m_eaction)) {
213 skb2->tc_redirected = 1;
214 skb2->tc_from_ingress = skb2->tc_at_ingress;
215 }
1da177e4 216
8964be4a 217 skb2->skb_iif = skb->dev->ifindex;
210d6de7 218 skb2->dev = dev;
8dc07fdb 219 if (!tcf_mirred_act_wants_ingress(m_eaction))
53592b36
SL
220 err = dev_queue_xmit(skb2);
221 else
222 err = netif_receive_skb(skb2);
feed1f17 223
feed1f17 224 if (err) {
2ee22a90
ED
225out:
226 qstats_overlimit_inc(this_cpu_ptr(m->common.cpu_qstats));
53592b36 227 if (tcf_mirred_is_act_redirect(m_eaction))
16c0b164 228 retval = TC_ACT_SHOT;
2ee22a90
ED
229 }
230 rcu_read_unlock();
feed1f17
CG
231
232 return retval;
1da177e4
LT
233}
234
9798e6fe
JK
235static void tcf_stats_update(struct tc_action *a, u64 bytes, u32 packets,
236 u64 lastuse)
237{
5712bf9c
PB
238 struct tcf_mirred *m = to_mirred(a);
239 struct tcf_t *tm = &m->tcf_tm;
240
9798e6fe 241 _bstats_cpu_update(this_cpu_ptr(a->cpu_bstats), bytes, packets);
3bb23421 242 tm->lastuse = max_t(u64, tm->lastuse, lastuse);
9798e6fe
JK
243}
244
5a7a5555
JHS
245static int tcf_mirred_dump(struct sk_buff *skb, struct tc_action *a, int bind,
246 int ref)
1da177e4 247{
27a884dc 248 unsigned char *b = skb_tail_pointer(skb);
a85a970a 249 struct tcf_mirred *m = to_mirred(a);
1c40be12
ED
250 struct tc_mirred opt = {
251 .index = m->tcf_index,
252 .action = m->tcf_action,
253 .refcnt = m->tcf_refcnt - ref,
254 .bindcnt = m->tcf_bindcnt - bind,
255 .eaction = m->tcfm_eaction,
256 .ifindex = m->tcfm_ifindex,
257 };
1da177e4
LT
258 struct tcf_t t;
259
1b34ec43
DM
260 if (nla_put(skb, TCA_MIRRED_PARMS, sizeof(opt), &opt))
261 goto nla_put_failure;
48d8ee16
JHS
262
263 tcf_tm_dump(&t, &m->tcf_tm);
9854518e 264 if (nla_put_64bit(skb, TCA_MIRRED_TM, sizeof(t), &t, TCA_MIRRED_PAD))
1b34ec43 265 goto nla_put_failure;
1da177e4
LT
266 return skb->len;
267
7ba699c6 268nla_put_failure:
dc5fc579 269 nlmsg_trim(skb, b);
1da177e4
LT
270 return -1;
271}
272
ddf97ccd
WC
273static int tcf_mirred_walker(struct net *net, struct sk_buff *skb,
274 struct netlink_callback *cb, int type,
a85a970a 275 const struct tc_action_ops *ops)
ddf97ccd
WC
276{
277 struct tc_action_net *tn = net_generic(net, mirred_net_id);
278
a85a970a 279 return tcf_generic_walker(tn, skb, cb, type, ops);
ddf97ccd
WC
280}
281
a85a970a 282static int tcf_mirred_search(struct net *net, struct tc_action **a, u32 index)
ddf97ccd
WC
283{
284 struct tc_action_net *tn = net_generic(net, mirred_net_id);
285
65a206c0 286 return tcf_idr_search(tn, a, index);
ddf97ccd
WC
287}
288
3b87956e 289static int mirred_device_event(struct notifier_block *unused,
290 unsigned long event, void *ptr)
291{
351638e7 292 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
3b87956e 293 struct tcf_mirred *m;
294
2ee22a90 295 ASSERT_RTNL();
6bd00b85
WC
296 if (event == NETDEV_UNREGISTER) {
297 spin_lock_bh(&mirred_list_lock);
3b87956e 298 list_for_each_entry(m, &mirred_list, tcfm_list) {
2ee22a90 299 if (rcu_access_pointer(m->tcfm_dev) == dev) {
3b87956e 300 dev_put(dev);
2ee22a90
ED
301 /* Note : no rcu grace period necessary, as
302 * net_device are already rcu protected.
303 */
304 RCU_INIT_POINTER(m->tcfm_dev, NULL);
3b87956e 305 }
306 }
6bd00b85
WC
307 spin_unlock_bh(&mirred_list_lock);
308 }
3b87956e 309
310 return NOTIFY_DONE;
311}
312
313static struct notifier_block mirred_device_notifier = {
314 .notifier_call = mirred_device_event,
315};
316
843e79d0 317static struct net_device *tcf_mirred_get_dev(const struct tc_action *a)
255cb304 318{
843e79d0 319 struct tcf_mirred *m = to_mirred(a);
255cb304 320
843e79d0 321 return __dev_get_by_index(m->net, m->tcfm_ifindex);
255cb304
HHZ
322}
323
1da177e4
LT
324static struct tc_action_ops act_mirred_ops = {
325 .kind = "mirred",
326 .type = TCA_ACT_MIRRED,
1da177e4
LT
327 .owner = THIS_MODULE,
328 .act = tcf_mirred,
9798e6fe 329 .stats_update = tcf_stats_update,
1da177e4 330 .dump = tcf_mirred_dump,
86062033 331 .cleanup = tcf_mirred_release,
1da177e4 332 .init = tcf_mirred_init,
ddf97ccd
WC
333 .walk = tcf_mirred_walker,
334 .lookup = tcf_mirred_search,
a85a970a 335 .size = sizeof(struct tcf_mirred),
843e79d0 336 .get_dev = tcf_mirred_get_dev,
ddf97ccd
WC
337};
338
339static __net_init int mirred_init_net(struct net *net)
340{
341 struct tc_action_net *tn = net_generic(net, mirred_net_id);
342
c7e460ce 343 return tc_action_net_init(tn, &act_mirred_ops);
ddf97ccd
WC
344}
345
346static void __net_exit mirred_exit_net(struct net *net)
347{
348 struct tc_action_net *tn = net_generic(net, mirred_net_id);
349
350 tc_action_net_exit(tn);
351}
352
353static struct pernet_operations mirred_net_ops = {
354 .init = mirred_init_net,
355 .exit = mirred_exit_net,
356 .id = &mirred_net_id,
357 .size = sizeof(struct tc_action_net),
1da177e4
LT
358};
359
360MODULE_AUTHOR("Jamal Hadi Salim(2002)");
361MODULE_DESCRIPTION("Device Mirror/redirect actions");
362MODULE_LICENSE("GPL");
363
e9ce1cd3 364static int __init mirred_init_module(void)
1da177e4 365{
3b87956e 366 int err = register_netdevice_notifier(&mirred_device_notifier);
367 if (err)
368 return err;
369
6ff9c364 370 pr_info("Mirror/redirect action on\n");
ddf97ccd 371 return tcf_register_action(&act_mirred_ops, &mirred_net_ops);
1da177e4
LT
372}
373
e9ce1cd3 374static void __exit mirred_cleanup_module(void)
1da177e4 375{
ddf97ccd 376 tcf_unregister_action(&act_mirred_ops, &mirred_net_ops);
568a153a 377 unregister_netdevice_notifier(&mirred_device_notifier);
1da177e4
LT
378}
379
380module_init(mirred_init_module);
381module_exit(mirred_cleanup_module);