]>
Commit | Line | Data |
---|---|---|
00fa8480 | 1 | /* |
ae665a52 | 2 | * m_egress.c ingress/egress packet mirror/redir actions module |
00fa8480 | 3 | * |
4 | * This program is free software; you can distribute it and/or | |
5 | * modify it under the terms of the GNU General Public License | |
6 | * as published by the Free Software Foundation; either version | |
7 | * 2 of the License, or (at your option) any later version. | |
8 | * | |
ae665a52 SH |
9 | * Authors: J Hadi Salim (hadi@cyberus.ca) |
10 | * | |
00fa8480 | 11 | * TODO: Add Ingress support |
12 | * | |
13 | */ | |
14 | ||
15 | #include <stdio.h> | |
16 | #include <stdlib.h> | |
17 | #include <unistd.h> | |
00fa8480 | 18 | #include <fcntl.h> |
19 | #include <sys/socket.h> | |
20 | #include <netinet/in.h> | |
21 | #include <arpa/inet.h> | |
22 | #include <string.h> | |
23 | #include "utils.h" | |
24 | #include "tc_util.h" | |
c1027a75 | 25 | #include "tc_common.h" |
00fa8480 | 26 | #include <linux/tc_act/tc_mirred.h> |
27 | ||
00fa8480 | 28 | static void |
29 | explain(void) | |
30 | { | |
c6a656f4 SH |
31 | fprintf(stderr, |
32 | "Usage: mirred <DIRECTION> <ACTION> [index INDEX] <dev DEVICENAME>\n" | |
33 | "where:\n" | |
34 | "\tDIRECTION := <ingress | egress>\n" | |
35 | "\tACTION := <mirror | redirect>\n" | |
36 | "\tINDEX is the specific policy instance id\n" | |
37 | "\tDEVICENAME is the devicename\n"); | |
00fa8480 | 38 | } |
39 | ||
ebf32083 JHS |
40 | static void |
41 | usage(void) | |
42 | { | |
43 | explain(); | |
44 | exit(-1); | |
45 | } | |
00fa8480 | 46 | |
d1f28cf1 | 47 | static const char *mirred_n2a(int action) |
00fa8480 | 48 | { |
49 | switch (action) { | |
50 | case TCA_EGRESS_REDIR: | |
51 | return "Egress Redirect"; | |
52 | case TCA_INGRESS_REDIR: | |
53 | return "Ingress Redirect"; | |
54 | case TCA_EGRESS_MIRROR: | |
55 | return "Egress Mirror"; | |
56 | case TCA_INGRESS_MIRROR: | |
57 | return "Ingress Mirror"; | |
58 | default: | |
59 | return "unknown"; | |
60 | } | |
61 | } | |
62 | ||
502c4adf JP |
63 | static const char *mirred_direction(int action) |
64 | { | |
65 | switch (action) { | |
66 | case TCA_EGRESS_REDIR: | |
67 | case TCA_EGRESS_MIRROR: | |
68 | return "egress"; | |
69 | case TCA_INGRESS_REDIR: | |
70 | case TCA_INGRESS_MIRROR: | |
71 | return "ingress"; | |
72 | default: | |
73 | return "unknown"; | |
74 | } | |
75 | } | |
76 | ||
77 | static const char *mirred_action(int action) | |
78 | { | |
79 | switch (action) { | |
80 | case TCA_EGRESS_REDIR: | |
81 | case TCA_INGRESS_REDIR: | |
82 | return "redirect"; | |
83 | case TCA_EGRESS_MIRROR: | |
84 | case TCA_INGRESS_MIRROR: | |
85 | return "mirror"; | |
86 | default: | |
87 | return "unknown"; | |
88 | } | |
89 | } | |
90 | ||
d1f28cf1 | 91 | static int |
5eca0a37 SL |
92 | parse_direction(struct action_util *a, int *argc_p, char ***argv_p, |
93 | int tca_id, struct nlmsghdr *n) | |
00fa8480 | 94 | { |
95 | ||
96 | int argc = *argc_p; | |
97 | char **argv = *argv_p; | |
5eca0a37 | 98 | int ok = 0, iok = 0, mirror = 0, redir = 0, ingress = 0, egress = 0; |
d17b136f | 99 | struct tc_mirred p = {}; |
00fa8480 | 100 | struct rtattr *tail; |
b317557f | 101 | char d[IFNAMSIZ] = {}; |
00fa8480 | 102 | |
103 | while (argc > 0) { | |
104 | ||
105 | if (matches(*argv, "action") == 0) { | |
75ef7b18 | 106 | NEXT_ARG(); |
00fa8480 | 107 | break; |
5eca0a37 SL |
108 | } else if (!egress && matches(*argv, "egress") == 0) { |
109 | egress = 1; | |
110 | if (ingress) { | |
c6a656f4 SH |
111 | fprintf(stderr, |
112 | "Can't have both egress and ingress\n"); | |
5eca0a37 SL |
113 | return -1; |
114 | } | |
115 | NEXT_ARG(); | |
116 | ok++; | |
117 | continue; | |
118 | } else if (!ingress && matches(*argv, "ingress") == 0) { | |
119 | ingress = 1; | |
120 | if (egress) { | |
c6a656f4 SH |
121 | fprintf(stderr, |
122 | "Can't have both ingress and egress\n"); | |
5eca0a37 SL |
123 | return -1; |
124 | } | |
00fa8480 | 125 | NEXT_ARG(); |
126 | ok++; | |
127 | continue; | |
128 | } else { | |
129 | ||
130 | if (matches(*argv, "index") == 0) { | |
131 | NEXT_ARG(); | |
132 | if (get_u32(&p.index, *argv, 10)) { | |
133 | fprintf(stderr, "Illegal \"index\"\n"); | |
134 | return -1; | |
135 | } | |
136 | iok++; | |
137 | if (!ok) { | |
138 | argc--; | |
139 | argv++; | |
140 | break; | |
141 | } | |
32a121cb | 142 | } else if (!ok) { |
c6a656f4 SH |
143 | fprintf(stderr, |
144 | "was expecting egress or ingress (%s)\n", | |
145 | *argv); | |
00fa8480 | 146 | break; |
147 | ||
148 | } else if (!mirror && matches(*argv, "mirror") == 0) { | |
32a121cb | 149 | mirror = 1; |
00fa8480 | 150 | if (redir) { |
c6a656f4 SH |
151 | fprintf(stderr, |
152 | "Can't have both mirror and redir\n"); | |
00fa8480 | 153 | return -1; |
154 | } | |
5eca0a37 | 155 | p.eaction = egress ? TCA_EGRESS_MIRROR : |
c6a656f4 | 156 | TCA_INGRESS_MIRROR; |
00fa8480 | 157 | p.action = TC_ACT_PIPE; |
158 | ok++; | |
159 | } else if (!redir && matches(*argv, "redirect") == 0) { | |
32a121cb | 160 | redir = 1; |
00fa8480 | 161 | if (mirror) { |
c6a656f4 SH |
162 | fprintf(stderr, |
163 | "Can't have both mirror and redir\n"); | |
00fa8480 | 164 | return -1; |
165 | } | |
5eca0a37 | 166 | p.eaction = egress ? TCA_EGRESS_REDIR : |
c6a656f4 | 167 | TCA_INGRESS_REDIR; |
00fa8480 | 168 | p.action = TC_ACT_STOLEN; |
169 | ok++; | |
c6a656f4 SH |
170 | } else if ((redir || mirror) && |
171 | matches(*argv, "dev") == 0) { | |
00fa8480 | 172 | NEXT_ARG(); |
173 | if (strlen(d)) | |
174 | duparg("dev", *argv); | |
175 | ||
176 | strncpy(d, *argv, sizeof(d)-1); | |
177 | argc--; | |
178 | argv++; | |
179 | ||
180 | break; | |
181 | ||
182 | } | |
183 | } | |
184 | ||
185 | NEXT_ARG(); | |
186 | } | |
187 | ||
c6a656f4 | 188 | if (!ok && !iok) |
00fa8480 | 189 | return -1; |
00fa8480 | 190 | |
191 | if (d[0]) { | |
192 | int idx; | |
32a121cb | 193 | |
00fa8480 | 194 | ll_init_map(&rth); |
195 | ||
c6a656f4 | 196 | idx = ll_name_to_index(d); |
fe99adbc SP |
197 | if (!idx) |
198 | return nodev(d); | |
00fa8480 | 199 | |
200 | p.ifindex = idx; | |
00fa8480 | 201 | } |
202 | ||
203 | ||
75ef7b18 | 204 | if (p.eaction == TCA_EGRESS_MIRROR || p.eaction == TCA_INGRESS_MIRROR) |
6eccf7ec PA |
205 | parse_action_control_dflt(&argc, &argv, &p.action, false, |
206 | TC_ACT_PIPE); | |
00fa8480 | 207 | |
208 | if (argc) { | |
209 | if (iok && matches(*argv, "index") == 0) { | |
210 | fprintf(stderr, "mirred: Illegal double index\n"); | |
211 | return -1; | |
c6a656f4 SH |
212 | } |
213 | ||
214 | if (matches(*argv, "index") == 0) { | |
215 | NEXT_ARG(); | |
216 | if (get_u32(&p.index, *argv, 10)) { | |
217 | fprintf(stderr, | |
218 | "mirred: Illegal \"index\"\n"); | |
219 | return -1; | |
00fa8480 | 220 | } |
c6a656f4 SH |
221 | argc--; |
222 | argv++; | |
00fa8480 | 223 | } |
224 | } | |
225 | ||
c14f9d92 | 226 | tail = addattr_nest(n, MAX_MSG, tca_id); |
32a121cb | 227 | addattr_l(n, MAX_MSG, TCA_MIRRED_PARMS, &p, sizeof(p)); |
c14f9d92 | 228 | addattr_nest_end(n, tail); |
00fa8480 | 229 | |
230 | *argc_p = argc; | |
231 | *argv_p = argv; | |
232 | return 0; | |
233 | } | |
234 | ||
235 | ||
d1f28cf1 SH |
236 | static int |
237 | parse_mirred(struct action_util *a, int *argc_p, char ***argv_p, | |
238 | int tca_id, struct nlmsghdr *n) | |
00fa8480 | 239 | { |
240 | ||
241 | int argc = *argc_p; | |
242 | char **argv = *argv_p; | |
243 | ||
244 | if (argc < 0) { | |
32a121cb | 245 | fprintf(stderr, "mirred bad argument count %d\n", argc); |
00fa8480 | 246 | return -1; |
247 | } | |
248 | ||
249 | if (matches(*argv, "mirred") == 0) { | |
250 | NEXT_ARG(); | |
251 | } else { | |
32a121cb | 252 | fprintf(stderr, "mirred bad argument %s\n", *argv); |
00fa8480 | 253 | return -1; |
254 | } | |
255 | ||
256 | ||
5eca0a37 SL |
257 | if (matches(*argv, "egress") == 0 || matches(*argv, "ingress") == 0 || |
258 | matches(*argv, "index") == 0) { | |
259 | int ret = parse_direction(a, &argc, &argv, tca_id, n); | |
32a121cb | 260 | |
00fa8480 | 261 | if (ret == 0) { |
262 | *argc_p = argc; | |
263 | *argv_p = argv; | |
264 | return 0; | |
265 | } | |
266 | ||
ebf32083 JHS |
267 | } else if (matches(*argv, "help") == 0) { |
268 | usage(); | |
00fa8480 | 269 | } else { |
32a121cb | 270 | fprintf(stderr, "mirred option not supported %s\n", *argv); |
00fa8480 | 271 | } |
272 | ||
273 | return -1; | |
ae665a52 | 274 | |
00fa8480 | 275 | } |
276 | ||
d1f28cf1 | 277 | static int |
c6a656f4 | 278 | print_mirred(struct action_util *au, FILE *f, struct rtattr *arg) |
00fa8480 | 279 | { |
280 | struct tc_mirred *p; | |
281 | struct rtattr *tb[TCA_MIRRED_MAX + 1]; | |
00fa8480 | 282 | const char *dev; |
32a121cb | 283 | |
a99ebeee | 284 | print_string(PRINT_ANY, "kind", "%s ", "mirred"); |
00fa8480 | 285 | if (arg == NULL) |
a99ebeee | 286 | return 0; |
00fa8480 | 287 | |
5cb5ee34 | 288 | parse_rtattr_nested(tb, TCA_MIRRED_MAX, arg); |
00fa8480 | 289 | |
290 | if (tb[TCA_MIRRED_PARMS] == NULL) { | |
d5ddb441 | 291 | fprintf(stderr, "Missing mirred parameters\n"); |
00fa8480 | 292 | return -1; |
293 | } | |
294 | p = RTA_DATA(tb[TCA_MIRRED_PARMS]); | |
295 | ||
c6a656f4 SH |
296 | dev = ll_index_to_name(p->ifindex); |
297 | if (dev == 0) { | |
00fa8480 | 298 | fprintf(stderr, "Cannot find device %d\n", p->ifindex); |
00fa8480 | 299 | return -1; |
300 | } | |
301 | ||
502c4adf JP |
302 | print_string(PRINT_FP, NULL, "(%s", mirred_n2a(p->eaction)); |
303 | print_string(PRINT_JSON, "mirred_action", NULL, | |
304 | mirred_action(p->eaction)); | |
305 | print_string(PRINT_JSON, "direction", NULL, | |
306 | mirred_direction(p->eaction)); | |
307 | print_string(PRINT_ANY, "to_dev", " to device %s)", dev); | |
e67aba55 | 308 | print_action_control(f, " ", p->action, ""); |
00fa8480 | 309 | |
7b0d424a SH |
310 | print_nl(); |
311 | print_uint(PRINT_ANY, "index", "\tindex %u", p->index); | |
502c4adf JP |
312 | print_int(PRINT_ANY, "ref", " ref %d", p->refcnt); |
313 | print_int(PRINT_ANY, "bind", " bind %d", p->bindcnt); | |
00fa8480 | 314 | |
315 | if (show_stats) { | |
316 | if (tb[TCA_MIRRED_TM]) { | |
317 | struct tcf_t *tm = RTA_DATA(tb[TCA_MIRRED_TM]); | |
32a121cb SH |
318 | |
319 | print_tm(f, tm); | |
00fa8480 | 320 | } |
321 | } | |
7b0d424a | 322 | print_nl(); |
00fa8480 | 323 | return 0; |
324 | } | |
325 | ||
6ce88ca6 | 326 | struct action_util mirred_action_util = { |
00fa8480 | 327 | .id = "mirred", |
328 | .parse_aopt = parse_mirred, | |
329 | .print_aopt = print_mirred, | |
330 | }; |