4 #include <linux/list.h>
5 #include <linux/wait.h>
6 #include <linux/workqueue.h>
7 #include <linux/xfrm.h>
8 #include <net/dst_ops.h>
10 struct ctl_table_header
;
12 struct xfrm_policy_hash
{
13 struct hlist_head
*table
;
18 struct list_head state_all
;
20 * Hash table to find appropriate SA towards given target (endpoint of
21 * tunnel or destination of transport mode) allowed by selector.
23 * Main use is finding SA after policy selected tunnel or transport
24 * mode. Also, it can be used by ah/esp icmp error handler to find
27 struct hlist_head
*state_bydst
;
28 struct hlist_head
*state_bysrc
;
29 struct hlist_head
*state_byspi
;
30 unsigned int state_hmask
;
31 unsigned int state_num
;
32 struct work_struct state_hash_work
;
33 struct hlist_head state_gc_list
;
34 struct work_struct state_gc_work
;
36 struct list_head policy_all
;
37 struct hlist_head
*policy_byidx
;
38 unsigned int policy_idx_hmask
;
39 struct hlist_head policy_inexact
[XFRM_POLICY_MAX
* 2];
40 struct xfrm_policy_hash policy_bydst
[XFRM_POLICY_MAX
* 2];
41 unsigned int policy_count
[XFRM_POLICY_MAX
* 2];
42 struct work_struct policy_hash_work
;
46 struct sock
*nlsk_stash
;
48 u32 sysctl_aevent_etime
;
49 u32 sysctl_aevent_rseqth
;
50 int sysctl_larval_drop
;
51 u32 sysctl_acq_expires
;
53 struct ctl_table_header
*sysctl_hdr
;
56 struct dst_ops xfrm4_dst_ops
;
57 #if IS_ENABLED(CONFIG_IPV6)
58 struct dst_ops xfrm6_dst_ops
;
60 spinlock_t xfrm_state_lock
;
61 spinlock_t xfrm_policy_sk_bundle_lock
;
62 rwlock_t xfrm_policy_lock
;
63 struct mutex xfrm_cfg_mutex
;