include/uapi/linux/pkt_cls.h

   1 #ifndef __LINUX_PKT_CLS_H
   2 #define __LINUX_PKT_CLS_H
   3
   4 #include <linux/types.h>
   5 #include <linux/pkt_sched.h>
   6
   7 #ifdef __KERNEL__
   8 /* I think i could have done better macros ; for now this is stolen from
   9  * some arch/mips code - jhs
  10 */
  11 #define _TC_MAKE32(x) ((x))
  12
  13 #define _TC_MAKEMASK1(n) (_TC_MAKE32(1) << _TC_MAKE32(n))
  14 #define _TC_MAKEMASK(v,n) (_TC_MAKE32((_TC_MAKE32(1)<<(v))-1) << _TC_MAKE32(n))
  15 #define _TC_MAKEVALUE(v,n) (_TC_MAKE32(v) << _TC_MAKE32(n))
  16 #define _TC_GETVALUE(v,n,m) ((_TC_MAKE32(v) & _TC_MAKE32(m)) >> _TC_MAKE32(n))
  17
  18 /* verdict bit breakdown
  19  *
  20 bit 0: when set -> this packet has been munged already
  21
  22 bit 1: when set -> It is ok to munge this packet
  23
  24 bit 2,3,4,5: Reclassify counter - sort of reverse TTL - if exceeded
  25 assume loop
  26
  27 bit 6,7: Where this packet was last seen
  28 0: Above the transmit example at the socket level
  29 1: on the Ingress
  30 2: on the Egress
  31
  32 bit 8: when set --> Request not to classify on ingress.
  33
  34 bits 9,10,11: redirect counter -  redirect TTL. Loop avoidance
  35
  36  *
  37  * */
  38
  39 #define S_TC_FROM          _TC_MAKE32(6)
  40 #define M_TC_FROM          _TC_MAKEMASK(2,S_TC_FROM)
  41 #define G_TC_FROM(x)       _TC_GETVALUE(x,S_TC_FROM,M_TC_FROM)
  42 #define V_TC_FROM(x)       _TC_MAKEVALUE(x,S_TC_FROM)
  43 #define SET_TC_FROM(v,n)   ((V_TC_FROM(n)) | (v & ~M_TC_FROM))
  44 #define AT_STACK        0x0
  45 #define AT_INGRESS      0x1
  46 #define AT_EGRESS       0x2
  47
  48 #define TC_NCLS          _TC_MAKEMASK1(8)
  49 #define SET_TC_NCLS(v)   ( TC_NCLS | (v & ~TC_NCLS))
  50 #define CLR_TC_NCLS(v)   ( v & ~TC_NCLS)
  51
  52 #define S_TC_AT          _TC_MAKE32(12)
  53 #define M_TC_AT          _TC_MAKEMASK(2,S_TC_AT)
  54 #define G_TC_AT(x)       _TC_GETVALUE(x,S_TC_AT,M_TC_AT)
  55 #define V_TC_AT(x)       _TC_MAKEVALUE(x,S_TC_AT)
  56 #define SET_TC_AT(v,n)   ((V_TC_AT(n)) | (v & ~M_TC_AT))
  57
  58 #define MAX_REC_LOOP 4
  59 #define MAX_RED_LOOP 4
  60 #endif
  61
  62 /* Action attributes */
  63 enum {
  64         TCA_ACT_UNSPEC,
  65         TCA_ACT_KIND,
  66         TCA_ACT_OPTIONS,
  67         TCA_ACT_INDEX,
  68         TCA_ACT_STATS,
  69         TCA_ACT_PAD,
  70         __TCA_ACT_MAX
  71 };
  72
  73 #define TCA_ACT_MAX __TCA_ACT_MAX
  74 #define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
  75 #define TCA_ACT_MAX_PRIO 32
  76 #define TCA_ACT_BIND    1
  77 #define TCA_ACT_NOBIND  0
  78 #define TCA_ACT_UNBIND  1
  79 #define TCA_ACT_NOUNBIND        0
  80 #define TCA_ACT_REPLACE         1
  81 #define TCA_ACT_NOREPLACE       0
  82
  83 #define TC_ACT_UNSPEC   (-1)
  84 #define TC_ACT_OK               0
  85 #define TC_ACT_RECLASSIFY       1
  86 #define TC_ACT_SHOT             2
  87 #define TC_ACT_PIPE             3
  88 #define TC_ACT_STOLEN           4
  89 #define TC_ACT_QUEUED           5
  90 #define TC_ACT_REPEAT           6
  91 #define TC_ACT_REDIRECT         7
  92 #define TC_ACT_JUMP             0x10000000
  93
  94 /* Action type identifiers*/
  95 enum {
  96         TCA_ID_UNSPEC=0,
  97         TCA_ID_POLICE=1,
  98         /* other actions go here */
  99         __TCA_ID_MAX=255
 100 };
 101
 102 #define TCA_ID_MAX __TCA_ID_MAX
 103
 104 struct tc_police {
 105         __u32                   index;
 106         int                     action;
 107 #define TC_POLICE_UNSPEC        TC_ACT_UNSPEC
 108 #define TC_POLICE_OK            TC_ACT_OK
 109 #define TC_POLICE_RECLASSIFY    TC_ACT_RECLASSIFY
 110 #define TC_POLICE_SHOT          TC_ACT_SHOT
 111 #define TC_POLICE_PIPE          TC_ACT_PIPE
 112
 113         __u32                   limit;
 114         __u32                   burst;
 115         __u32                   mtu;
 116         struct tc_ratespec      rate;
 117         struct tc_ratespec      peakrate;
 118         int                     refcnt;
 119         int                     bindcnt;
 120         __u32                   capab;
 121 };
 122
 123 struct tcf_t {
 124         __u64   install;
 125         __u64   lastuse;
 126         __u64   expires;
 127         __u64   firstuse;
 128 };
 129
 130 struct tc_cnt {
 131         int                   refcnt;
 132         int                   bindcnt;
 133 };
 134
 135 #define tc_gen \
 136         __u32                 index; \
 137         __u32                 capab; \
 138         int                   action; \
 139         int                   refcnt; \
 140         int                   bindcnt
 141
 142 enum {
 143         TCA_POLICE_UNSPEC,
 144         TCA_POLICE_TBF,
 145         TCA_POLICE_RATE,
 146         TCA_POLICE_PEAKRATE,
 147         TCA_POLICE_AVRATE,
 148         TCA_POLICE_RESULT,
 149         TCA_POLICE_TM,
 150         TCA_POLICE_PAD,
 151         __TCA_POLICE_MAX
 152 #define TCA_POLICE_RESULT TCA_POLICE_RESULT
 153 };
 154
 155 #define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)
 156
 157 /* tca flags definitions */
 158 #define TCA_CLS_FLAGS_SKIP_HW   (1 << 0) /* don't offload filter to HW */
 159 #define TCA_CLS_FLAGS_SKIP_SW   (1 << 1) /* don't use filter in SW */
 160 #define TCA_CLS_FLAGS_IN_HW     (1 << 2) /* filter is offloaded to HW */
 161 #define TCA_CLS_FLAGS_NOT_IN_HW (1 << 3) /* filter isn't offloaded to HW */
 162
 163 /* U32 filters */
 164
 165 #define TC_U32_HTID(h) ((h)&0xFFF00000)
 166 #define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
 167 #define TC_U32_HASH(h) (((h)>>12)&0xFF)
 168 #define TC_U32_NODE(h) ((h)&0xFFF)
 169 #define TC_U32_KEY(h) ((h)&0xFFFFF)
 170 #define TC_U32_UNSPEC   0
 171 #define TC_U32_ROOT     (0xFFF00000)
 172
 173 enum {
 174         TCA_U32_UNSPEC,
 175         TCA_U32_CLASSID,
 176         TCA_U32_HASH,
 177         TCA_U32_LINK,
 178         TCA_U32_DIVISOR,
 179         TCA_U32_SEL,
 180         TCA_U32_POLICE,
 181         TCA_U32_ACT,
 182         TCA_U32_INDEV,
 183         TCA_U32_PCNT,
 184         TCA_U32_MARK,
 185         TCA_U32_FLAGS,
 186         TCA_U32_PAD,
 187         __TCA_U32_MAX
 188 };
 189
 190 #define TCA_U32_MAX (__TCA_U32_MAX - 1)
 191
 192 struct tc_u32_key {
 193         __be32          mask;
 194         __be32          val;
 195         int             off;
 196         int             offmask;
 197 };
 198
 199 struct tc_u32_sel {
 200         unsigned char           flags;
 201         unsigned char           offshift;
 202         unsigned char           nkeys;
 203
 204         __be16                  offmask;
 205         __u16                   off;
 206         short                   offoff;
 207
 208         short                   hoff;
 209         __be32                  hmask;
 210         struct tc_u32_key       keys[0];
 211 };
 212
 213 struct tc_u32_mark {
 214         __u32           val;
 215         __u32           mask;
 216         __u32           success;
 217 };
 218
 219 struct tc_u32_pcnt {
 220         __u64 rcnt;
 221         __u64 rhit;
 222         __u64 kcnts[0];
 223 };
 224
 225 /* Flags */
 226
 227 #define TC_U32_TERMINAL         1
 228 #define TC_U32_OFFSET           2
 229 #define TC_U32_VAROFFSET        4
 230 #define TC_U32_EAT              8
 231
 232 #define TC_U32_MAXDEPTH 8
 233
 234
 235 /* RSVP filter */
 236
 237 enum {
 238         TCA_RSVP_UNSPEC,
 239         TCA_RSVP_CLASSID,
 240         TCA_RSVP_DST,
 241         TCA_RSVP_SRC,
 242         TCA_RSVP_PINFO,
 243         TCA_RSVP_POLICE,
 244         TCA_RSVP_ACT,
 245         __TCA_RSVP_MAX
 246 };
 247
 248 #define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )
 249
 250 struct tc_rsvp_gpi {
 251         __u32   key;
 252         __u32   mask;
 253         int     offset;
 254 };
 255
 256 struct tc_rsvp_pinfo {
 257         struct tc_rsvp_gpi dpi;
 258         struct tc_rsvp_gpi spi;
 259         __u8    protocol;
 260         __u8    tunnelid;
 261         __u8    tunnelhdr;
 262         __u8    pad;
 263 };
 264
 265 /* ROUTE filter */
 266
 267 enum {
 268         TCA_ROUTE4_UNSPEC,
 269         TCA_ROUTE4_CLASSID,
 270         TCA_ROUTE4_TO,
 271         TCA_ROUTE4_FROM,
 272         TCA_ROUTE4_IIF,
 273         TCA_ROUTE4_POLICE,
 274         TCA_ROUTE4_ACT,
 275         __TCA_ROUTE4_MAX
 276 };
 277
 278 #define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)
 279
 280
 281 /* FW filter */
 282
 283 enum {
 284         TCA_FW_UNSPEC,
 285         TCA_FW_CLASSID,
 286         TCA_FW_POLICE,
 287         TCA_FW_INDEV, /*  used by CONFIG_NET_CLS_IND */
 288         TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
 289         TCA_FW_MASK,
 290         __TCA_FW_MAX
 291 };
 292
 293 #define TCA_FW_MAX (__TCA_FW_MAX - 1)
 294
 295 /* TC index filter */
 296
 297 enum {
 298         TCA_TCINDEX_UNSPEC,
 299         TCA_TCINDEX_HASH,
 300         TCA_TCINDEX_MASK,
 301         TCA_TCINDEX_SHIFT,
 302         TCA_TCINDEX_FALL_THROUGH,
 303         TCA_TCINDEX_CLASSID,
 304         TCA_TCINDEX_POLICE,
 305         TCA_TCINDEX_ACT,
 306         __TCA_TCINDEX_MAX
 307 };
 308
 309 #define TCA_TCINDEX_MAX     (__TCA_TCINDEX_MAX - 1)
 310
 311 /* Flow filter */
 312
 313 enum {
 314         FLOW_KEY_SRC,
 315         FLOW_KEY_DST,
 316         FLOW_KEY_PROTO,
 317         FLOW_KEY_PROTO_SRC,
 318         FLOW_KEY_PROTO_DST,
 319         FLOW_KEY_IIF,
 320         FLOW_KEY_PRIORITY,
 321         FLOW_KEY_MARK,
 322         FLOW_KEY_NFCT,
 323         FLOW_KEY_NFCT_SRC,
 324         FLOW_KEY_NFCT_DST,
 325         FLOW_KEY_NFCT_PROTO_SRC,
 326         FLOW_KEY_NFCT_PROTO_DST,
 327         FLOW_KEY_RTCLASSID,
 328         FLOW_KEY_SKUID,
 329         FLOW_KEY_SKGID,
 330         FLOW_KEY_VLAN_TAG,
 331         FLOW_KEY_RXHASH,
 332         __FLOW_KEY_MAX,
 333 };
 334
 335 #define FLOW_KEY_MAX    (__FLOW_KEY_MAX - 1)
 336
 337 enum {
 338         FLOW_MODE_MAP,
 339         FLOW_MODE_HASH,
 340 };
 341
 342 enum {
 343         TCA_FLOW_UNSPEC,
 344         TCA_FLOW_KEYS,
 345         TCA_FLOW_MODE,
 346         TCA_FLOW_BASECLASS,
 347         TCA_FLOW_RSHIFT,
 348         TCA_FLOW_ADDEND,
 349         TCA_FLOW_MASK,
 350         TCA_FLOW_XOR,
 351         TCA_FLOW_DIVISOR,
 352         TCA_FLOW_ACT,
 353         TCA_FLOW_POLICE,
 354         TCA_FLOW_EMATCHES,
 355         TCA_FLOW_PERTURB,
 356         __TCA_FLOW_MAX
 357 };
 358
 359 #define TCA_FLOW_MAX    (__TCA_FLOW_MAX - 1)
 360
 361 /* Basic filter */
 362
 363 enum {
 364         TCA_BASIC_UNSPEC,
 365         TCA_BASIC_CLASSID,
 366         TCA_BASIC_EMATCHES,
 367         TCA_BASIC_ACT,
 368         TCA_BASIC_POLICE,
 369         __TCA_BASIC_MAX
 370 };
 371
 372 #define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)
 373
 374
 375 /* Cgroup classifier */
 376
 377 enum {
 378         TCA_CGROUP_UNSPEC,
 379         TCA_CGROUP_ACT,
 380         TCA_CGROUP_POLICE,
 381         TCA_CGROUP_EMATCHES,
 382         __TCA_CGROUP_MAX,
 383 };
 384
 385 #define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)
 386
 387 /* BPF classifier */
 388
 389 #define TCA_BPF_FLAG_ACT_DIRECT         (1 << 0)
 390
 391 enum {
 392         TCA_BPF_UNSPEC,
 393         TCA_BPF_ACT,
 394         TCA_BPF_POLICE,
 395         TCA_BPF_CLASSID,
 396         TCA_BPF_OPS_LEN,
 397         TCA_BPF_OPS,
 398         TCA_BPF_FD,
 399         TCA_BPF_NAME,
 400         TCA_BPF_FLAGS,
 401         TCA_BPF_FLAGS_GEN,
 402         TCA_BPF_TAG,
 403         __TCA_BPF_MAX,
 404 };
 405
 406 #define TCA_BPF_MAX (__TCA_BPF_MAX - 1)
 407
 408 /* Flower classifier */
 409
 410 enum {
 411         TCA_FLOWER_UNSPEC,
 412         TCA_FLOWER_CLASSID,
 413         TCA_FLOWER_INDEV,
 414         TCA_FLOWER_ACT,
 415         TCA_FLOWER_KEY_ETH_DST,         /* ETH_ALEN */
 416         TCA_FLOWER_KEY_ETH_DST_MASK,    /* ETH_ALEN */
 417         TCA_FLOWER_KEY_ETH_SRC,         /* ETH_ALEN */
 418         TCA_FLOWER_KEY_ETH_SRC_MASK,    /* ETH_ALEN */
 419         TCA_FLOWER_KEY_ETH_TYPE,        /* be16 */
 420         TCA_FLOWER_KEY_IP_PROTO,        /* u8 */
 421         TCA_FLOWER_KEY_IPV4_SRC,        /* be32 */
 422         TCA_FLOWER_KEY_IPV4_SRC_MASK,   /* be32 */
 423         TCA_FLOWER_KEY_IPV4_DST,        /* be32 */
 424         TCA_FLOWER_KEY_IPV4_DST_MASK,   /* be32 */
 425         TCA_FLOWER_KEY_IPV6_SRC,        /* struct in6_addr */
 426         TCA_FLOWER_KEY_IPV6_SRC_MASK,   /* struct in6_addr */
 427         TCA_FLOWER_KEY_IPV6_DST,        /* struct in6_addr */
 428         TCA_FLOWER_KEY_IPV6_DST_MASK,   /* struct in6_addr */
 429         TCA_FLOWER_KEY_TCP_SRC,         /* be16 */
 430         TCA_FLOWER_KEY_TCP_DST,         /* be16 */
 431         TCA_FLOWER_KEY_UDP_SRC,         /* be16 */
 432         TCA_FLOWER_KEY_UDP_DST,         /* be16 */
 433
 434         TCA_FLOWER_FLAGS,
 435         TCA_FLOWER_KEY_VLAN_ID,         /* be16 */
 436         TCA_FLOWER_KEY_VLAN_PRIO,       /* u8   */
 437         TCA_FLOWER_KEY_VLAN_ETH_TYPE,   /* be16 */
 438
 439         TCA_FLOWER_KEY_ENC_KEY_ID,      /* be32 */
 440         TCA_FLOWER_KEY_ENC_IPV4_SRC,    /* be32 */
 441         TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK,/* be32 */
 442         TCA_FLOWER_KEY_ENC_IPV4_DST,    /* be32 */
 443         TCA_FLOWER_KEY_ENC_IPV4_DST_MASK,/* be32 */
 444         TCA_FLOWER_KEY_ENC_IPV6_SRC,    /* struct in6_addr */
 445         TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK,/* struct in6_addr */
 446         TCA_FLOWER_KEY_ENC_IPV6_DST,    /* struct in6_addr */
 447         TCA_FLOWER_KEY_ENC_IPV6_DST_MASK,/* struct in6_addr */
 448
 449         TCA_FLOWER_KEY_TCP_SRC_MASK,    /* be16 */
 450         TCA_FLOWER_KEY_TCP_DST_MASK,    /* be16 */
 451         TCA_FLOWER_KEY_UDP_SRC_MASK,    /* be16 */
 452         TCA_FLOWER_KEY_UDP_DST_MASK,    /* be16 */
 453         TCA_FLOWER_KEY_SCTP_SRC_MASK,   /* be16 */
 454         TCA_FLOWER_KEY_SCTP_DST_MASK,   /* be16 */
 455
 456         TCA_FLOWER_KEY_SCTP_SRC,        /* be16 */
 457         TCA_FLOWER_KEY_SCTP_DST,        /* be16 */
 458
 459         TCA_FLOWER_KEY_ENC_UDP_SRC_PORT,        /* be16 */
 460         TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK,   /* be16 */
 461         TCA_FLOWER_KEY_ENC_UDP_DST_PORT,        /* be16 */
 462         TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK,   /* be16 */
 463
 464         TCA_FLOWER_KEY_FLAGS,           /* be32 */
 465         TCA_FLOWER_KEY_FLAGS_MASK,      /* be32 */
 466
 467         TCA_FLOWER_KEY_ICMPV4_CODE,     /* u8 */
 468         TCA_FLOWER_KEY_ICMPV4_CODE_MASK,/* u8 */
 469         TCA_FLOWER_KEY_ICMPV4_TYPE,     /* u8 */
 470         TCA_FLOWER_KEY_ICMPV4_TYPE_MASK,/* u8 */
 471         TCA_FLOWER_KEY_ICMPV6_CODE,     /* u8 */
 472         TCA_FLOWER_KEY_ICMPV6_CODE_MASK,/* u8 */
 473         TCA_FLOWER_KEY_ICMPV6_TYPE,     /* u8 */
 474         TCA_FLOWER_KEY_ICMPV6_TYPE_MASK,/* u8 */
 475
 476         __TCA_FLOWER_MAX,
 477 };
 478
 479 #define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)
 480
 481 enum {
 482         TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT = (1 << 0),
 483 };
 484
 485 /* Match-all classifier */
 486
 487 enum {
 488         TCA_MATCHALL_UNSPEC,
 489         TCA_MATCHALL_CLASSID,
 490         TCA_MATCHALL_ACT,
 491         TCA_MATCHALL_FLAGS,
 492         __TCA_MATCHALL_MAX,
 493 };
 494
 495 #define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)
 496
 497 /* Extended Matches */
 498
 499 struct tcf_ematch_tree_hdr {
 500         __u16           nmatches;
 501         __u16           progid;
 502 };
 503
 504 enum {
 505         TCA_EMATCH_TREE_UNSPEC,
 506         TCA_EMATCH_TREE_HDR,
 507         TCA_EMATCH_TREE_LIST,
 508         __TCA_EMATCH_TREE_MAX
 509 };
 510 #define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)
 511
 512 struct tcf_ematch_hdr {
 513         __u16           matchid;
 514         __u16           kind;
 515         __u16           flags;
 516         __u16           pad; /* currently unused */
 517 };
 518
 519 /*  0                   1
 520  *  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
 521  * +-----------------------+-+-+---+
 522  * |         Unused        |S|I| R |
 523  * +-----------------------+-+-+---+
 524  *
 525  * R(2) ::= relation to next ematch
 526  *          where: 0 0 END (last ematch)
 527  *                 0 1 AND
 528  *                 1 0 OR
 529  *                 1 1 Unused (invalid)
 530  * I(1) ::= invert result
 531  * S(1) ::= simple payload
 532  */
 533 #define TCF_EM_REL_END  0
 534 #define TCF_EM_REL_AND  (1<<0)
 535 #define TCF_EM_REL_OR   (1<<1)
 536 #define TCF_EM_INVERT   (1<<2)
 537 #define TCF_EM_SIMPLE   (1<<3)
 538
 539 #define TCF_EM_REL_MASK 3
 540 #define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)
 541
 542 enum {
 543         TCF_LAYER_LINK,
 544         TCF_LAYER_NETWORK,
 545         TCF_LAYER_TRANSPORT,
 546         __TCF_LAYER_MAX
 547 };
 548 #define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)
 549
 550 /* Ematch type assignments
 551  *   1..32767           Reserved for ematches inside kernel tree
 552  *   32768..65535       Free to use, not reliable
 553  */
 554 #define TCF_EM_CONTAINER        0
 555 #define TCF_EM_CMP              1
 556 #define TCF_EM_NBYTE            2
 557 #define TCF_EM_U32              3
 558 #define TCF_EM_META             4
 559 #define TCF_EM_TEXT             5
 560 #define TCF_EM_VLAN             6
 561 #define TCF_EM_CANID            7
 562 #define TCF_EM_IPSET            8
 563 #define TCF_EM_MAX              8
 564
 565 enum {
 566         TCF_EM_PROG_TC
 567 };
 568
 569 enum {
 570         TCF_EM_OPND_EQ,
 571         TCF_EM_OPND_GT,
 572         TCF_EM_OPND_LT
 573 };
 574
 575 #endif