1 // SPDX-License-Identifier: GPL-2.0-or-later
3 * Bridge netlink control interface
6 * Stephen Hemminger <shemminger@osdl.org>
9 #include <linux/kernel.h>
10 #include <linux/slab.h>
11 #include <linux/etherdevice.h>
12 #include <net/rtnetlink.h>
13 #include <net/net_namespace.h>
15 #include <uapi/linux/if_bridge.h>
17 #include "br_private.h"
18 #include "br_private_stp.h"
19 #include "br_private_tunnel.h"
21 static int __get_num_vlan_infos(struct net_bridge_vlan_group
*vg
,
24 struct net_bridge_vlan
*v
;
25 u16 vid_range_start
= 0, vid_range_end
= 0, vid_range_flags
= 0;
29 if (!(filter_mask
& RTEXT_FILTER_BRVLAN_COMPRESSED
))
32 pvid
= br_get_pvid(vg
);
33 /* Count number of vlan infos */
34 list_for_each_entry_rcu(v
, &vg
->vlan_list
, vlist
) {
36 /* only a context, bridge vlan not activated */
37 if (!br_vlan_should_use(v
))
40 flags
|= BRIDGE_VLAN_INFO_PVID
;
42 if (v
->flags
& BRIDGE_VLAN_INFO_UNTAGGED
)
43 flags
|= BRIDGE_VLAN_INFO_UNTAGGED
;
45 if (vid_range_start
== 0) {
47 } else if ((v
->vid
- vid_range_end
) == 1 &&
48 flags
== vid_range_flags
) {
49 vid_range_end
= v
->vid
;
52 if ((vid_range_end
- vid_range_start
) > 0)
58 vid_range_start
= v
->vid
;
59 vid_range_end
= v
->vid
;
60 vid_range_flags
= flags
;
63 if (vid_range_start
!= 0) {
64 if ((vid_range_end
- vid_range_start
) > 0)
73 static int br_get_num_vlan_infos(struct net_bridge_vlan_group
*vg
,
81 if (filter_mask
& RTEXT_FILTER_BRVLAN
)
85 num_vlans
= __get_num_vlan_infos(vg
, filter_mask
);
91 static size_t br_get_link_af_size_filtered(const struct net_device
*dev
,
94 struct net_bridge_vlan_group
*vg
= NULL
;
95 struct net_bridge_port
*p
= NULL
;
96 struct net_bridge
*br
;
101 if (netif_is_bridge_port(dev
)) {
102 p
= br_port_get_rcu(dev
);
103 vg
= nbp_vlan_group_rcu(p
);
104 } else if (dev
->priv_flags
& IFF_EBRIDGE
) {
105 br
= netdev_priv(dev
);
106 vg
= br_vlan_group_rcu(br
);
108 num_vlan_infos
= br_get_num_vlan_infos(vg
, filter_mask
);
111 if (p
&& (p
->flags
& BR_VLAN_TUNNEL
))
112 vinfo_sz
+= br_get_vlan_tunnel_info_size(vg
);
114 /* Each VLAN is returned in bridge_vlan_info along with flags */
115 vinfo_sz
+= num_vlan_infos
* nla_total_size(sizeof(struct bridge_vlan_info
));
120 static inline size_t br_port_info_size(void)
122 return nla_total_size(1) /* IFLA_BRPORT_STATE */
123 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */
124 + nla_total_size(4) /* IFLA_BRPORT_COST */
125 + nla_total_size(1) /* IFLA_BRPORT_MODE */
126 + nla_total_size(1) /* IFLA_BRPORT_GUARD */
127 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */
128 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */
129 + nla_total_size(1) /* IFLA_BRPORT_MCAST_TO_UCAST */
130 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */
131 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */
132 + nla_total_size(1) /* IFLA_BRPORT_MCAST_FLOOD */
133 + nla_total_size(1) /* IFLA_BRPORT_BCAST_FLOOD */
134 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP */
135 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP_WIFI */
136 + nla_total_size(1) /* IFLA_BRPORT_VLAN_TUNNEL */
137 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_SUPPRESS */
138 + nla_total_size(1) /* IFLA_BRPORT_ISOLATED */
139 + nla_total_size(sizeof(struct ifla_bridge_id
)) /* IFLA_BRPORT_ROOT_ID */
140 + nla_total_size(sizeof(struct ifla_bridge_id
)) /* IFLA_BRPORT_BRIDGE_ID */
141 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_DESIGNATED_PORT */
142 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_DESIGNATED_COST */
143 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_ID */
144 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_NO */
145 + nla_total_size(sizeof(u8
)) /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
146 + nla_total_size(sizeof(u8
)) /* IFLA_BRPORT_CONFIG_PENDING */
147 + nla_total_size_64bit(sizeof(u64
)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
148 + nla_total_size_64bit(sizeof(u64
)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
149 + nla_total_size_64bit(sizeof(u64
)) /* IFLA_BRPORT_HOLD_TIMER */
150 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
151 + nla_total_size(sizeof(u8
)) /* IFLA_BRPORT_MULTICAST_ROUTER */
153 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_GROUP_FWD_MASK */
154 + nla_total_size(sizeof(u8
)) /* IFLA_BRPORT_MRP_RING_OPEN */
158 static inline size_t br_nlmsg_size(struct net_device
*dev
, u32 filter_mask
)
160 return NLMSG_ALIGN(sizeof(struct ifinfomsg
))
161 + nla_total_size(IFNAMSIZ
) /* IFLA_IFNAME */
162 + nla_total_size(MAX_ADDR_LEN
) /* IFLA_ADDRESS */
163 + nla_total_size(4) /* IFLA_MASTER */
164 + nla_total_size(4) /* IFLA_MTU */
165 + nla_total_size(4) /* IFLA_LINK */
166 + nla_total_size(1) /* IFLA_OPERSTATE */
167 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
168 + nla_total_size(br_get_link_af_size_filtered(dev
,
169 filter_mask
)) /* IFLA_AF_SPEC */
170 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
173 static int br_port_fill_attrs(struct sk_buff
*skb
,
174 const struct net_bridge_port
*p
)
176 u8 mode
= !!(p
->flags
& BR_HAIRPIN_MODE
);
177 struct net_bridge_port
*backup_p
;
180 if (nla_put_u8(skb
, IFLA_BRPORT_STATE
, p
->state
) ||
181 nla_put_u16(skb
, IFLA_BRPORT_PRIORITY
, p
->priority
) ||
182 nla_put_u32(skb
, IFLA_BRPORT_COST
, p
->path_cost
) ||
183 nla_put_u8(skb
, IFLA_BRPORT_MODE
, mode
) ||
184 nla_put_u8(skb
, IFLA_BRPORT_GUARD
, !!(p
->flags
& BR_BPDU_GUARD
)) ||
185 nla_put_u8(skb
, IFLA_BRPORT_PROTECT
,
186 !!(p
->flags
& BR_ROOT_BLOCK
)) ||
187 nla_put_u8(skb
, IFLA_BRPORT_FAST_LEAVE
,
188 !!(p
->flags
& BR_MULTICAST_FAST_LEAVE
)) ||
189 nla_put_u8(skb
, IFLA_BRPORT_MCAST_TO_UCAST
,
190 !!(p
->flags
& BR_MULTICAST_TO_UNICAST
)) ||
191 nla_put_u8(skb
, IFLA_BRPORT_LEARNING
, !!(p
->flags
& BR_LEARNING
)) ||
192 nla_put_u8(skb
, IFLA_BRPORT_UNICAST_FLOOD
,
193 !!(p
->flags
& BR_FLOOD
)) ||
194 nla_put_u8(skb
, IFLA_BRPORT_MCAST_FLOOD
,
195 !!(p
->flags
& BR_MCAST_FLOOD
)) ||
196 nla_put_u8(skb
, IFLA_BRPORT_BCAST_FLOOD
,
197 !!(p
->flags
& BR_BCAST_FLOOD
)) ||
198 nla_put_u8(skb
, IFLA_BRPORT_PROXYARP
, !!(p
->flags
& BR_PROXYARP
)) ||
199 nla_put_u8(skb
, IFLA_BRPORT_PROXYARP_WIFI
,
200 !!(p
->flags
& BR_PROXYARP_WIFI
)) ||
201 nla_put(skb
, IFLA_BRPORT_ROOT_ID
, sizeof(struct ifla_bridge_id
),
202 &p
->designated_root
) ||
203 nla_put(skb
, IFLA_BRPORT_BRIDGE_ID
, sizeof(struct ifla_bridge_id
),
204 &p
->designated_bridge
) ||
205 nla_put_u16(skb
, IFLA_BRPORT_DESIGNATED_PORT
, p
->designated_port
) ||
206 nla_put_u16(skb
, IFLA_BRPORT_DESIGNATED_COST
, p
->designated_cost
) ||
207 nla_put_u16(skb
, IFLA_BRPORT_ID
, p
->port_id
) ||
208 nla_put_u16(skb
, IFLA_BRPORT_NO
, p
->port_no
) ||
209 nla_put_u8(skb
, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK
,
210 p
->topology_change_ack
) ||
211 nla_put_u8(skb
, IFLA_BRPORT_CONFIG_PENDING
, p
->config_pending
) ||
212 nla_put_u8(skb
, IFLA_BRPORT_VLAN_TUNNEL
, !!(p
->flags
&
214 nla_put_u16(skb
, IFLA_BRPORT_GROUP_FWD_MASK
, p
->group_fwd_mask
) ||
215 nla_put_u8(skb
, IFLA_BRPORT_NEIGH_SUPPRESS
,
216 !!(p
->flags
& BR_NEIGH_SUPPRESS
)) ||
217 nla_put_u8(skb
, IFLA_BRPORT_MRP_RING_OPEN
, !!(p
->flags
&
218 BR_MRP_LOST_CONT
)) ||
219 nla_put_u8(skb
, IFLA_BRPORT_ISOLATED
, !!(p
->flags
& BR_ISOLATED
)))
222 timerval
= br_timer_value(&p
->message_age_timer
);
223 if (nla_put_u64_64bit(skb
, IFLA_BRPORT_MESSAGE_AGE_TIMER
, timerval
,
226 timerval
= br_timer_value(&p
->forward_delay_timer
);
227 if (nla_put_u64_64bit(skb
, IFLA_BRPORT_FORWARD_DELAY_TIMER
, timerval
,
230 timerval
= br_timer_value(&p
->hold_timer
);
231 if (nla_put_u64_64bit(skb
, IFLA_BRPORT_HOLD_TIMER
, timerval
,
235 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
236 if (nla_put_u8(skb
, IFLA_BRPORT_MULTICAST_ROUTER
,
237 p
->multicast_router
))
241 /* we might be called only with br->lock */
243 backup_p
= rcu_dereference(p
->backup_port
);
245 nla_put_u32(skb
, IFLA_BRPORT_BACKUP_PORT
,
246 backup_p
->dev
->ifindex
);
252 static int br_fill_ifvlaninfo_range(struct sk_buff
*skb
, u16 vid_start
,
253 u16 vid_end
, u16 flags
)
255 struct bridge_vlan_info vinfo
;
257 if ((vid_end
- vid_start
) > 0) {
258 /* add range to skb */
259 vinfo
.vid
= vid_start
;
260 vinfo
.flags
= flags
| BRIDGE_VLAN_INFO_RANGE_BEGIN
;
261 if (nla_put(skb
, IFLA_BRIDGE_VLAN_INFO
,
262 sizeof(vinfo
), &vinfo
))
263 goto nla_put_failure
;
266 vinfo
.flags
= flags
| BRIDGE_VLAN_INFO_RANGE_END
;
267 if (nla_put(skb
, IFLA_BRIDGE_VLAN_INFO
,
268 sizeof(vinfo
), &vinfo
))
269 goto nla_put_failure
;
271 vinfo
.vid
= vid_start
;
273 if (nla_put(skb
, IFLA_BRIDGE_VLAN_INFO
,
274 sizeof(vinfo
), &vinfo
))
275 goto nla_put_failure
;
284 static int br_fill_ifvlaninfo_compressed(struct sk_buff
*skb
,
285 struct net_bridge_vlan_group
*vg
)
287 struct net_bridge_vlan
*v
;
288 u16 vid_range_start
= 0, vid_range_end
= 0, vid_range_flags
= 0;
292 /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
293 * and mark vlan info with begin and end flags
294 * if vlaninfo represents a range
296 pvid
= br_get_pvid(vg
);
297 list_for_each_entry_rcu(v
, &vg
->vlan_list
, vlist
) {
299 if (!br_vlan_should_use(v
))
302 flags
|= BRIDGE_VLAN_INFO_PVID
;
304 if (v
->flags
& BRIDGE_VLAN_INFO_UNTAGGED
)
305 flags
|= BRIDGE_VLAN_INFO_UNTAGGED
;
307 if (vid_range_start
== 0) {
309 } else if ((v
->vid
- vid_range_end
) == 1 &&
310 flags
== vid_range_flags
) {
311 vid_range_end
= v
->vid
;
314 err
= br_fill_ifvlaninfo_range(skb
, vid_range_start
,
322 vid_range_start
= v
->vid
;
323 vid_range_end
= v
->vid
;
324 vid_range_flags
= flags
;
327 if (vid_range_start
!= 0) {
328 /* Call it once more to send any left over vlans */
329 err
= br_fill_ifvlaninfo_range(skb
, vid_range_start
,
339 static int br_fill_ifvlaninfo(struct sk_buff
*skb
,
340 struct net_bridge_vlan_group
*vg
)
342 struct bridge_vlan_info vinfo
;
343 struct net_bridge_vlan
*v
;
346 pvid
= br_get_pvid(vg
);
347 list_for_each_entry_rcu(v
, &vg
->vlan_list
, vlist
) {
348 if (!br_vlan_should_use(v
))
354 vinfo
.flags
|= BRIDGE_VLAN_INFO_PVID
;
356 if (v
->flags
& BRIDGE_VLAN_INFO_UNTAGGED
)
357 vinfo
.flags
|= BRIDGE_VLAN_INFO_UNTAGGED
;
359 if (nla_put(skb
, IFLA_BRIDGE_VLAN_INFO
,
360 sizeof(vinfo
), &vinfo
))
361 goto nla_put_failure
;
371 * Create one netlink message for one interface
372 * Contains port and master info as well as carrier and bridge state.
374 static int br_fill_ifinfo(struct sk_buff
*skb
,
375 const struct net_bridge_port
*port
,
376 u32 pid
, u32 seq
, int event
, unsigned int flags
,
377 u32 filter_mask
, const struct net_device
*dev
)
379 u8 operstate
= netif_running(dev
) ? dev
->operstate
: IF_OPER_DOWN
;
380 struct net_bridge
*br
;
381 struct ifinfomsg
*hdr
;
382 struct nlmsghdr
*nlh
;
387 br
= netdev_priv(dev
);
389 br_debug(br
, "br_fill_info event %d port %s master %s\n",
390 event
, dev
->name
, br
->dev
->name
);
392 nlh
= nlmsg_put(skb
, pid
, seq
, event
, sizeof(*hdr
), flags
);
396 hdr
= nlmsg_data(nlh
);
397 hdr
->ifi_family
= AF_BRIDGE
;
399 hdr
->ifi_type
= dev
->type
;
400 hdr
->ifi_index
= dev
->ifindex
;
401 hdr
->ifi_flags
= dev_get_flags(dev
);
404 if (nla_put_string(skb
, IFLA_IFNAME
, dev
->name
) ||
405 nla_put_u32(skb
, IFLA_MASTER
, br
->dev
->ifindex
) ||
406 nla_put_u32(skb
, IFLA_MTU
, dev
->mtu
) ||
407 nla_put_u8(skb
, IFLA_OPERSTATE
, operstate
) ||
409 nla_put(skb
, IFLA_ADDRESS
, dev
->addr_len
, dev
->dev_addr
)) ||
410 (dev
->ifindex
!= dev_get_iflink(dev
) &&
411 nla_put_u32(skb
, IFLA_LINK
, dev_get_iflink(dev
))))
412 goto nla_put_failure
;
414 if (event
== RTM_NEWLINK
&& port
) {
417 nest
= nla_nest_start(skb
, IFLA_PROTINFO
);
418 if (nest
== NULL
|| br_port_fill_attrs(skb
, port
) < 0)
419 goto nla_put_failure
;
420 nla_nest_end(skb
, nest
);
423 /* Check if the VID information is requested */
424 if ((filter_mask
& RTEXT_FILTER_BRVLAN
) ||
425 (filter_mask
& RTEXT_FILTER_BRVLAN_COMPRESSED
)) {
426 struct net_bridge_vlan_group
*vg
;
430 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */
433 vg
= nbp_vlan_group_rcu(port
);
435 vg
= br_vlan_group_rcu(br
);
437 if (!vg
|| !vg
->num_vlans
) {
441 af
= nla_nest_start_noflag(skb
, IFLA_AF_SPEC
);
444 goto nla_put_failure
;
446 if (filter_mask
& RTEXT_FILTER_BRVLAN_COMPRESSED
)
447 err
= br_fill_ifvlaninfo_compressed(skb
, vg
);
449 err
= br_fill_ifvlaninfo(skb
, vg
);
451 if (port
&& (port
->flags
& BR_VLAN_TUNNEL
))
452 err
= br_fill_vlan_tunnel_info(skb
, vg
);
455 goto nla_put_failure
;
456 nla_nest_end(skb
, af
);
464 nlmsg_cancel(skb
, nlh
);
468 /* Notify listeners of a change in bridge or port information */
469 void br_ifinfo_notify(int event
, const struct net_bridge
*br
,
470 const struct net_bridge_port
*port
)
472 u32 filter
= RTEXT_FILTER_BRVLAN_COMPRESSED
;
473 struct net_device
*dev
;
479 if (WARN_ON(!port
&& !br
))
485 port_no
= port
->port_no
;
491 br_debug(br
, "port %u(%s) event %d\n", port_no
, dev
->name
, event
);
493 skb
= nlmsg_new(br_nlmsg_size(dev
, filter
), GFP_ATOMIC
);
497 err
= br_fill_ifinfo(skb
, port
, 0, 0, event
, 0, filter
, dev
);
499 /* -EMSGSIZE implies BUG in br_nlmsg_size() */
500 WARN_ON(err
== -EMSGSIZE
);
504 rtnl_notify(skb
, net
, 0, RTNLGRP_LINK
, NULL
, GFP_ATOMIC
);
507 rtnl_set_sk_err(net
, RTNLGRP_LINK
, err
);
511 * Dump information about all ports, in response to GETLINK
513 int br_getlink(struct sk_buff
*skb
, u32 pid
, u32 seq
,
514 struct net_device
*dev
, u32 filter_mask
, int nlflags
)
516 struct net_bridge_port
*port
= br_port_get_rtnl(dev
);
518 if (!port
&& !(filter_mask
& RTEXT_FILTER_BRVLAN
) &&
519 !(filter_mask
& RTEXT_FILTER_BRVLAN_COMPRESSED
))
522 return br_fill_ifinfo(skb
, port
, pid
, seq
, RTM_NEWLINK
, nlflags
,
526 static int br_vlan_info(struct net_bridge
*br
, struct net_bridge_port
*p
,
527 int cmd
, struct bridge_vlan_info
*vinfo
, bool *changed
,
528 struct netlink_ext_ack
*extack
)
536 /* if the MASTER flag is set this will act on the global
537 * per-VLAN entry as well
539 err
= nbp_vlan_add(p
, vinfo
->vid
, vinfo
->flags
,
540 &curr_change
, extack
);
542 vinfo
->flags
|= BRIDGE_VLAN_INFO_BRENTRY
;
543 err
= br_vlan_add(br
, vinfo
->vid
, vinfo
->flags
,
544 &curr_change
, extack
);
552 if (!nbp_vlan_delete(p
, vinfo
->vid
))
555 if ((vinfo
->flags
& BRIDGE_VLAN_INFO_MASTER
) &&
556 !br_vlan_delete(p
->br
, vinfo
->vid
))
558 } else if (!br_vlan_delete(br
, vinfo
->vid
)) {
567 int br_process_vlan_info(struct net_bridge
*br
,
568 struct net_bridge_port
*p
, int cmd
,
569 struct bridge_vlan_info
*vinfo_curr
,
570 struct bridge_vlan_info
**vinfo_last
,
572 struct netlink_ext_ack
*extack
)
576 if (!br_vlan_valid_id(vinfo_curr
->vid
, extack
))
579 /* needed for vlan-only NEWVLAN/DELVLAN notifications */
580 rtm_cmd
= br_afspec_cmd_to_rtm(cmd
);
582 if (vinfo_curr
->flags
& BRIDGE_VLAN_INFO_RANGE_BEGIN
) {
583 if (!br_vlan_valid_range(vinfo_curr
, *vinfo_last
, extack
))
585 *vinfo_last
= vinfo_curr
;
590 struct bridge_vlan_info tmp_vinfo
;
591 int v
, v_change_start
= 0;
593 if (!br_vlan_valid_range(vinfo_curr
, *vinfo_last
, extack
))
596 memcpy(&tmp_vinfo
, *vinfo_last
,
597 sizeof(struct bridge_vlan_info
));
598 for (v
= (*vinfo_last
)->vid
; v
<= vinfo_curr
->vid
; v
++) {
599 bool curr_change
= false;
602 err
= br_vlan_info(br
, p
, cmd
, &tmp_vinfo
, &curr_change
,
607 *changed
= curr_change
;
611 /* nothing to notify yet */
614 br_vlan_notify(br
, p
, v_change_start
,
620 /* v_change_start is set only if the last/whole range changed */
622 br_vlan_notify(br
, p
, v_change_start
,
630 err
= br_vlan_info(br
, p
, cmd
, vinfo_curr
, changed
, extack
);
632 br_vlan_notify(br
, p
, vinfo_curr
->vid
, 0, rtm_cmd
);
637 static int br_afspec(struct net_bridge
*br
,
638 struct net_bridge_port
*p
,
639 struct nlattr
*af_spec
,
640 int cmd
, bool *changed
,
641 struct netlink_ext_ack
*extack
)
643 struct bridge_vlan_info
*vinfo_curr
= NULL
;
644 struct bridge_vlan_info
*vinfo_last
= NULL
;
646 struct vtunnel_info tinfo_last
= {};
647 struct vtunnel_info tinfo_curr
= {};
650 nla_for_each_nested(attr
, af_spec
, rem
) {
652 switch (nla_type(attr
)) {
653 case IFLA_BRIDGE_VLAN_TUNNEL_INFO
:
654 if (!p
|| !(p
->flags
& BR_VLAN_TUNNEL
))
656 err
= br_parse_vlan_tunnel_info(attr
, &tinfo_curr
);
659 err
= br_process_vlan_tunnel_info(br
, p
, cmd
,
666 case IFLA_BRIDGE_VLAN_INFO
:
667 if (nla_len(attr
) != sizeof(struct bridge_vlan_info
))
669 vinfo_curr
= nla_data(attr
);
670 err
= br_process_vlan_info(br
, p
, cmd
, vinfo_curr
,
671 &vinfo_last
, changed
,
676 case IFLA_BRIDGE_MRP
:
677 err
= br_mrp_parse(br
, p
, attr
, cmd
, extack
);
687 static const struct nla_policy br_port_policy
[IFLA_BRPORT_MAX
+ 1] = {
688 [IFLA_BRPORT_STATE
] = { .type
= NLA_U8
},
689 [IFLA_BRPORT_COST
] = { .type
= NLA_U32
},
690 [IFLA_BRPORT_PRIORITY
] = { .type
= NLA_U16
},
691 [IFLA_BRPORT_MODE
] = { .type
= NLA_U8
},
692 [IFLA_BRPORT_GUARD
] = { .type
= NLA_U8
},
693 [IFLA_BRPORT_PROTECT
] = { .type
= NLA_U8
},
694 [IFLA_BRPORT_FAST_LEAVE
]= { .type
= NLA_U8
},
695 [IFLA_BRPORT_LEARNING
] = { .type
= NLA_U8
},
696 [IFLA_BRPORT_UNICAST_FLOOD
] = { .type
= NLA_U8
},
697 [IFLA_BRPORT_PROXYARP
] = { .type
= NLA_U8
},
698 [IFLA_BRPORT_PROXYARP_WIFI
] = { .type
= NLA_U8
},
699 [IFLA_BRPORT_MULTICAST_ROUTER
] = { .type
= NLA_U8
},
700 [IFLA_BRPORT_MCAST_TO_UCAST
] = { .type
= NLA_U8
},
701 [IFLA_BRPORT_MCAST_FLOOD
] = { .type
= NLA_U8
},
702 [IFLA_BRPORT_BCAST_FLOOD
] = { .type
= NLA_U8
},
703 [IFLA_BRPORT_VLAN_TUNNEL
] = { .type
= NLA_U8
},
704 [IFLA_BRPORT_GROUP_FWD_MASK
] = { .type
= NLA_U16
},
705 [IFLA_BRPORT_NEIGH_SUPPRESS
] = { .type
= NLA_U8
},
706 [IFLA_BRPORT_ISOLATED
] = { .type
= NLA_U8
},
707 [IFLA_BRPORT_BACKUP_PORT
] = { .type
= NLA_U32
},
710 /* Change the state of the port and notify spanning tree */
711 static int br_set_port_state(struct net_bridge_port
*p
, u8 state
)
713 if (state
> BR_STATE_BLOCKING
)
716 /* if kernel STP is running, don't allow changes */
717 if (p
->br
->stp_enabled
== BR_KERNEL_STP
)
720 /* if device is not up, change is not allowed
721 * if link is not present, only allowable state is disabled
723 if (!netif_running(p
->dev
) ||
724 (!netif_oper_up(p
->dev
) && state
!= BR_STATE_DISABLED
))
727 br_set_state(p
, state
);
728 br_port_state_selection(p
->br
);
732 /* Set/clear or port flags based on attribute */
733 static int br_set_port_flag(struct net_bridge_port
*p
, struct nlattr
*tb
[],
734 int attrtype
, unsigned long mask
)
742 if (nla_get_u8(tb
[attrtype
]))
743 flags
= p
->flags
| mask
;
745 flags
= p
->flags
& ~mask
;
747 err
= br_switchdev_set_port_flag(p
, flags
, mask
);
755 /* Process bridge protocol info on port */
756 static int br_setport(struct net_bridge_port
*p
, struct nlattr
*tb
[])
758 unsigned long old_flags
= p
->flags
;
759 bool br_vlan_tunnel_old
= false;
762 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_MODE
, BR_HAIRPIN_MODE
);
766 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_GUARD
, BR_BPDU_GUARD
);
770 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_FAST_LEAVE
, BR_MULTICAST_FAST_LEAVE
);
774 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_PROTECT
, BR_ROOT_BLOCK
);
778 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_LEARNING
, BR_LEARNING
);
782 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_UNICAST_FLOOD
, BR_FLOOD
);
786 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_MCAST_FLOOD
, BR_MCAST_FLOOD
);
790 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_MCAST_TO_UCAST
, BR_MULTICAST_TO_UNICAST
);
794 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_BCAST_FLOOD
, BR_BCAST_FLOOD
);
798 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_PROXYARP
, BR_PROXYARP
);
802 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_PROXYARP_WIFI
, BR_PROXYARP_WIFI
);
806 br_vlan_tunnel_old
= (p
->flags
& BR_VLAN_TUNNEL
) ? true : false;
807 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_VLAN_TUNNEL
, BR_VLAN_TUNNEL
);
811 if (br_vlan_tunnel_old
&& !(p
->flags
& BR_VLAN_TUNNEL
))
812 nbp_vlan_tunnel_info_flush(p
);
814 if (tb
[IFLA_BRPORT_COST
]) {
815 err
= br_stp_set_path_cost(p
, nla_get_u32(tb
[IFLA_BRPORT_COST
]));
820 if (tb
[IFLA_BRPORT_PRIORITY
]) {
821 err
= br_stp_set_port_priority(p
, nla_get_u16(tb
[IFLA_BRPORT_PRIORITY
]));
826 if (tb
[IFLA_BRPORT_STATE
]) {
827 err
= br_set_port_state(p
, nla_get_u8(tb
[IFLA_BRPORT_STATE
]));
832 if (tb
[IFLA_BRPORT_FLUSH
])
833 br_fdb_delete_by_port(p
->br
, p
, 0, 0);
835 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
836 if (tb
[IFLA_BRPORT_MULTICAST_ROUTER
]) {
837 u8 mcast_router
= nla_get_u8(tb
[IFLA_BRPORT_MULTICAST_ROUTER
]);
839 err
= br_multicast_set_port_router(p
, mcast_router
);
845 if (tb
[IFLA_BRPORT_GROUP_FWD_MASK
]) {
846 u16 fwd_mask
= nla_get_u16(tb
[IFLA_BRPORT_GROUP_FWD_MASK
]);
848 if (fwd_mask
& BR_GROUPFWD_MACPAUSE
)
850 p
->group_fwd_mask
= fwd_mask
;
853 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_NEIGH_SUPPRESS
,
858 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_ISOLATED
, BR_ISOLATED
);
862 if (tb
[IFLA_BRPORT_BACKUP_PORT
]) {
863 struct net_device
*backup_dev
= NULL
;
866 backup_ifindex
= nla_get_u32(tb
[IFLA_BRPORT_BACKUP_PORT
]);
867 if (backup_ifindex
) {
868 backup_dev
= __dev_get_by_index(dev_net(p
->dev
),
874 err
= nbp_backup_change(p
, backup_dev
);
879 br_port_flags_change(p
, old_flags
^ p
->flags
);
883 /* Change state and parameters on port. */
884 int br_setlink(struct net_device
*dev
, struct nlmsghdr
*nlh
, u16 flags
,
885 struct netlink_ext_ack
*extack
)
887 struct net_bridge
*br
= (struct net_bridge
*)netdev_priv(dev
);
888 struct nlattr
*tb
[IFLA_BRPORT_MAX
+ 1];
889 struct net_bridge_port
*p
;
890 struct nlattr
*protinfo
;
891 struct nlattr
*afspec
;
892 bool changed
= false;
895 protinfo
= nlmsg_find_attr(nlh
, sizeof(struct ifinfomsg
), IFLA_PROTINFO
);
896 afspec
= nlmsg_find_attr(nlh
, sizeof(struct ifinfomsg
), IFLA_AF_SPEC
);
897 if (!protinfo
&& !afspec
)
900 p
= br_port_get_rtnl(dev
);
901 /* We want to accept dev as bridge itself if the AF_SPEC
902 * is set to see if someone is setting vlan info on the bridge
908 if (protinfo
->nla_type
& NLA_F_NESTED
) {
909 err
= nla_parse_nested_deprecated(tb
, IFLA_BRPORT_MAX
,
916 spin_lock_bh(&p
->br
->lock
);
917 err
= br_setport(p
, tb
);
918 spin_unlock_bh(&p
->br
->lock
);
920 /* Binary compatibility with old RSTP */
921 if (nla_len(protinfo
) < sizeof(u8
))
924 spin_lock_bh(&p
->br
->lock
);
925 err
= br_set_port_state(p
, nla_get_u8(protinfo
));
926 spin_unlock_bh(&p
->br
->lock
);
934 err
= br_afspec(br
, p
, afspec
, RTM_SETLINK
, &changed
, extack
);
937 br_ifinfo_notify(RTM_NEWLINK
, br
, p
);
942 /* Delete port information */
943 int br_dellink(struct net_device
*dev
, struct nlmsghdr
*nlh
, u16 flags
)
945 struct net_bridge
*br
= (struct net_bridge
*)netdev_priv(dev
);
946 struct net_bridge_port
*p
;
947 struct nlattr
*afspec
;
948 bool changed
= false;
951 afspec
= nlmsg_find_attr(nlh
, sizeof(struct ifinfomsg
), IFLA_AF_SPEC
);
955 p
= br_port_get_rtnl(dev
);
956 /* We want to accept dev as bridge itself as well */
957 if (!p
&& !(dev
->priv_flags
& IFF_EBRIDGE
))
960 err
= br_afspec(br
, p
, afspec
, RTM_DELLINK
, &changed
, NULL
);
962 /* Send RTM_NEWLINK because userspace
963 * expects RTM_NEWLINK for vlan dels
965 br_ifinfo_notify(RTM_NEWLINK
, br
, p
);
970 static int br_validate(struct nlattr
*tb
[], struct nlattr
*data
[],
971 struct netlink_ext_ack
*extack
)
973 if (tb
[IFLA_ADDRESS
]) {
974 if (nla_len(tb
[IFLA_ADDRESS
]) != ETH_ALEN
)
976 if (!is_valid_ether_addr(nla_data(tb
[IFLA_ADDRESS
])))
977 return -EADDRNOTAVAIL
;
983 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
984 if (data
[IFLA_BR_VLAN_PROTOCOL
]) {
985 switch (nla_get_be16(data
[IFLA_BR_VLAN_PROTOCOL
])) {
986 case htons(ETH_P_8021Q
):
987 case htons(ETH_P_8021AD
):
990 return -EPROTONOSUPPORT
;
994 if (data
[IFLA_BR_VLAN_DEFAULT_PVID
]) {
995 __u16 defpvid
= nla_get_u16(data
[IFLA_BR_VLAN_DEFAULT_PVID
]);
997 if (defpvid
>= VLAN_VID_MASK
)
1005 static int br_port_slave_changelink(struct net_device
*brdev
,
1006 struct net_device
*dev
,
1007 struct nlattr
*tb
[],
1008 struct nlattr
*data
[],
1009 struct netlink_ext_ack
*extack
)
1011 struct net_bridge
*br
= netdev_priv(brdev
);
1017 spin_lock_bh(&br
->lock
);
1018 ret
= br_setport(br_port_get_rtnl(dev
), data
);
1019 spin_unlock_bh(&br
->lock
);
1024 static int br_port_fill_slave_info(struct sk_buff
*skb
,
1025 const struct net_device
*brdev
,
1026 const struct net_device
*dev
)
1028 return br_port_fill_attrs(skb
, br_port_get_rtnl(dev
));
1031 static size_t br_port_get_slave_size(const struct net_device
*brdev
,
1032 const struct net_device
*dev
)
1034 return br_port_info_size();
1037 static const struct nla_policy br_policy
[IFLA_BR_MAX
+ 1] = {
1038 [IFLA_BR_FORWARD_DELAY
] = { .type
= NLA_U32
},
1039 [IFLA_BR_HELLO_TIME
] = { .type
= NLA_U32
},
1040 [IFLA_BR_MAX_AGE
] = { .type
= NLA_U32
},
1041 [IFLA_BR_AGEING_TIME
] = { .type
= NLA_U32
},
1042 [IFLA_BR_STP_STATE
] = { .type
= NLA_U32
},
1043 [IFLA_BR_PRIORITY
] = { .type
= NLA_U16
},
1044 [IFLA_BR_VLAN_FILTERING
] = { .type
= NLA_U8
},
1045 [IFLA_BR_VLAN_PROTOCOL
] = { .type
= NLA_U16
},
1046 [IFLA_BR_GROUP_FWD_MASK
] = { .type
= NLA_U16
},
1047 [IFLA_BR_GROUP_ADDR
] = { .type
= NLA_BINARY
,
1049 [IFLA_BR_MCAST_ROUTER
] = { .type
= NLA_U8
},
1050 [IFLA_BR_MCAST_SNOOPING
] = { .type
= NLA_U8
},
1051 [IFLA_BR_MCAST_QUERY_USE_IFADDR
] = { .type
= NLA_U8
},
1052 [IFLA_BR_MCAST_QUERIER
] = { .type
= NLA_U8
},
1053 [IFLA_BR_MCAST_HASH_ELASTICITY
] = { .type
= NLA_U32
},
1054 [IFLA_BR_MCAST_HASH_MAX
] = { .type
= NLA_U32
},
1055 [IFLA_BR_MCAST_LAST_MEMBER_CNT
] = { .type
= NLA_U32
},
1056 [IFLA_BR_MCAST_STARTUP_QUERY_CNT
] = { .type
= NLA_U32
},
1057 [IFLA_BR_MCAST_LAST_MEMBER_INTVL
] = { .type
= NLA_U64
},
1058 [IFLA_BR_MCAST_MEMBERSHIP_INTVL
] = { .type
= NLA_U64
},
1059 [IFLA_BR_MCAST_QUERIER_INTVL
] = { .type
= NLA_U64
},
1060 [IFLA_BR_MCAST_QUERY_INTVL
] = { .type
= NLA_U64
},
1061 [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
] = { .type
= NLA_U64
},
1062 [IFLA_BR_MCAST_STARTUP_QUERY_INTVL
] = { .type
= NLA_U64
},
1063 [IFLA_BR_NF_CALL_IPTABLES
] = { .type
= NLA_U8
},
1064 [IFLA_BR_NF_CALL_IP6TABLES
] = { .type
= NLA_U8
},
1065 [IFLA_BR_NF_CALL_ARPTABLES
] = { .type
= NLA_U8
},
1066 [IFLA_BR_VLAN_DEFAULT_PVID
] = { .type
= NLA_U16
},
1067 [IFLA_BR_VLAN_STATS_ENABLED
] = { .type
= NLA_U8
},
1068 [IFLA_BR_MCAST_STATS_ENABLED
] = { .type
= NLA_U8
},
1069 [IFLA_BR_MCAST_IGMP_VERSION
] = { .type
= NLA_U8
},
1070 [IFLA_BR_MCAST_MLD_VERSION
] = { .type
= NLA_U8
},
1071 [IFLA_BR_VLAN_STATS_PER_PORT
] = { .type
= NLA_U8
},
1072 [IFLA_BR_MULTI_BOOLOPT
] = { .type
= NLA_EXACT_LEN
,
1073 .len
= sizeof(struct br_boolopt_multi
) },
1076 static int br_changelink(struct net_device
*brdev
, struct nlattr
*tb
[],
1077 struct nlattr
*data
[],
1078 struct netlink_ext_ack
*extack
)
1080 struct net_bridge
*br
= netdev_priv(brdev
);
1086 if (data
[IFLA_BR_FORWARD_DELAY
]) {
1087 err
= br_set_forward_delay(br
, nla_get_u32(data
[IFLA_BR_FORWARD_DELAY
]));
1092 if (data
[IFLA_BR_HELLO_TIME
]) {
1093 err
= br_set_hello_time(br
, nla_get_u32(data
[IFLA_BR_HELLO_TIME
]));
1098 if (data
[IFLA_BR_MAX_AGE
]) {
1099 err
= br_set_max_age(br
, nla_get_u32(data
[IFLA_BR_MAX_AGE
]));
1104 if (data
[IFLA_BR_AGEING_TIME
]) {
1105 err
= br_set_ageing_time(br
, nla_get_u32(data
[IFLA_BR_AGEING_TIME
]));
1110 if (data
[IFLA_BR_STP_STATE
]) {
1111 u32 stp_enabled
= nla_get_u32(data
[IFLA_BR_STP_STATE
]);
1113 err
= br_stp_set_enabled(br
, stp_enabled
, extack
);
1118 if (data
[IFLA_BR_PRIORITY
]) {
1119 u32 priority
= nla_get_u16(data
[IFLA_BR_PRIORITY
]);
1121 br_stp_set_bridge_priority(br
, priority
);
1124 if (data
[IFLA_BR_VLAN_FILTERING
]) {
1125 u8 vlan_filter
= nla_get_u8(data
[IFLA_BR_VLAN_FILTERING
]);
1127 err
= __br_vlan_filter_toggle(br
, vlan_filter
);
1132 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1133 if (data
[IFLA_BR_VLAN_PROTOCOL
]) {
1134 __be16 vlan_proto
= nla_get_be16(data
[IFLA_BR_VLAN_PROTOCOL
]);
1136 err
= __br_vlan_set_proto(br
, vlan_proto
);
1141 if (data
[IFLA_BR_VLAN_DEFAULT_PVID
]) {
1142 __u16 defpvid
= nla_get_u16(data
[IFLA_BR_VLAN_DEFAULT_PVID
]);
1144 err
= __br_vlan_set_default_pvid(br
, defpvid
, extack
);
1149 if (data
[IFLA_BR_VLAN_STATS_ENABLED
]) {
1150 __u8 vlan_stats
= nla_get_u8(data
[IFLA_BR_VLAN_STATS_ENABLED
]);
1152 err
= br_vlan_set_stats(br
, vlan_stats
);
1157 if (data
[IFLA_BR_VLAN_STATS_PER_PORT
]) {
1158 __u8 per_port
= nla_get_u8(data
[IFLA_BR_VLAN_STATS_PER_PORT
]);
1160 err
= br_vlan_set_stats_per_port(br
, per_port
);
1166 if (data
[IFLA_BR_GROUP_FWD_MASK
]) {
1167 u16 fwd_mask
= nla_get_u16(data
[IFLA_BR_GROUP_FWD_MASK
]);
1169 if (fwd_mask
& BR_GROUPFWD_RESTRICTED
)
1171 br
->group_fwd_mask
= fwd_mask
;
1174 if (data
[IFLA_BR_GROUP_ADDR
]) {
1175 u8 new_addr
[ETH_ALEN
];
1177 if (nla_len(data
[IFLA_BR_GROUP_ADDR
]) != ETH_ALEN
)
1179 memcpy(new_addr
, nla_data(data
[IFLA_BR_GROUP_ADDR
]), ETH_ALEN
);
1180 if (!is_link_local_ether_addr(new_addr
))
1182 if (new_addr
[5] == 1 || /* 802.3x Pause address */
1183 new_addr
[5] == 2 || /* 802.3ad Slow protocols */
1184 new_addr
[5] == 3) /* 802.1X PAE address */
1186 spin_lock_bh(&br
->lock
);
1187 memcpy(br
->group_addr
, new_addr
, sizeof(br
->group_addr
));
1188 spin_unlock_bh(&br
->lock
);
1189 br_opt_toggle(br
, BROPT_GROUP_ADDR_SET
, true);
1190 br_recalculate_fwd_mask(br
);
1193 if (data
[IFLA_BR_FDB_FLUSH
])
1196 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1197 if (data
[IFLA_BR_MCAST_ROUTER
]) {
1198 u8 multicast_router
= nla_get_u8(data
[IFLA_BR_MCAST_ROUTER
]);
1200 err
= br_multicast_set_router(br
, multicast_router
);
1205 if (data
[IFLA_BR_MCAST_SNOOPING
]) {
1206 u8 mcast_snooping
= nla_get_u8(data
[IFLA_BR_MCAST_SNOOPING
]);
1208 br_multicast_toggle(br
, mcast_snooping
);
1211 if (data
[IFLA_BR_MCAST_QUERY_USE_IFADDR
]) {
1214 val
= nla_get_u8(data
[IFLA_BR_MCAST_QUERY_USE_IFADDR
]);
1215 br_opt_toggle(br
, BROPT_MULTICAST_QUERY_USE_IFADDR
, !!val
);
1218 if (data
[IFLA_BR_MCAST_QUERIER
]) {
1219 u8 mcast_querier
= nla_get_u8(data
[IFLA_BR_MCAST_QUERIER
]);
1221 err
= br_multicast_set_querier(br
, mcast_querier
);
1226 if (data
[IFLA_BR_MCAST_HASH_ELASTICITY
])
1227 br_warn(br
, "the hash_elasticity option has been deprecated and is always %u\n",
1230 if (data
[IFLA_BR_MCAST_HASH_MAX
])
1231 br
->hash_max
= nla_get_u32(data
[IFLA_BR_MCAST_HASH_MAX
]);
1233 if (data
[IFLA_BR_MCAST_LAST_MEMBER_CNT
]) {
1234 u32 val
= nla_get_u32(data
[IFLA_BR_MCAST_LAST_MEMBER_CNT
]);
1236 br
->multicast_last_member_count
= val
;
1239 if (data
[IFLA_BR_MCAST_STARTUP_QUERY_CNT
]) {
1240 u32 val
= nla_get_u32(data
[IFLA_BR_MCAST_STARTUP_QUERY_CNT
]);
1242 br
->multicast_startup_query_count
= val
;
1245 if (data
[IFLA_BR_MCAST_LAST_MEMBER_INTVL
]) {
1246 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_LAST_MEMBER_INTVL
]);
1248 br
->multicast_last_member_interval
= clock_t_to_jiffies(val
);
1251 if (data
[IFLA_BR_MCAST_MEMBERSHIP_INTVL
]) {
1252 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_MEMBERSHIP_INTVL
]);
1254 br
->multicast_membership_interval
= clock_t_to_jiffies(val
);
1257 if (data
[IFLA_BR_MCAST_QUERIER_INTVL
]) {
1258 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_QUERIER_INTVL
]);
1260 br
->multicast_querier_interval
= clock_t_to_jiffies(val
);
1263 if (data
[IFLA_BR_MCAST_QUERY_INTVL
]) {
1264 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_QUERY_INTVL
]);
1266 br
->multicast_query_interval
= clock_t_to_jiffies(val
);
1269 if (data
[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
]) {
1270 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
]);
1272 br
->multicast_query_response_interval
= clock_t_to_jiffies(val
);
1275 if (data
[IFLA_BR_MCAST_STARTUP_QUERY_INTVL
]) {
1276 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_STARTUP_QUERY_INTVL
]);
1278 br
->multicast_startup_query_interval
= clock_t_to_jiffies(val
);
1281 if (data
[IFLA_BR_MCAST_STATS_ENABLED
]) {
1284 mcast_stats
= nla_get_u8(data
[IFLA_BR_MCAST_STATS_ENABLED
]);
1285 br_opt_toggle(br
, BROPT_MULTICAST_STATS_ENABLED
, !!mcast_stats
);
1288 if (data
[IFLA_BR_MCAST_IGMP_VERSION
]) {
1291 igmp_version
= nla_get_u8(data
[IFLA_BR_MCAST_IGMP_VERSION
]);
1292 err
= br_multicast_set_igmp_version(br
, igmp_version
);
1297 #if IS_ENABLED(CONFIG_IPV6)
1298 if (data
[IFLA_BR_MCAST_MLD_VERSION
]) {
1301 mld_version
= nla_get_u8(data
[IFLA_BR_MCAST_MLD_VERSION
]);
1302 err
= br_multicast_set_mld_version(br
, mld_version
);
1308 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1309 if (data
[IFLA_BR_NF_CALL_IPTABLES
]) {
1310 u8 val
= nla_get_u8(data
[IFLA_BR_NF_CALL_IPTABLES
]);
1312 br_opt_toggle(br
, BROPT_NF_CALL_IPTABLES
, !!val
);
1315 if (data
[IFLA_BR_NF_CALL_IP6TABLES
]) {
1316 u8 val
= nla_get_u8(data
[IFLA_BR_NF_CALL_IP6TABLES
]);
1318 br_opt_toggle(br
, BROPT_NF_CALL_IP6TABLES
, !!val
);
1321 if (data
[IFLA_BR_NF_CALL_ARPTABLES
]) {
1322 u8 val
= nla_get_u8(data
[IFLA_BR_NF_CALL_ARPTABLES
]);
1324 br_opt_toggle(br
, BROPT_NF_CALL_ARPTABLES
, !!val
);
1328 if (data
[IFLA_BR_MULTI_BOOLOPT
]) {
1329 struct br_boolopt_multi
*bm
;
1331 bm
= nla_data(data
[IFLA_BR_MULTI_BOOLOPT
]);
1332 err
= br_boolopt_multi_toggle(br
, bm
, extack
);
1340 static int br_dev_newlink(struct net
*src_net
, struct net_device
*dev
,
1341 struct nlattr
*tb
[], struct nlattr
*data
[],
1342 struct netlink_ext_ack
*extack
)
1344 struct net_bridge
*br
= netdev_priv(dev
);
1347 err
= register_netdevice(dev
);
1351 if (tb
[IFLA_ADDRESS
]) {
1352 spin_lock_bh(&br
->lock
);
1353 br_stp_change_bridge_id(br
, nla_data(tb
[IFLA_ADDRESS
]));
1354 spin_unlock_bh(&br
->lock
);
1357 err
= br_changelink(dev
, tb
, data
, extack
);
1359 br_dev_delete(dev
, NULL
);
1364 static size_t br_get_size(const struct net_device
*brdev
)
1366 return nla_total_size(sizeof(u32
)) + /* IFLA_BR_FORWARD_DELAY */
1367 nla_total_size(sizeof(u32
)) + /* IFLA_BR_HELLO_TIME */
1368 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MAX_AGE */
1369 nla_total_size(sizeof(u32
)) + /* IFLA_BR_AGEING_TIME */
1370 nla_total_size(sizeof(u32
)) + /* IFLA_BR_STP_STATE */
1371 nla_total_size(sizeof(u16
)) + /* IFLA_BR_PRIORITY */
1372 nla_total_size(sizeof(u8
)) + /* IFLA_BR_VLAN_FILTERING */
1373 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1374 nla_total_size(sizeof(__be16
)) + /* IFLA_BR_VLAN_PROTOCOL */
1375 nla_total_size(sizeof(u16
)) + /* IFLA_BR_VLAN_DEFAULT_PVID */
1376 nla_total_size(sizeof(u8
)) + /* IFLA_BR_VLAN_STATS_ENABLED */
1377 nla_total_size(sizeof(u8
)) + /* IFLA_BR_VLAN_STATS_PER_PORT */
1379 nla_total_size(sizeof(u16
)) + /* IFLA_BR_GROUP_FWD_MASK */
1380 nla_total_size(sizeof(struct ifla_bridge_id
)) + /* IFLA_BR_ROOT_ID */
1381 nla_total_size(sizeof(struct ifla_bridge_id
)) + /* IFLA_BR_BRIDGE_ID */
1382 nla_total_size(sizeof(u16
)) + /* IFLA_BR_ROOT_PORT */
1383 nla_total_size(sizeof(u32
)) + /* IFLA_BR_ROOT_PATH_COST */
1384 nla_total_size(sizeof(u8
)) + /* IFLA_BR_TOPOLOGY_CHANGE */
1385 nla_total_size(sizeof(u8
)) + /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1386 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_HELLO_TIMER */
1387 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_TCN_TIMER */
1388 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1389 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_GC_TIMER */
1390 nla_total_size(ETH_ALEN
) + /* IFLA_BR_GROUP_ADDR */
1391 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1392 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_ROUTER */
1393 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_SNOOPING */
1394 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1395 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_QUERIER */
1396 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_STATS_ENABLED */
1397 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MCAST_HASH_ELASTICITY */
1398 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MCAST_HASH_MAX */
1399 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1400 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1401 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1402 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1403 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1404 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1405 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1406 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1407 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_IGMP_VERSION */
1408 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_MLD_VERSION */
1410 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1411 nla_total_size(sizeof(u8
)) + /* IFLA_BR_NF_CALL_IPTABLES */
1412 nla_total_size(sizeof(u8
)) + /* IFLA_BR_NF_CALL_IP6TABLES */
1413 nla_total_size(sizeof(u8
)) + /* IFLA_BR_NF_CALL_ARPTABLES */
1415 nla_total_size(sizeof(struct br_boolopt_multi
)) + /* IFLA_BR_MULTI_BOOLOPT */
1419 static int br_fill_info(struct sk_buff
*skb
, const struct net_device
*brdev
)
1421 struct net_bridge
*br
= netdev_priv(brdev
);
1422 u32 forward_delay
= jiffies_to_clock_t(br
->forward_delay
);
1423 u32 hello_time
= jiffies_to_clock_t(br
->hello_time
);
1424 u32 age_time
= jiffies_to_clock_t(br
->max_age
);
1425 u32 ageing_time
= jiffies_to_clock_t(br
->ageing_time
);
1426 u32 stp_enabled
= br
->stp_enabled
;
1427 u16 priority
= (br
->bridge_id
.prio
[0] << 8) | br
->bridge_id
.prio
[1];
1428 u8 vlan_enabled
= br_vlan_enabled(br
->dev
);
1429 struct br_boolopt_multi bm
;
1432 clockval
= br_timer_value(&br
->hello_timer
);
1433 if (nla_put_u64_64bit(skb
, IFLA_BR_HELLO_TIMER
, clockval
, IFLA_BR_PAD
))
1435 clockval
= br_timer_value(&br
->tcn_timer
);
1436 if (nla_put_u64_64bit(skb
, IFLA_BR_TCN_TIMER
, clockval
, IFLA_BR_PAD
))
1438 clockval
= br_timer_value(&br
->topology_change_timer
);
1439 if (nla_put_u64_64bit(skb
, IFLA_BR_TOPOLOGY_CHANGE_TIMER
, clockval
,
1442 clockval
= br_timer_value(&br
->gc_work
.timer
);
1443 if (nla_put_u64_64bit(skb
, IFLA_BR_GC_TIMER
, clockval
, IFLA_BR_PAD
))
1446 br_boolopt_multi_get(br
, &bm
);
1447 if (nla_put_u32(skb
, IFLA_BR_FORWARD_DELAY
, forward_delay
) ||
1448 nla_put_u32(skb
, IFLA_BR_HELLO_TIME
, hello_time
) ||
1449 nla_put_u32(skb
, IFLA_BR_MAX_AGE
, age_time
) ||
1450 nla_put_u32(skb
, IFLA_BR_AGEING_TIME
, ageing_time
) ||
1451 nla_put_u32(skb
, IFLA_BR_STP_STATE
, stp_enabled
) ||
1452 nla_put_u16(skb
, IFLA_BR_PRIORITY
, priority
) ||
1453 nla_put_u8(skb
, IFLA_BR_VLAN_FILTERING
, vlan_enabled
) ||
1454 nla_put_u16(skb
, IFLA_BR_GROUP_FWD_MASK
, br
->group_fwd_mask
) ||
1455 nla_put(skb
, IFLA_BR_BRIDGE_ID
, sizeof(struct ifla_bridge_id
),
1457 nla_put(skb
, IFLA_BR_ROOT_ID
, sizeof(struct ifla_bridge_id
),
1458 &br
->designated_root
) ||
1459 nla_put_u16(skb
, IFLA_BR_ROOT_PORT
, br
->root_port
) ||
1460 nla_put_u32(skb
, IFLA_BR_ROOT_PATH_COST
, br
->root_path_cost
) ||
1461 nla_put_u8(skb
, IFLA_BR_TOPOLOGY_CHANGE
, br
->topology_change
) ||
1462 nla_put_u8(skb
, IFLA_BR_TOPOLOGY_CHANGE_DETECTED
,
1463 br
->topology_change_detected
) ||
1464 nla_put(skb
, IFLA_BR_GROUP_ADDR
, ETH_ALEN
, br
->group_addr
) ||
1465 nla_put(skb
, IFLA_BR_MULTI_BOOLOPT
, sizeof(bm
), &bm
))
1468 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1469 if (nla_put_be16(skb
, IFLA_BR_VLAN_PROTOCOL
, br
->vlan_proto
) ||
1470 nla_put_u16(skb
, IFLA_BR_VLAN_DEFAULT_PVID
, br
->default_pvid
) ||
1471 nla_put_u8(skb
, IFLA_BR_VLAN_STATS_ENABLED
,
1472 br_opt_get(br
, BROPT_VLAN_STATS_ENABLED
)) ||
1473 nla_put_u8(skb
, IFLA_BR_VLAN_STATS_PER_PORT
,
1474 br_opt_get(br
, BROPT_VLAN_STATS_PER_PORT
)))
1477 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1478 if (nla_put_u8(skb
, IFLA_BR_MCAST_ROUTER
, br
->multicast_router
) ||
1479 nla_put_u8(skb
, IFLA_BR_MCAST_SNOOPING
,
1480 br_opt_get(br
, BROPT_MULTICAST_ENABLED
)) ||
1481 nla_put_u8(skb
, IFLA_BR_MCAST_QUERY_USE_IFADDR
,
1482 br_opt_get(br
, BROPT_MULTICAST_QUERY_USE_IFADDR
)) ||
1483 nla_put_u8(skb
, IFLA_BR_MCAST_QUERIER
,
1484 br_opt_get(br
, BROPT_MULTICAST_QUERIER
)) ||
1485 nla_put_u8(skb
, IFLA_BR_MCAST_STATS_ENABLED
,
1486 br_opt_get(br
, BROPT_MULTICAST_STATS_ENABLED
)) ||
1487 nla_put_u32(skb
, IFLA_BR_MCAST_HASH_ELASTICITY
, RHT_ELASTICITY
) ||
1488 nla_put_u32(skb
, IFLA_BR_MCAST_HASH_MAX
, br
->hash_max
) ||
1489 nla_put_u32(skb
, IFLA_BR_MCAST_LAST_MEMBER_CNT
,
1490 br
->multicast_last_member_count
) ||
1491 nla_put_u32(skb
, IFLA_BR_MCAST_STARTUP_QUERY_CNT
,
1492 br
->multicast_startup_query_count
) ||
1493 nla_put_u8(skb
, IFLA_BR_MCAST_IGMP_VERSION
,
1494 br
->multicast_igmp_version
))
1496 #if IS_ENABLED(CONFIG_IPV6)
1497 if (nla_put_u8(skb
, IFLA_BR_MCAST_MLD_VERSION
,
1498 br
->multicast_mld_version
))
1501 clockval
= jiffies_to_clock_t(br
->multicast_last_member_interval
);
1502 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_LAST_MEMBER_INTVL
, clockval
,
1505 clockval
= jiffies_to_clock_t(br
->multicast_membership_interval
);
1506 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_MEMBERSHIP_INTVL
, clockval
,
1509 clockval
= jiffies_to_clock_t(br
->multicast_querier_interval
);
1510 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_QUERIER_INTVL
, clockval
,
1513 clockval
= jiffies_to_clock_t(br
->multicast_query_interval
);
1514 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_QUERY_INTVL
, clockval
,
1517 clockval
= jiffies_to_clock_t(br
->multicast_query_response_interval
);
1518 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
, clockval
,
1521 clockval
= jiffies_to_clock_t(br
->multicast_startup_query_interval
);
1522 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_STARTUP_QUERY_INTVL
, clockval
,
1526 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1527 if (nla_put_u8(skb
, IFLA_BR_NF_CALL_IPTABLES
,
1528 br_opt_get(br
, BROPT_NF_CALL_IPTABLES
) ? 1 : 0) ||
1529 nla_put_u8(skb
, IFLA_BR_NF_CALL_IP6TABLES
,
1530 br_opt_get(br
, BROPT_NF_CALL_IP6TABLES
) ? 1 : 0) ||
1531 nla_put_u8(skb
, IFLA_BR_NF_CALL_ARPTABLES
,
1532 br_opt_get(br
, BROPT_NF_CALL_ARPTABLES
) ? 1 : 0))
1539 static size_t br_get_linkxstats_size(const struct net_device
*dev
, int attr
)
1541 struct net_bridge_port
*p
= NULL
;
1542 struct net_bridge_vlan_group
*vg
;
1543 struct net_bridge_vlan
*v
;
1544 struct net_bridge
*br
;
1548 case IFLA_STATS_LINK_XSTATS
:
1549 br
= netdev_priv(dev
);
1550 vg
= br_vlan_group(br
);
1552 case IFLA_STATS_LINK_XSTATS_SLAVE
:
1553 p
= br_port_get_rtnl(dev
);
1557 vg
= nbp_vlan_group(p
);
1564 /* we need to count all, even placeholder entries */
1565 list_for_each_entry(v
, &vg
->vlan_list
, vlist
)
1569 return numvls
* nla_total_size(sizeof(struct bridge_vlan_xstats
)) +
1570 nla_total_size(sizeof(struct br_mcast_stats
)) +
1574 static int br_fill_linkxstats(struct sk_buff
*skb
,
1575 const struct net_device
*dev
,
1576 int *prividx
, int attr
)
1578 struct nlattr
*nla __maybe_unused
;
1579 struct net_bridge_port
*p
= NULL
;
1580 struct net_bridge_vlan_group
*vg
;
1581 struct net_bridge_vlan
*v
;
1582 struct net_bridge
*br
;
1583 struct nlattr
*nest
;
1587 case IFLA_STATS_LINK_XSTATS
:
1588 br
= netdev_priv(dev
);
1589 vg
= br_vlan_group(br
);
1591 case IFLA_STATS_LINK_XSTATS_SLAVE
:
1592 p
= br_port_get_rtnl(dev
);
1596 vg
= nbp_vlan_group(p
);
1602 nest
= nla_nest_start_noflag(skb
, LINK_XSTATS_TYPE_BRIDGE
);
1609 pvid
= br_get_pvid(vg
);
1610 list_for_each_entry(v
, &vg
->vlan_list
, vlist
) {
1611 struct bridge_vlan_xstats vxi
;
1612 struct br_vlan_stats stats
;
1614 if (++vl_idx
< *prividx
)
1616 memset(&vxi
, 0, sizeof(vxi
));
1618 vxi
.flags
= v
->flags
;
1620 vxi
.flags
|= BRIDGE_VLAN_INFO_PVID
;
1621 br_vlan_get_stats(v
, &stats
);
1622 vxi
.rx_bytes
= stats
.rx_bytes
;
1623 vxi
.rx_packets
= stats
.rx_packets
;
1624 vxi
.tx_bytes
= stats
.tx_bytes
;
1625 vxi
.tx_packets
= stats
.tx_packets
;
1627 if (nla_put(skb
, BRIDGE_XSTATS_VLAN
, sizeof(vxi
), &vxi
))
1628 goto nla_put_failure
;
1632 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1633 if (++vl_idx
>= *prividx
) {
1634 nla
= nla_reserve_64bit(skb
, BRIDGE_XSTATS_MCAST
,
1635 sizeof(struct br_mcast_stats
),
1638 goto nla_put_failure
;
1639 br_multicast_get_stats(br
, p
, nla_data(nla
));
1644 nla
= nla_reserve_64bit(skb
, BRIDGE_XSTATS_STP
,
1645 sizeof(p
->stp_xstats
),
1648 goto nla_put_failure
;
1650 spin_lock_bh(&br
->lock
);
1651 memcpy(nla_data(nla
), &p
->stp_xstats
, sizeof(p
->stp_xstats
));
1652 spin_unlock_bh(&br
->lock
);
1655 nla_nest_end(skb
, nest
);
1661 nla_nest_end(skb
, nest
);
1667 static struct rtnl_af_ops br_af_ops __read_mostly
= {
1668 .family
= AF_BRIDGE
,
1669 .get_link_af_size
= br_get_link_af_size_filtered
,
1672 struct rtnl_link_ops br_link_ops __read_mostly
= {
1674 .priv_size
= sizeof(struct net_bridge
),
1675 .setup
= br_dev_setup
,
1676 .maxtype
= IFLA_BR_MAX
,
1677 .policy
= br_policy
,
1678 .validate
= br_validate
,
1679 .newlink
= br_dev_newlink
,
1680 .changelink
= br_changelink
,
1681 .dellink
= br_dev_delete
,
1682 .get_size
= br_get_size
,
1683 .fill_info
= br_fill_info
,
1684 .fill_linkxstats
= br_fill_linkxstats
,
1685 .get_linkxstats_size
= br_get_linkxstats_size
,
1687 .slave_maxtype
= IFLA_BRPORT_MAX
,
1688 .slave_policy
= br_port_policy
,
1689 .slave_changelink
= br_port_slave_changelink
,
1690 .get_slave_size
= br_port_get_slave_size
,
1691 .fill_slave_info
= br_port_fill_slave_info
,
1694 int __init
br_netlink_init(void)
1699 br_vlan_rtnl_init();
1700 rtnl_af_register(&br_af_ops
);
1702 err
= rtnl_link_register(&br_link_ops
);
1709 rtnl_af_unregister(&br_af_ops
);
1714 void br_netlink_fini(void)
1717 br_vlan_rtnl_uninit();
1718 rtnl_af_unregister(&br_af_ops
);
1719 rtnl_link_unregister(&br_link_ops
);