tc/m_mirred.c

   1 /*
   2  * m_egress.c           ingress/egress packet mirror/redir actions module
   3  *
   4  *              This program is free software; you can distribute it and/or
   5  *              modify it under the terms of the GNU General Public License
   6  *              as published by the Free Software Foundation; either version
   7  *              2 of the License, or (at your option) any later version.
   8  *
   9  * Authors:  J Hadi Salim (hadi@cyberus.ca)
  10  *
  11  * TODO: Add Ingress support
  12  *
  13  */
  14
  15 #include <stdio.h>
  16 #include <stdlib.h>
  17 #include <unistd.h>
  18 #include <syslog.h>
  19 #include <fcntl.h>
  20 #include <sys/socket.h>
  21 #include <netinet/in.h>
  22 #include <arpa/inet.h>
  23 #include <string.h>
  24 #include "utils.h"
  25 #include "tc_util.h"
  26 #include "tc_common.h"
  27 #include <linux/tc_act/tc_mirred.h>
  28
  29 int mirred_d = 1;
  30
  31 static void
  32 explain(void)
  33 {
  34         fprintf(stderr, "Usage: mirred <DIRECTION> <ACTION> [index INDEX] <dev DEVICENAME> \n");
  35         fprintf(stderr, "where: \n");
  36         fprintf(stderr, "\tDIRECTION := <ingress | egress>\n");
  37         fprintf(stderr, "\tACTION := <mirror | redirect>\n");
  38         fprintf(stderr, "\tINDEX  is the specific policy instance id\n");
  39         fprintf(stderr, "\tDEVICENAME is the devicename \n");
  40
  41 }
  42
  43 static void
  44 usage(void)
  45 {
  46         explain();
  47         exit(-1);
  48 }
  49
  50 char *mirred_n2a(int action)
  51 {
  52         switch (action) {
  53         case TCA_EGRESS_REDIR:
  54                 return "Egress Redirect";
  55         case TCA_INGRESS_REDIR:
  56                 return "Ingress Redirect";
  57         case TCA_EGRESS_MIRROR:
  58                 return "Egress Mirror";
  59         case TCA_INGRESS_MIRROR:
  60                 return "Ingress Mirror";
  61         default:
  62                 return "unknown";
  63         }
  64 }
  65
  66 int
  67 parse_egress(struct action_util *a, int *argc_p, char ***argv_p, int tca_id, struct nlmsghdr *n)
  68 {
  69
  70         int argc = *argc_p;
  71         char **argv = *argv_p;
  72         int ok = 0, iok = 0, mirror=0,redir=0;
  73         struct tc_mirred p;
  74         struct rtattr *tail;
  75         char d[16];
  76
  77         memset(d,0,sizeof(d)-1);
  78         memset(&p,0,sizeof(struct tc_mirred));
  79
  80         while (argc > 0) {
  81
  82                 if (matches(*argv, "action") == 0) {
  83                         break;
  84                 } else if (matches(*argv, "egress") == 0) {
  85                         NEXT_ARG();
  86                         ok++;
  87                         continue;
  88                 } else {
  89
  90                         if (matches(*argv, "index") == 0) {
  91                                 NEXT_ARG();
  92                                 if (get_u32(&p.index, *argv, 10)) {
  93                                         fprintf(stderr, "Illegal \"index\"\n");
  94                                         return -1;
  95                                 }
  96                                 iok++;
  97                                 if (!ok) {
  98                                         argc--;
  99                                         argv++;
 100                                         break;
 101                                 }
 102                         } else if(!ok) {
 103                                 fprintf(stderr, "was expecting egress (%s)\n", *argv);
 104                                 break;
 105
 106                         } else if (!mirror && matches(*argv, "mirror") == 0) {
 107                                 mirror=1;
 108                                 if (redir) {
 109                                         fprintf(stderr, "Cant have both mirror and redir\n");
 110                                         return -1;
 111                                 }
 112                                 p.eaction = TCA_EGRESS_MIRROR;
 113                                 p.action = TC_ACT_PIPE;
 114                                 ok++;
 115                         } else if (!redir && matches(*argv, "redirect") == 0) {
 116                                 redir=1;
 117                                 if (mirror) {
 118                                         fprintf(stderr, "Cant have both mirror and redir\n");
 119                                         return -1;
 120                                 }
 121                                 p.eaction = TCA_EGRESS_REDIR;
 122                                 p.action = TC_ACT_STOLEN;
 123                                 ok++;
 124                         } else if ((redir || mirror) && matches(*argv, "dev") == 0) {
 125                                 NEXT_ARG();
 126                                 if (strlen(d))
 127                                         duparg("dev", *argv);
 128
 129                                 strncpy(d, *argv, sizeof(d)-1);
 130                                 argc--;
 131                                 argv++;
 132
 133                                 break;
 134
 135                         }
 136                 }
 137
 138                 NEXT_ARG();
 139         }
 140
 141         if (!ok && !iok) {
 142                 return -1;
 143         }
 144
 145
 146
 147         if (d[0])  {
 148                 int idx;
 149                 ll_init_map(&rth);
 150
 151                 if ((idx = ll_name_to_index(d)) == 0) {
 152                         fprintf(stderr, "Cannot find device \"%s\"\n", d);
 153                         return -1;
 154                 }
 155
 156                 p.ifindex = idx;
 157         }
 158
 159
 160         if (argc && p.eaction == TCA_EGRESS_MIRROR) {
 161
 162                 if (matches(*argv, "reclassify") == 0) {
 163                         p.action = TC_POLICE_RECLASSIFY;
 164                         NEXT_ARG();
 165                 } else if (matches(*argv, "pipe") == 0) {
 166                         p.action = TC_POLICE_PIPE;
 167                         NEXT_ARG();
 168                 } else if (matches(*argv, "drop") == 0 ||
 169                            matches(*argv, "shot") == 0) {
 170                         p.action = TC_POLICE_SHOT;
 171                         NEXT_ARG();
 172                 } else if (matches(*argv, "continue") == 0) {
 173                         p.action = TC_POLICE_UNSPEC;
 174                         NEXT_ARG();
 175                 } else if (matches(*argv, "pass") == 0) {
 176                         p.action = TC_POLICE_OK;
 177                         NEXT_ARG();
 178                 }
 179
 180         }
 181
 182         if (argc) {
 183                 if (iok && matches(*argv, "index") == 0) {
 184                         fprintf(stderr, "mirred: Illegal double index\n");
 185                         return -1;
 186                 } else {
 187                         if (matches(*argv, "index") == 0) {
 188                                 NEXT_ARG();
 189                                 if (get_u32(&p.index, *argv, 10)) {
 190                                         fprintf(stderr, "mirred: Illegal \"index\"\n");
 191                                         return -1;
 192                                 }
 193                                 argc--;
 194                                 argv++;
 195                         }
 196                 }
 197         }
 198
 199         if (mirred_d)
 200                 fprintf(stdout, "Action %d device %s ifindex %d\n",p.action, d,p.ifindex);
 201
 202         tail = NLMSG_TAIL(n);
 203         addattr_l(n, MAX_MSG, tca_id, NULL, 0);
 204         addattr_l(n, MAX_MSG, TCA_MIRRED_PARMS, &p, sizeof (p));
 205         tail->rta_len = (void *) NLMSG_TAIL(n) - (void *) tail;
 206
 207         *argc_p = argc;
 208         *argv_p = argv;
 209         return 0;
 210 }
 211
 212
 213 int
 214 parse_mirred(struct action_util *a, int *argc_p, char ***argv_p, int tca_id, struct nlmsghdr *n)
 215 {
 216
 217         int argc = *argc_p;
 218         char **argv = *argv_p;
 219
 220         if (argc < 0) {
 221                 fprintf(stderr,"mirred bad arguement count %d\n", argc);
 222                 return -1;
 223         }
 224
 225         if (matches(*argv, "mirred") == 0) {
 226                 NEXT_ARG();
 227         } else {
 228                 fprintf(stderr,"mirred bad arguement %s\n", *argv);
 229                 return -1;
 230         }
 231
 232
 233         if (matches(*argv, "egress") == 0 || matches(*argv, "index") == 0) {
 234                 int ret = parse_egress(a, &argc, &argv, tca_id, n);
 235                 if (ret == 0) {
 236                         *argc_p = argc;
 237                         *argv_p = argv;
 238                         return 0;
 239                 }
 240
 241         } else if (matches(*argv, "ingress") == 0) {
 242                 fprintf(stderr,"mirred ingress not supported at the moment\n");
 243         } else if (matches(*argv, "help") == 0) {
 244                 usage();
 245         } else {
 246                 fprintf(stderr,"mirred option not supported %s\n", *argv);
 247         }
 248
 249         return -1;
 250
 251 }
 252
 253 int
 254 print_mirred(struct action_util *au,FILE * f, struct rtattr *arg)
 255 {
 256         struct tc_mirred *p;
 257         struct rtattr *tb[TCA_MIRRED_MAX + 1];
 258         const char *dev;
 259         SPRINT_BUF(b1);
 260
 261         if (arg == NULL)
 262                 return -1;
 263
 264         parse_rtattr_nested(tb, TCA_MIRRED_MAX, arg);
 265
 266         if (tb[TCA_MIRRED_PARMS] == NULL) {
 267                 fprintf(f, "[NULL mirred parameters]");
 268                 return -1;
 269         }
 270         p = RTA_DATA(tb[TCA_MIRRED_PARMS]);
 271
 272         /*
 273         ll_init_map(&rth);
 274         */
 275
 276
 277         if ((dev = ll_index_to_name(p->ifindex)) == 0) {
 278                 fprintf(stderr, "Cannot find device %d\n", p->ifindex);
 279                 return -1;
 280         }
 281
 282         fprintf(f, "mirred (%s to device %s) %s", mirred_n2a(p->eaction), dev,action_n2a(p->action, b1, sizeof (b1)));
 283
 284         fprintf(f, "\n ");
 285         fprintf(f, "\tindex %d ref %d bind %d",p->index,p->refcnt,p->bindcnt);
 286
 287         if (show_stats) {
 288                 if (tb[TCA_MIRRED_TM]) {
 289                         struct tcf_t *tm = RTA_DATA(tb[TCA_MIRRED_TM]);
 290                         print_tm(f,tm);
 291                 }
 292         }
 293         fprintf(f, "\n ");
 294         return 0;
 295 }
 296
 297 struct action_util mirred_action_util = {
 298         .id = "mirred",
 299         .parse_aopt = parse_mirred,
 300         .print_aopt = print_mirred,
 301 };