]> git.proxmox.com Git - mirror_iproute2.git/blobdiff - tc/m_police.c
Merge branch 'main' into next
[mirror_iproute2.git] / tc / m_police.c
index 7c05b2d04184e82e813d439f3dd7f80d6f258f99..83b25db49f217f3b35f3baedbae219461d341ae1 100644 (file)
@@ -7,8 +7,8 @@
  *             2 of the License, or (at your option) any later version.
  *
  * Authors:    Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
- * FIXES:       19990619 - J Hadi Salim (hadi@cyberus.ca) 
- *             simple addattr packaging fix.            
+ * FIXES:       19990619 - J Hadi Salim (hadi@cyberus.ca)
+ *             simple addattr packaging fix.
  *             2002: J Hadi Salim - Add tc action extensions syntax
  *
  */
@@ -16,7 +16,6 @@
 #include <stdio.h>
 #include <stdlib.h>
 #include <unistd.h>
-#include <syslog.h>
 #include <fcntl.h>
 #include <sys/socket.h>
 #include <netinet/in.h>
 #include "utils.h"
 #include "tc_util.h"
 
+static int act_parse_police(struct action_util *a, int *argc_p,
+                           char ***argv_p, int tca_id, struct nlmsghdr *n);
+static int print_police(struct action_util *a, FILE *f, struct rtattr *tb);
+
 struct action_util police_action_util = {
        .id = "police",
        .parse_aopt = act_parse_police,
        .print_aopt = print_police,
 };
 
-static void explain(void)
-{
-       fprintf(stderr, "Usage: ... police rate BPS burst BYTES[/BYTES] [ mtu BYTES[/BYTES] ]\n");
-       fprintf(stderr, "                [ peakrate BPS ] [ avrate BPS ]\n");
-       fprintf(stderr, "                [ ACTIONTERM ]\n");
-       fprintf(stderr, "Old Syntax ACTIONTERM := action <EXCEEDACT>[/NOTEXCEEDACT] \n"); 
-       fprintf(stderr, "New Syntax ACTIONTERM := conform-exceed <EXCEEDACT>[/NOTEXCEEDACT] \n"); 
-       fprintf(stderr, "Where: *EXCEEDACT := pipe | ok | reclassify | drop | continue \n");
-       fprintf(stderr, "Where:  pipe is only valid for new syntax \n");
-}
-
-static void explain1(char *arg)
-{
-       fprintf(stderr, "Illegal \"%s\"\n", arg);
-}
-
-#define usage() return(-1)
-
-
-char *police_action_n2a(int action, char *buf, int len)
-{
-       switch (action) {
-       case -1:
-               return "continue";
-               break;
-       case TC_POLICE_OK:
-               return "pass";
-               break;
-       case TC_POLICE_SHOT:
-               return "drop";
-               break;
-       case TC_POLICE_RECLASSIFY:
-               return "reclassify";
-       case TC_POLICE_PIPE:
-               return "pipe";
-       default:
-               snprintf(buf, len, "%d", action);
-               return buf;
-       }
-}
-
-int police_action_a2n(char *arg, int *result)
-{
-       int res;
-
-       if (matches(arg, "continue") == 0)
-               res = -1;
-       else if (matches(arg, "drop") == 0)
-               res = TC_POLICE_SHOT;
-       else if (matches(arg, "shot") == 0)
-               res = TC_POLICE_SHOT;
-       else if (matches(arg, "pass") == 0)
-               res = TC_POLICE_OK;
-       else if (strcmp(arg, "ok") == 0)
-               res = TC_POLICE_OK;
-       else if (matches(arg, "reclassify") == 0)
-               res = TC_POLICE_RECLASSIFY;
-       else if (matches(arg, "pipe") == 0)
-               res = TC_POLICE_PIPE;
-       else {
-               char dummy;
-               if (sscanf(arg, "%d%c", &res, &dummy) != 1)
-                       return -1;
-       }
-       *result = res;
-       return 0;
-}
-
-
-int get_police_result(int *action, int *result, char *arg)
+static void usage(void)
 {
-       char *p = strchr(arg, '/');
-
-       if (p)
-               *p = 0;
-
-       if (police_action_a2n(arg, action)) {
-               if (p)
-                       *p = '/';
-               return -1;
-       }
-
-       if (p) {
-               *p = '/';
-               if (police_action_a2n(p+1, result))
-                       return -1;
-       }
-       return 0;
+       fprintf(stderr,
+               "Usage: ... police rate BPS burst BYTES[/BYTES] [ mtu BYTES[/BYTES] ]\n"
+               "               [ peakrate BPS ] [ avrate BPS ] [ overhead BYTES ]\n"
+               "               [ linklayer TYPE ] [ CONTROL ]\n"
+               "Where: CONTROL := conform-exceed <EXCEEDACT>[/NOTEXCEEDACT]\n"
+               "                 Define how to handle packets which exceed (<EXCEEDACT>)\n"
+               "                 or conform (<NOTEXCEEDACT>) the configured bandwidth limit.\n"
+               "       EXCEEDACT/NOTEXCEEDACT := { pipe | ok | reclassify | drop | continue |\n"
+               "                                  goto chain <CHAIN_INDEX> }\n");
+       exit(-1);
 }
 
-
-int act_parse_police(struct action_util *a,int *argc_p, char ***argv_p, int tca_id, struct nlmsghdr *n)
+static int act_parse_police(struct action_util *a, int *argc_p, char ***argv_p,
+                           int tca_id, struct nlmsghdr *n)
 {
        int argc = *argc_p;
        char **argv = *argv_p;
        int res = -1;
-       int ok=0;
-       struct tc_police p;
+       int ok = 0;
+       struct tc_police p = { .action = TC_POLICE_RECLASSIFY };
        __u32 rtab[256];
        __u32 ptab[256];
        __u32 avrate = 0;
        int presult = 0;
-       unsigned buffer=0, mtu=0, mpu=0;
-       int Rcell_log=-1, Pcell_log = -1; 
+       unsigned buffer = 0, mtu = 0, mpu = 0;
+       unsigned short overhead = 0;
+       unsigned int linklayer = LINKLAYER_ETHERNET; /* Assume ethernet */
+       int Rcell_log =  -1, Pcell_log = -1;
        struct rtattr *tail;
-
-       memset(&p, 0, sizeof(p));
-       p.action = TC_POLICE_RECLASSIFY;
+       __u64 rate64 = 0, prate64 = 0;
 
        if (a) /* new way of doing things */
                NEXT_ARG();
@@ -151,150 +78,152 @@ int act_parse_police(struct action_util *a,int *argc_p, char ***argv_p, int tca_
 
                if (matches(*argv, "index") == 0) {
                        NEXT_ARG();
-                       if (get_u32(&p.index, *argv, 10)) {
-                               fprintf(stderr, "Illegal \"index\"\n");
-                               return -1;
-                       }
+                       if (get_u32(&p.index, *argv, 10))
+                               invarg("index", *argv);
                } else if (matches(*argv, "burst") == 0 ||
                        strcmp(*argv, "buffer") == 0 ||
                        strcmp(*argv, "maxburst") == 0) {
                        NEXT_ARG();
-                       if (buffer) {
-                               fprintf(stderr, "Double \"buffer/burst\" spec\n");
-                               return -1;
-                       }
-                       if (get_size_and_cell(&buffer, &Rcell_log, *argv) < 0) {
-                               explain1("buffer");
-                               return -1;
-                       }
+                       if (buffer)
+                               duparg("buffer/burst", *argv);
+                       if (get_size_and_cell(&buffer, &Rcell_log, *argv) < 0)
+                               invarg("buffer", *argv);
                } else if (strcmp(*argv, "mtu") == 0 ||
                           strcmp(*argv, "minburst") == 0) {
                        NEXT_ARG();
-                       if (mtu) {
-                               fprintf(stderr, "Double \"mtu/minburst\" spec\n");
-                               return -1;
-                       }
-                       if (get_size_and_cell(&mtu, &Pcell_log, *argv) < 0) {
-                               explain1("mtu");
-                               return -1;
-                       }
+                       if (mtu)
+                               duparg("mtu/minburst", *argv);
+                       if (get_size_and_cell(&mtu, &Pcell_log, *argv) < 0)
+                               invarg("mtu", *argv);
                } else if (strcmp(*argv, "mpu") == 0) {
                        NEXT_ARG();
-                       if (mpu) {
-                               fprintf(stderr, "Double \"mpu\" spec\n");
-                               return -1;
-                       }
-                       if (get_size(&mpu, *argv)) {
-                               explain1("mpu");
-                               return -1;
-                       }
+                       if (mpu)
+                               duparg("mpu", *argv);
+                       if (get_size(&mpu, *argv))
+                               invarg("mpu", *argv);
                } else if (strcmp(*argv, "rate") == 0) {
                        NEXT_ARG();
-                       if (p.rate.rate) {
-                               fprintf(stderr, "Double \"rate\" spec\n");
-                               return -1;
-                       }
-                       if (get_rate(&p.rate.rate, *argv)) {
-                               explain1("rate");
-                               return -1;
-                       }
+                       if (rate64)
+                               duparg("rate", *argv);
+                       if (get_rate64(&rate64, *argv))
+                               invarg("rate", *argv);
                } else if (strcmp(*argv, "avrate") == 0) {
                        NEXT_ARG();
-                       if (avrate) {
-                               fprintf(stderr, "Double \"avrate\" spec\n");
-                               return -1;
-                       }
-                       if (get_rate(&avrate, *argv)) {
-                               explain1("avrate");
-                               return -1;
-                       }
+                       if (avrate)
+                               duparg("avrate", *argv);
+                       if (get_rate(&avrate, *argv))
+                               invarg("avrate", *argv);
                } else if (matches(*argv, "peakrate") == 0) {
                        NEXT_ARG();
-                       if (p.peakrate.rate) {
-                               fprintf(stderr, "Double \"peakrate\" spec\n");
-                               return -1;
-                       }
-                       if (get_rate(&p.peakrate.rate, *argv)) {
-                               explain1("peakrate");
-                               return -1;
-                       }
-               } else if (matches(*argv, "reclassify") == 0) {
-                       p.action = TC_POLICE_RECLASSIFY;
-               } else if (matches(*argv, "drop") == 0 ||
-                          matches(*argv, "shot") == 0) {
-                       p.action = TC_POLICE_SHOT;
-               } else if (matches(*argv, "continue") == 0) {
-                       p.action = TC_POLICE_UNSPEC;
-               } else if (matches(*argv, "pass") == 0) {
-                       p.action = TC_POLICE_OK;
-               } else if (matches(*argv, "pipe") == 0) {
-                       p.action = TC_POLICE_PIPE;
+                       if (prate64)
+                               duparg("peakrate", *argv);
+                       if (get_rate64(&prate64, *argv))
+                               invarg("peakrate", *argv);
+               } else if (matches(*argv, "reclassify") == 0 ||
+                          matches(*argv, "drop") == 0 ||
+                          matches(*argv, "shot") == 0 ||
+                          matches(*argv, "continue") == 0 ||
+                          matches(*argv, "pass") == 0 ||
+                          matches(*argv, "ok") == 0 ||
+                          matches(*argv, "pipe") == 0 ||
+                          matches(*argv, "goto") == 0) {
+                       if (!parse_action_control(&argc, &argv, &p.action, false))
+                               goto action_ctrl_ok;
+                       return -1;
                } else if (strcmp(*argv, "conform-exceed") == 0) {
                        NEXT_ARG();
-                       if (get_police_result(&p.action, &presult, *argv)) {
-                               fprintf(stderr, "Illegal \"action\"\n");
-                               return -1;
-                       }
-               } else if (strcmp(*argv, "help") == 0) {
-                       explain();
+                       if (!parse_action_control_slash(&argc, &argv, &p.action,
+                                                       &presult, true))
+                               goto action_ctrl_ok;
                        return -1;
+               } else if (matches(*argv, "overhead") == 0) {
+                       NEXT_ARG();
+                       if (get_u16(&overhead, *argv, 10))
+                               invarg("overhead", *argv);
+               } else if (matches(*argv, "linklayer") == 0) {
+                       NEXT_ARG();
+                       if (get_linklayer(&linklayer, *argv))
+                               invarg("linklayer", *argv);
+               } else if (strcmp(*argv, "help") == 0) {
+                       usage();
                } else {
                        break;
                }
+               NEXT_ARG_FWD();
+action_ctrl_ok:
                ok++;
-               argc--; argv++;
        }
 
        if (!ok)
                return -1;
 
-       if (p.rate.rate && !buffer) {
-               fprintf(stderr, "\"burst\" requires \"rate\".\n");
+       if (rate64 && avrate)
+               return -1;
+
+       /* Must at least do late binding, use TB or ewma policing */
+       if (!rate64 && !avrate && !p.index && !mtu) {
+               fprintf(stderr, "'rate' or 'avrate' or 'mtu' MUST be specified.\n");
                return -1;
        }
-       if (p.peakrate.rate) {
-               if (!p.rate.rate) {
-                       fprintf(stderr, "\"peakrate\" requires \"rate\".\n");
+
+       /* When the TB policer is used, burst is required */
+       if (rate64 && !buffer && !avrate) {
+               fprintf(stderr, "'burst' requires 'rate'.\n");
+               return -1;
+       }
+
+       if (prate64) {
+               if (!rate64) {
+                       fprintf(stderr, "'peakrate' requires 'rate'.\n");
                        return -1;
                }
                if (!mtu) {
-                       fprintf(stderr, "\"mtu\" is required, if \"peakrate\" is requested.\n");
+                       fprintf(stderr, "'mtu' is required, if 'peakrate' is requested.\n");
                        return -1;
                }
        }
 
-       if (p.rate.rate) {
-               if ((Rcell_log = tc_calc_rtable(p.rate.rate, rtab, Rcell_log, mtu, mpu)) < 0) {
-                       fprintf(stderr, "TBF: failed to calculate rate table.\n");
+       if (rate64) {
+               p.rate.rate = (rate64 >= (1ULL << 32)) ? ~0U : rate64;
+               p.rate.mpu = mpu;
+               p.rate.overhead = overhead;
+               if (tc_calc_rtable_64(&p.rate, rtab, Rcell_log, mtu,
+                                  linklayer, rate64) < 0) {
+                       fprintf(stderr, "POLICE: failed to calculate rate table.\n");
                        return -1;
                }
-               p.burst = tc_calc_xmittime(p.rate.rate, buffer);
-               p.rate.cell_log = Rcell_log;
-               p.rate.mpu = mpu;
+               p.burst = tc_calc_xmittime(rate64, buffer);
        }
        p.mtu = mtu;
-       if (p.peakrate.rate) {
-               if ((Pcell_log = tc_calc_rtable(p.peakrate.rate, ptab, Pcell_log, mtu, mpu)) < 0) {
+       if (prate64) {
+               p.peakrate.rate = (prate64 >= (1ULL << 32)) ? ~0U : prate64;
+               p.peakrate.mpu = mpu;
+               p.peakrate.overhead = overhead;
+               if (tc_calc_rtable_64(&p.peakrate, ptab, Pcell_log, mtu,
+                                  linklayer, prate64) < 0) {
                        fprintf(stderr, "POLICE: failed to calculate peak rate table.\n");
                        return -1;
                }
-               p.peakrate.cell_log = Pcell_log;
-               p.peakrate.mpu = mpu;
        }
 
-       tail = (struct rtattr*)(((void*)n)+NLMSG_ALIGN(n->nlmsg_len));
-       addattr_l(n, MAX_MSG, tca_id, NULL, 0);
+       tail = addattr_nest(n, MAX_MSG, tca_id);
        addattr_l(n, MAX_MSG, TCA_POLICE_TBF, &p, sizeof(p));
-       if (p.rate.rate)
+       if (rate64) {
                addattr_l(n, MAX_MSG, TCA_POLICE_RATE, rtab, 1024);
-       if (p.peakrate.rate)
-                addattr_l(n, MAX_MSG, TCA_POLICE_PEAKRATE, ptab, 1024);
+               if (rate64 >= (1ULL << 32))
+                       addattr64(n, MAX_MSG, TCA_POLICE_RATE64, rate64);
+       }
+       if (prate64) {
+               addattr_l(n, MAX_MSG, TCA_POLICE_PEAKRATE, ptab, 1024);
+               if (prate64 >= (1ULL << 32))
+                       addattr64(n, MAX_MSG, TCA_POLICE_PEAKRATE64, prate64);
+       }
        if (avrate)
                addattr32(n, MAX_MSG, TCA_POLICE_AVRATE, avrate);
        if (presult)
                addattr32(n, MAX_MSG, TCA_POLICE_RESULT, presult);
 
-       tail->rta_len = (((void*)n)+NLMSG_ALIGN(n->nlmsg_len)) - (void*)tail;
+       addattr_nest_end(n, tail);
        res = 0;
 
        *argc_p = argc;
@@ -304,22 +233,23 @@ int act_parse_police(struct action_util *a,int *argc_p, char ***argv_p, int tca_
 
 int parse_police(int *argc_p, char ***argv_p, int tca_id, struct nlmsghdr *n)
 {
-       return act_parse_police(NULL,argc_p,argv_p,tca_id,n);
+       return act_parse_police(NULL, argc_p, argv_p, tca_id, n);
 }
 
-int 
-print_police(struct action_util *a, FILE *f, struct rtattr *arg)
+static int print_police(struct action_util *a, FILE *f, struct rtattr *arg)
 {
        SPRINT_BUF(b1);
+       SPRINT_BUF(b2);
        struct tc_police *p;
        struct rtattr *tb[TCA_POLICE_MAX+1];
-       unsigned buffer;
+       unsigned int buffer;
+       unsigned int linklayer;
+       __u64 rate64, prate64;
 
        if (arg == NULL)
                return 0;
 
-       memset(tb, 0, sizeof(tb));
-       parse_rtattr(tb, TCA_POLICE_MAX, RTA_DATA(arg), RTA_PAYLOAD(arg));
+       parse_rtattr_nested(tb, TCA_POLICE_MAX, arg);
 
        if (tb[TCA_POLICE_TBF] == NULL) {
                fprintf(f, "[NULL police tbf]");
@@ -333,28 +263,60 @@ print_police(struct action_util *a, FILE *f, struct rtattr *arg)
 #endif
        p = RTA_DATA(tb[TCA_POLICE_TBF]);
 
+       rate64 = p->rate.rate;
+       if (tb[TCA_POLICE_RATE64] &&
+           RTA_PAYLOAD(tb[TCA_POLICE_RATE64]) >= sizeof(rate64))
+               rate64 = rta_getattr_u64(tb[TCA_POLICE_RATE64]);
+
        fprintf(f, " police 0x%x ", p->index);
-       fprintf(f, "rate %s ", sprint_rate(p->rate.rate, b1));
-       buffer = ((double)p->rate.rate*tc_core_tick2usec(p->burst))/1000000;
+       fprintf(f, "rate %s ", sprint_rate(rate64, b1));
+       buffer = tc_calc_xmitsize(rate64, p->burst);
        fprintf(f, "burst %s ", sprint_size(buffer, b1));
        fprintf(f, "mtu %s ", sprint_size(p->mtu, b1));
        if (show_raw)
                fprintf(f, "[%08x] ", p->burst);
-       if (p->peakrate.rate)
-               fprintf(f, "peakrate %s ", sprint_rate(p->peakrate.rate, b1));
+
+       prate64 = p->peakrate.rate;
+       if (tb[TCA_POLICE_PEAKRATE64] &&
+           RTA_PAYLOAD(tb[TCA_POLICE_PEAKRATE64]) >= sizeof(prate64))
+               prate64 = rta_getattr_u64(tb[TCA_POLICE_PEAKRATE64]);
+
+       if (prate64)
+               fprintf(f, "peakrate %s ", sprint_rate(prate64, b1));
+
        if (tb[TCA_POLICE_AVRATE])
-               fprintf(f, "avrate %s ", sprint_rate(*(__u32*)RTA_DATA(tb[TCA_POLICE_AVRATE]), b1));
-       fprintf(f, "action %s", police_action_n2a(p->action, b1, sizeof(b1)));
+               fprintf(f, "avrate %s ",
+                       sprint_rate(rta_getattr_u32(tb[TCA_POLICE_AVRATE]),
+                                   b1));
+
+       print_action_control(f, "action ", p->action, "");
+
        if (tb[TCA_POLICE_RESULT]) {
-               fprintf(f, "/%s ", police_action_n2a(*(int*)RTA_DATA(tb[TCA_POLICE_RESULT]), b1, sizeof(b1)));
+               __u32 action = rta_getattr_u32(tb[TCA_POLICE_RESULT]);
+
+               print_action_control(f, "/", action, " ");
        } else
                fprintf(f, " ");
-       fprintf(f, "\nref %d bind %d\n",p->refcnt, p->bindcnt);
+
+       fprintf(f, "overhead %ub ", p->rate.overhead);
+       linklayer = (p->rate.linklayer & TC_LINKLAYER_MASK);
+       if (linklayer > TC_LINKLAYER_ETHERNET || show_details)
+               fprintf(f, "linklayer %s ", sprint_linklayer(linklayer, b2));
+       fprintf(f, "\n\tref %d bind %d", p->refcnt, p->bindcnt);
+       if (show_stats) {
+               if (tb[TCA_POLICE_TM]) {
+                       struct tcf_t *tm = RTA_DATA(tb[TCA_POLICE_TM]);
+
+                       print_tm(f, tm);
+               }
+       }
+       fprintf(f, "\n");
+
 
        return 0;
 }
 
-int 
-tc_print_police(FILE *f, struct rtattr *arg) {
-       return print_police(&police_action_util,f,arg);
+int tc_print_police(FILE *f, struct rtattr *arg)
+{
+       return print_police(&police_action_util, f, arg);
 }