Blame tc/f_flow.c

Packit Service 3880ab
/*
Packit Service 3880ab
 * f_flow.c		Flow filter
Packit Service 3880ab
 *
Packit Service 3880ab
 *		This program is free software; you can redistribute it and/or
Packit Service 3880ab
 *		modify it under the terms of the GNU General Public License
Packit Service 3880ab
 *		as published by the Free Software Foundation; either version
Packit Service 3880ab
 *		2 of the License, or (at your option) any later version.
Packit Service 3880ab
 *
Packit Service 3880ab
 * Authors:	Patrick McHardy <kaber@trash.net>
Packit Service 3880ab
 */
Packit Service 3880ab
#include <stdio.h>
Packit Service 3880ab
#include <stdlib.h>
Packit Service 3880ab
#include <unistd.h>
Packit Service 3880ab
#include <string.h>
Packit Service 3880ab
#include <errno.h>
Packit Service 3880ab
Packit Service 3880ab
#include "utils.h"
Packit Service 3880ab
#include "tc_util.h"
Packit Service 3880ab
#include "m_ematch.h"
Packit Service 3880ab
Packit Service 3880ab
static void explain(void)
Packit Service 3880ab
{
Packit Service 3880ab
	fprintf(stderr,
Packit Service 3880ab
		"Usage: ... flow ...\n"
Packit Service 3880ab
		"\n"
Packit Service 3880ab
		" [mapping mode]: map key KEY [ OPS ] ...\n"
Packit Service 3880ab
		" [hashing mode]: hash keys KEY-LIST ... [ perturb SECS ]\n"
Packit Service 3880ab
		"\n"
Packit Service 3880ab
		"                 [ divisor NUM ] [ baseclass ID ] [ match EMATCH_TREE ]\n"
Packit Service 3880ab
		"                 [ action ACTION_SPEC ]\n"
Packit Service 3880ab
		"\n"
Packit Service 3880ab
		"KEY-LIST := [ KEY-LIST , ] KEY\n"
Packit Service 3880ab
		"KEY      := [ src | dst | proto | proto-src | proto-dst | iif | priority |\n"
Packit Service 3880ab
		"              mark | nfct | nfct-src | nfct-dst | nfct-proto-src |\n"
Packit Service 3880ab
		"              nfct-proto-dst | rt-classid | sk-uid | sk-gid |\n"
Packit Service 3880ab
		"              vlan-tag | rxhash ]\n"
Packit Service 3880ab
		"OPS      := [ or NUM | and NUM | xor NUM | rshift NUM | addend NUM ]\n"
Packit Service 3880ab
		"ID       := X:Y\n"
Packit Service 3880ab
	);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static const char *flow_keys[FLOW_KEY_MAX+1] = {
Packit Service 3880ab
	[FLOW_KEY_SRC]			= "src",
Packit Service 3880ab
	[FLOW_KEY_DST]			= "dst",
Packit Service 3880ab
	[FLOW_KEY_PROTO]		= "proto",
Packit Service 3880ab
	[FLOW_KEY_PROTO_SRC]		= "proto-src",
Packit Service 3880ab
	[FLOW_KEY_PROTO_DST]		= "proto-dst",
Packit Service 3880ab
	[FLOW_KEY_IIF]			= "iif",
Packit Service 3880ab
	[FLOW_KEY_PRIORITY]		= "priority",
Packit Service 3880ab
	[FLOW_KEY_MARK]			= "mark",
Packit Service 3880ab
	[FLOW_KEY_NFCT]			= "nfct",
Packit Service 3880ab
	[FLOW_KEY_NFCT_SRC]		= "nfct-src",
Packit Service 3880ab
	[FLOW_KEY_NFCT_DST]		= "nfct-dst",
Packit Service 3880ab
	[FLOW_KEY_NFCT_PROTO_SRC]	= "nfct-proto-src",
Packit Service 3880ab
	[FLOW_KEY_NFCT_PROTO_DST]	= "nfct-proto-dst",
Packit Service 3880ab
	[FLOW_KEY_RTCLASSID]		= "rt-classid",
Packit Service 3880ab
	[FLOW_KEY_SKUID]		= "sk-uid",
Packit Service 3880ab
	[FLOW_KEY_SKGID]		= "sk-gid",
Packit Service 3880ab
	[FLOW_KEY_VLAN_TAG]		= "vlan-tag",
Packit Service 3880ab
	[FLOW_KEY_RXHASH]		= "rxhash",
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static int flow_parse_keys(__u32 *keys, __u32 *nkeys, char *argv)
Packit Service 3880ab
{
Packit Service 3880ab
	char *s, *sep;
Packit Service 3880ab
	unsigned int i;
Packit Service 3880ab
Packit Service 3880ab
	*keys = 0;
Packit Service 3880ab
	*nkeys = 0;
Packit Service 3880ab
	s = argv;
Packit Service 3880ab
	while (s != NULL) {
Packit Service 3880ab
		sep = strchr(s, ',');
Packit Service 3880ab
		if (sep)
Packit Service 3880ab
			*sep = '\0';
Packit Service 3880ab
Packit Service 3880ab
		for (i = 0; i <= FLOW_KEY_MAX; i++) {
Packit Service 3880ab
			if (matches(s, flow_keys[i]) == 0) {
Packit Service 3880ab
				*keys |= 1 << i;
Packit Service 3880ab
				(*nkeys)++;
Packit Service 3880ab
				break;
Packit Service 3880ab
			}
Packit Service 3880ab
		}
Packit Service 3880ab
		if (i > FLOW_KEY_MAX) {
Packit Service 3880ab
			fprintf(stderr, "Unknown flow key \"%s\"\n", s);
Packit Service 3880ab
			return -1;
Packit Service 3880ab
		}
Packit Service 3880ab
		s = sep ? sep + 1 : NULL;
Packit Service 3880ab
	}
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void transfer_bitop(__u32 *mask, __u32 *xor, __u32 m, __u32 x)
Packit Service 3880ab
{
Packit Service 3880ab
	*xor = x ^ (*xor & m);
Packit Service 3880ab
	*mask &= m;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int get_addend(__u32 *addend, char *argv, __u32 keys)
Packit Service 3880ab
{
Packit Service 3880ab
	inet_prefix addr;
Packit Service 3880ab
	int sign = 0;
Packit Service 3880ab
	__u32 tmp;
Packit Service 3880ab
Packit Service 3880ab
	if (*argv == '-') {
Packit Service 3880ab
		sign = 1;
Packit Service 3880ab
		argv++;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (get_u32(&tmp, argv, 0) == 0)
Packit Service 3880ab
		goto out;
Packit Service 3880ab
Packit Service 3880ab
	if (keys & (FLOW_KEY_SRC | FLOW_KEY_DST |
Packit Service 3880ab
		    FLOW_KEY_NFCT_SRC | FLOW_KEY_NFCT_DST) &&
Packit Service 3880ab
	    get_addr(&addr, argv, AF_UNSPEC) == 0) {
Packit Service 3880ab
		switch (addr.family) {
Packit Service 3880ab
		case AF_INET:
Packit Service 3880ab
			tmp = ntohl(addr.data[0]);
Packit Service 3880ab
			goto out;
Packit Service 3880ab
		case AF_INET6:
Packit Service 3880ab
			tmp = ntohl(addr.data[3]);
Packit Service 3880ab
			goto out;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return -1;
Packit Service 3880ab
out:
Packit Service 3880ab
	if (sign)
Packit Service 3880ab
		tmp = -tmp;
Packit Service 3880ab
	*addend = tmp;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int flow_parse_opt(struct filter_util *fu, char *handle,
Packit Service 3880ab
			  int argc, char **argv, struct nlmsghdr *n)
Packit Service 3880ab
{
Packit Service 3880ab
	struct tcmsg *t = NLMSG_DATA(n);
Packit Service 3880ab
	struct rtattr *tail;
Packit Service 3880ab
	__u32 mask = ~0U, xor = 0;
Packit Service 3880ab
	__u32 keys = 0, nkeys = 0;
Packit Service 3880ab
	__u32 mode = FLOW_MODE_MAP;
Packit Service 3880ab
	__u32 tmp;
Packit Service 3880ab
Packit Service 3880ab
	if (handle) {
Packit Service 3880ab
		if (get_u32(&t->tcm_handle, handle, 0)) {
Packit Service 3880ab
			fprintf(stderr, "Illegal \"handle\"\n");
Packit Service 3880ab
			return -1;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	tail = addattr_nest(n, 4096, TCA_OPTIONS);
Packit Service 3880ab
Packit Service 3880ab
	while (argc > 0) {
Packit Service 3880ab
		if (matches(*argv, "map") == 0) {
Packit Service 3880ab
			mode = FLOW_MODE_MAP;
Packit Service 3880ab
		} else if (matches(*argv, "hash") == 0) {
Packit Service 3880ab
			mode = FLOW_MODE_HASH;
Packit Service 3880ab
		} else if (matches(*argv, "keys") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (flow_parse_keys(&keys, &nkeys, *argv))
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			addattr32(n, 4096, TCA_FLOW_KEYS, keys);
Packit Service 3880ab
		} else if (matches(*argv, "and") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (get_u32(&tmp, *argv, 0)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"mask\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			transfer_bitop(&mask, &xor, tmp, 0);
Packit Service 3880ab
		} else if (matches(*argv, "or") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (get_u32(&tmp, *argv, 0)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"or\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			transfer_bitop(&mask, &xor, ~tmp, tmp);
Packit Service 3880ab
		} else if (matches(*argv, "xor") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (get_u32(&tmp, *argv, 0)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"xor\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			transfer_bitop(&mask, &xor, ~0, tmp);
Packit Service 3880ab
		} else if (matches(*argv, "rshift") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (get_u32(&tmp, *argv, 0)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"rshift\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			addattr32(n, 4096, TCA_FLOW_RSHIFT, tmp);
Packit Service 3880ab
		} else if (matches(*argv, "addend") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (get_addend(&tmp, *argv, keys)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"addend\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			addattr32(n, 4096, TCA_FLOW_ADDEND, tmp);
Packit Service 3880ab
		} else if (matches(*argv, "divisor") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (get_u32(&tmp, *argv, 0)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"divisor\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			addattr32(n, 4096, TCA_FLOW_DIVISOR, tmp);
Packit Service 3880ab
		} else if (matches(*argv, "baseclass") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (get_tc_classid(&tmp, *argv) || TC_H_MIN(tmp) == 0) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"baseclass\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			addattr32(n, 4096, TCA_FLOW_BASECLASS, tmp);
Packit Service 3880ab
		} else if (matches(*argv, "perturb") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (get_u32(&tmp, *argv, 0)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"perturb\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			addattr32(n, 4096, TCA_FLOW_PERTURB, tmp);
Packit Service 3880ab
		} else if (matches(*argv, "police") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (parse_police(&argc, &argv, TCA_FLOW_POLICE, n)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"police\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			continue;
Packit Service 3880ab
		} else if (matches(*argv, "action") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (parse_action(&argc, &argv, TCA_FLOW_ACT, n)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"action\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			continue;
Packit Service 3880ab
		} else if (matches(*argv, "match") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			if (parse_ematch(&argc, &argv, TCA_FLOW_EMATCHES, n)) {
Packit Service 3880ab
				fprintf(stderr, "Illegal \"ematch\"\n");
Packit Service 3880ab
				return -1;
Packit Service 3880ab
			}
Packit Service 3880ab
			continue;
Packit Service 3880ab
		} else if (matches(*argv, "help") == 0) {
Packit Service 3880ab
			explain();
Packit Service 3880ab
			return -1;
Packit Service 3880ab
		} else {
Packit Service 3880ab
			fprintf(stderr, "What is \"%s\"?\n", *argv);
Packit Service 3880ab
			explain();
Packit Service 3880ab
			return -1;
Packit Service 3880ab
		}
Packit Service 3880ab
		argv++, argc--;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (nkeys > 1 && mode != FLOW_MODE_HASH) {
Packit Service 3880ab
		fprintf(stderr, "Invalid mode \"map\" for multiple keys\n");
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
	addattr32(n, 4096, TCA_FLOW_MODE, mode);
Packit Service 3880ab
Packit Service 3880ab
	if (mask != ~0 || xor != 0) {
Packit Service 3880ab
		addattr32(n, 4096, TCA_FLOW_MASK, mask);
Packit Service 3880ab
		addattr32(n, 4096, TCA_FLOW_XOR, xor);
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	addattr_nest_end(n, tail);
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int flow_print_opt(struct filter_util *fu, FILE *f, struct rtattr *opt,
Packit Service 3880ab
			  __u32 handle)
Packit Service 3880ab
{
Packit Service 3880ab
	struct rtattr *tb[TCA_FLOW_MAX+1];
Packit Service 3880ab
Packit Service 3880ab
	SPRINT_BUF(b1);
Packit Service 3880ab
	unsigned int i;
Packit Service 3880ab
	__u32 mask = ~0, val = 0;
Packit Service 3880ab
Packit Service 3880ab
	if (opt == NULL)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
	parse_rtattr_nested(tb, TCA_FLOW_MAX, opt);
Packit Service 3880ab
Packit Service 3880ab
	fprintf(f, "handle 0x%x ", handle);
Packit Service 3880ab
Packit Service 3880ab
	if (tb[TCA_FLOW_MODE]) {
Packit Service 3880ab
		__u32 mode = rta_getattr_u32(tb[TCA_FLOW_MODE]);
Packit Service 3880ab
Packit Service 3880ab
		switch (mode) {
Packit Service 3880ab
		case FLOW_MODE_MAP:
Packit Service 3880ab
			fprintf(f, "map ");
Packit Service 3880ab
			break;
Packit Service 3880ab
		case FLOW_MODE_HASH:
Packit Service 3880ab
			fprintf(f, "hash ");
Packit Service 3880ab
			break;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (tb[TCA_FLOW_KEYS]) {
Packit Service 3880ab
		__u32 keymask = rta_getattr_u32(tb[TCA_FLOW_KEYS]);
Packit Service 3880ab
		char *sep = "";
Packit Service 3880ab
Packit Service 3880ab
		fprintf(f, "keys ");
Packit Service 3880ab
		for (i = 0; i <= FLOW_KEY_MAX; i++) {
Packit Service 3880ab
			if (keymask & (1 << i)) {
Packit Service 3880ab
				fprintf(f, "%s%s", sep, flow_keys[i]);
Packit Service 3880ab
				sep = ",";
Packit Service 3880ab
			}
Packit Service 3880ab
		}
Packit Service 3880ab
		fprintf(f, " ");
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (tb[TCA_FLOW_MASK])
Packit Service 3880ab
		mask = rta_getattr_u32(tb[TCA_FLOW_MASK]);
Packit Service 3880ab
	if (tb[TCA_FLOW_XOR])
Packit Service 3880ab
		val = rta_getattr_u32(tb[TCA_FLOW_XOR]);
Packit Service 3880ab
Packit Service 3880ab
	if (mask != ~0 || val != 0) {
Packit Service 3880ab
		__u32 or = (mask & val) ^ val;
Packit Service 3880ab
		__u32 xor = mask & val;
Packit Service 3880ab
Packit Service 3880ab
		if (mask != ~0)
Packit Service 3880ab
			fprintf(f, "and 0x%.8x ", mask);
Packit Service 3880ab
		if (xor != 0)
Packit Service 3880ab
			fprintf(f, "xor 0x%.8x ", xor);
Packit Service 3880ab
		if (or != 0)
Packit Service 3880ab
			fprintf(f, "or 0x%.8x ", or);
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (tb[TCA_FLOW_RSHIFT])
Packit Service 3880ab
		fprintf(f, "rshift %u ",
Packit Service 3880ab
			rta_getattr_u32(tb[TCA_FLOW_RSHIFT]));
Packit Service 3880ab
	if (tb[TCA_FLOW_ADDEND])
Packit Service 3880ab
		fprintf(f, "addend 0x%x ",
Packit Service 3880ab
			rta_getattr_u32(tb[TCA_FLOW_ADDEND]));
Packit Service 3880ab
Packit Service 3880ab
	if (tb[TCA_FLOW_DIVISOR])
Packit Service 3880ab
		fprintf(f, "divisor %u ",
Packit Service 3880ab
			rta_getattr_u32(tb[TCA_FLOW_DIVISOR]));
Packit Service 3880ab
	if (tb[TCA_FLOW_BASECLASS])
Packit Service 3880ab
		fprintf(f, "baseclass %s ",
Packit Service 3880ab
			sprint_tc_classid(rta_getattr_u32(tb[TCA_FLOW_BASECLASS]), b1));
Packit Service 3880ab
Packit Service 3880ab
	if (tb[TCA_FLOW_PERTURB])
Packit Service 3880ab
		fprintf(f, "perturb %usec ",
Packit Service 3880ab
			rta_getattr_u32(tb[TCA_FLOW_PERTURB]));
Packit Service 3880ab
Packit Service 3880ab
	if (tb[TCA_FLOW_EMATCHES])
Packit Service 3880ab
		print_ematch(f, tb[TCA_FLOW_EMATCHES]);
Packit Service 3880ab
	if (tb[TCA_FLOW_POLICE])
Packit Service 3880ab
		tc_print_police(f, tb[TCA_FLOW_POLICE]);
Packit Service 3880ab
	if (tb[TCA_FLOW_ACT]) {
Packit Service 3880ab
		fprintf(f, "\n");
Packit Service 3880ab
		tc_print_action(f, tb[TCA_FLOW_ACT], 0);
Packit Service 3880ab
	}
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
struct filter_util flow_filter_util = {
Packit Service 3880ab
	.id		= "flow",
Packit Service 3880ab
	.parse_fopt	= flow_parse_opt,
Packit Service 3880ab
	.print_fopt	= flow_print_opt,
Packit Service 3880ab
};