Andrew Scull | b4b6d4a | 2019-01-02 15:54:55 +0000 | [diff] [blame^] | 1 | /* |
| 2 | * Copyright (c) 2007-2014 Nicira, Inc. |
| 3 | * |
| 4 | * This program is free software; you can redistribute it and/or |
| 5 | * modify it under the terms of version 2 of the GNU General Public |
| 6 | * License as published by the Free Software Foundation. |
| 7 | * |
| 8 | * This program is distributed in the hope that it will be useful, but |
| 9 | * WITHOUT ANY WARRANTY; without even the implied warranty of |
| 10 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| 11 | * General Public License for more details. |
| 12 | * |
| 13 | * You should have received a copy of the GNU General Public License |
| 14 | * along with this program; if not, write to the Free Software |
| 15 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA |
| 16 | * 02110-1301, USA |
| 17 | */ |
| 18 | |
| 19 | #ifndef DATAPATH_H |
| 20 | #define DATAPATH_H 1 |
| 21 | |
| 22 | #include <asm/page.h> |
| 23 | #include <linux/kernel.h> |
| 24 | #include <linux/mutex.h> |
| 25 | #include <linux/netdevice.h> |
| 26 | #include <linux/skbuff.h> |
| 27 | #include <linux/u64_stats_sync.h> |
| 28 | #include <net/ip_tunnels.h> |
| 29 | |
| 30 | #include "conntrack.h" |
| 31 | #include "flow.h" |
| 32 | #include "flow_table.h" |
| 33 | #include "meter.h" |
| 34 | #include "vport-internal_dev.h" |
| 35 | |
| 36 | #define DP_MAX_PORTS USHRT_MAX |
| 37 | #define DP_VPORT_HASH_BUCKETS 1024 |
| 38 | |
| 39 | /** |
| 40 | * struct dp_stats_percpu - per-cpu packet processing statistics for a given |
| 41 | * datapath. |
| 42 | * @n_hit: Number of received packets for which a matching flow was found in |
| 43 | * the flow table. |
| 44 | * @n_miss: Number of received packets that had no matching flow in the flow |
| 45 | * table. The sum of @n_hit and @n_miss is the number of packets that have |
| 46 | * been received by the datapath. |
| 47 | * @n_lost: Number of received packets that had no matching flow in the flow |
| 48 | * table that could not be sent to userspace (normally due to an overflow in |
| 49 | * one of the datapath's queues). |
| 50 | * @n_mask_hit: Number of masks looked up for flow match. |
| 51 | * @n_mask_hit / (@n_hit + @n_missed) will be the average masks looked |
| 52 | * up per packet. |
| 53 | */ |
| 54 | struct dp_stats_percpu { |
| 55 | u64 n_hit; |
| 56 | u64 n_missed; |
| 57 | u64 n_lost; |
| 58 | u64 n_mask_hit; |
| 59 | struct u64_stats_sync syncp; |
| 60 | }; |
| 61 | |
| 62 | /** |
| 63 | * struct datapath - datapath for flow-based packet switching |
| 64 | * @rcu: RCU callback head for deferred destruction. |
| 65 | * @list_node: Element in global 'dps' list. |
| 66 | * @table: flow table. |
| 67 | * @ports: Hash table for ports. %OVSP_LOCAL port always exists. Protected by |
| 68 | * ovs_mutex and RCU. |
| 69 | * @stats_percpu: Per-CPU datapath statistics. |
| 70 | * @net: Reference to net namespace. |
| 71 | * @max_headroom: the maximum headroom of all vports in this datapath; it will |
| 72 | * be used by all the internal vports in this dp. |
| 73 | * |
| 74 | * Context: See the comment on locking at the top of datapath.c for additional |
| 75 | * locking information. |
| 76 | */ |
| 77 | struct datapath { |
| 78 | struct rcu_head rcu; |
| 79 | struct list_head list_node; |
| 80 | |
| 81 | /* Flow table. */ |
| 82 | struct flow_table table; |
| 83 | |
| 84 | /* Switch ports. */ |
| 85 | struct hlist_head *ports; |
| 86 | |
| 87 | /* Stats. */ |
| 88 | struct dp_stats_percpu __percpu *stats_percpu; |
| 89 | |
| 90 | /* Network namespace ref. */ |
| 91 | possible_net_t net; |
| 92 | |
| 93 | u32 user_features; |
| 94 | |
| 95 | u32 max_headroom; |
| 96 | |
| 97 | /* Switch meters. */ |
| 98 | struct hlist_head *meters; |
| 99 | }; |
| 100 | |
| 101 | /** |
| 102 | * struct ovs_skb_cb - OVS data in skb CB |
| 103 | * @input_vport: The original vport packet came in on. This value is cached |
| 104 | * when a packet is received by OVS. |
| 105 | * @mru: The maximum received fragement size; 0 if the packet is not |
| 106 | * fragmented. |
| 107 | * @acts_origlen: The netlink size of the flow actions applied to this skb. |
| 108 | * @cutlen: The number of bytes from the packet end to be removed. |
| 109 | */ |
| 110 | struct ovs_skb_cb { |
| 111 | struct vport *input_vport; |
| 112 | u16 mru; |
| 113 | u16 acts_origlen; |
| 114 | u32 cutlen; |
| 115 | }; |
| 116 | #define OVS_CB(skb) ((struct ovs_skb_cb *)(skb)->cb) |
| 117 | |
| 118 | /** |
| 119 | * struct dp_upcall - metadata to include with a packet to send to userspace |
| 120 | * @cmd: One of %OVS_PACKET_CMD_*. |
| 121 | * @userdata: If nonnull, its variable-length value is passed to userspace as |
| 122 | * %OVS_PACKET_ATTR_USERDATA. |
| 123 | * @portid: Netlink portid to which packet should be sent. If @portid is 0 |
| 124 | * then no packet is sent and the packet is accounted in the datapath's @n_lost |
| 125 | * counter. |
| 126 | * @egress_tun_info: If nonnull, becomes %OVS_PACKET_ATTR_EGRESS_TUN_KEY. |
| 127 | * @mru: If not zero, Maximum received IP fragment size. |
| 128 | */ |
| 129 | struct dp_upcall_info { |
| 130 | struct ip_tunnel_info *egress_tun_info; |
| 131 | const struct nlattr *userdata; |
| 132 | const struct nlattr *actions; |
| 133 | int actions_len; |
| 134 | u32 portid; |
| 135 | u8 cmd; |
| 136 | u16 mru; |
| 137 | }; |
| 138 | |
| 139 | /** |
| 140 | * struct ovs_net - Per net-namespace data for ovs. |
| 141 | * @dps: List of datapaths to enable dumping them all out. |
| 142 | * Protected by genl_mutex. |
| 143 | */ |
| 144 | struct ovs_net { |
| 145 | struct list_head dps; |
| 146 | struct work_struct dp_notify_work; |
| 147 | #if IS_ENABLED(CONFIG_NETFILTER_CONNCOUNT) |
| 148 | struct ovs_ct_limit_info *ct_limit_info; |
| 149 | #endif |
| 150 | |
| 151 | /* Module reference for configuring conntrack. */ |
| 152 | bool xt_label; |
| 153 | }; |
| 154 | |
| 155 | extern unsigned int ovs_net_id; |
| 156 | void ovs_lock(void); |
| 157 | void ovs_unlock(void); |
| 158 | |
| 159 | #ifdef CONFIG_LOCKDEP |
| 160 | int lockdep_ovsl_is_held(void); |
| 161 | #else |
| 162 | #define lockdep_ovsl_is_held() 1 |
| 163 | #endif |
| 164 | |
| 165 | #define ASSERT_OVSL() WARN_ON(!lockdep_ovsl_is_held()) |
| 166 | #define ovsl_dereference(p) \ |
| 167 | rcu_dereference_protected(p, lockdep_ovsl_is_held()) |
| 168 | #define rcu_dereference_ovsl(p) \ |
| 169 | rcu_dereference_check(p, lockdep_ovsl_is_held()) |
| 170 | |
| 171 | static inline struct net *ovs_dp_get_net(const struct datapath *dp) |
| 172 | { |
| 173 | return read_pnet(&dp->net); |
| 174 | } |
| 175 | |
| 176 | static inline void ovs_dp_set_net(struct datapath *dp, struct net *net) |
| 177 | { |
| 178 | write_pnet(&dp->net, net); |
| 179 | } |
| 180 | |
| 181 | struct vport *ovs_lookup_vport(const struct datapath *dp, u16 port_no); |
| 182 | |
| 183 | static inline struct vport *ovs_vport_rcu(const struct datapath *dp, int port_no) |
| 184 | { |
| 185 | WARN_ON_ONCE(!rcu_read_lock_held()); |
| 186 | return ovs_lookup_vport(dp, port_no); |
| 187 | } |
| 188 | |
| 189 | static inline struct vport *ovs_vport_ovsl_rcu(const struct datapath *dp, int port_no) |
| 190 | { |
| 191 | WARN_ON_ONCE(!rcu_read_lock_held() && !lockdep_ovsl_is_held()); |
| 192 | return ovs_lookup_vport(dp, port_no); |
| 193 | } |
| 194 | |
| 195 | static inline struct vport *ovs_vport_ovsl(const struct datapath *dp, int port_no) |
| 196 | { |
| 197 | ASSERT_OVSL(); |
| 198 | return ovs_lookup_vport(dp, port_no); |
| 199 | } |
| 200 | |
| 201 | /* Must be called with rcu_read_lock. */ |
| 202 | static inline struct datapath *get_dp_rcu(struct net *net, int dp_ifindex) |
| 203 | { |
| 204 | struct net_device *dev = dev_get_by_index_rcu(net, dp_ifindex); |
| 205 | |
| 206 | if (dev) { |
| 207 | struct vport *vport = ovs_internal_dev_get_vport(dev); |
| 208 | |
| 209 | if (vport) |
| 210 | return vport->dp; |
| 211 | } |
| 212 | |
| 213 | return NULL; |
| 214 | } |
| 215 | |
| 216 | /* The caller must hold either ovs_mutex or rcu_read_lock to keep the |
| 217 | * returned dp pointer valid. |
| 218 | */ |
| 219 | static inline struct datapath *get_dp(struct net *net, int dp_ifindex) |
| 220 | { |
| 221 | struct datapath *dp; |
| 222 | |
| 223 | WARN_ON_ONCE(!rcu_read_lock_held() && !lockdep_ovsl_is_held()); |
| 224 | rcu_read_lock(); |
| 225 | dp = get_dp_rcu(net, dp_ifindex); |
| 226 | rcu_read_unlock(); |
| 227 | |
| 228 | return dp; |
| 229 | } |
| 230 | |
| 231 | extern struct notifier_block ovs_dp_device_notifier; |
| 232 | extern struct genl_family dp_vport_genl_family; |
| 233 | |
| 234 | void ovs_dp_process_packet(struct sk_buff *skb, struct sw_flow_key *key); |
| 235 | void ovs_dp_detach_port(struct vport *); |
| 236 | int ovs_dp_upcall(struct datapath *, struct sk_buff *, |
| 237 | const struct sw_flow_key *, const struct dp_upcall_info *, |
| 238 | uint32_t cutlen); |
| 239 | |
| 240 | const char *ovs_dp_name(const struct datapath *dp); |
| 241 | struct sk_buff *ovs_vport_cmd_build_info(struct vport *vport, struct net *net, |
| 242 | u32 portid, u32 seq, u8 cmd); |
| 243 | |
| 244 | int ovs_execute_actions(struct datapath *dp, struct sk_buff *skb, |
| 245 | const struct sw_flow_actions *, struct sw_flow_key *); |
| 246 | |
| 247 | void ovs_dp_notify_wq(struct work_struct *work); |
| 248 | |
| 249 | int action_fifos_init(void); |
| 250 | void action_fifos_exit(void); |
| 251 | |
| 252 | /* 'KEY' must not have any bits set outside of the 'MASK' */ |
| 253 | #define OVS_MASKED(OLD, KEY, MASK) ((KEY) | ((OLD) & ~(MASK))) |
| 254 | #define OVS_SET_MASKED(OLD, KEY, MASK) ((OLD) = OVS_MASKED(OLD, KEY, MASK)) |
| 255 | |
| 256 | #define OVS_NLERR(logging_allowed, fmt, ...) \ |
| 257 | do { \ |
| 258 | if (logging_allowed && net_ratelimit()) \ |
| 259 | pr_info("netlink: " fmt "\n", ##__VA_ARGS__); \ |
| 260 | } while (0) |
| 261 | #endif /* datapath.h */ |