flow.h 8.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298
  1. /* SPDX-License-Identifier: GPL-2.0-only */
  2. /*
  3. * Copyright (c) 2007-2017 Nicira, Inc.
  4. */
  5. #ifndef FLOW_H
  6. #define FLOW_H 1
  7. #include <linux/cache.h>
  8. #include <linux/kernel.h>
  9. #include <linux/netlink.h>
  10. #include <linux/openvswitch.h>
  11. #include <linux/spinlock.h>
  12. #include <linux/types.h>
  13. #include <linux/rcupdate.h>
  14. #include <linux/if_ether.h>
  15. #include <linux/in6.h>
  16. #include <linux/jiffies.h>
  17. #include <linux/time.h>
  18. #include <linux/cpumask.h>
  19. #include <net/inet_ecn.h>
  20. #include <net/ip_tunnels.h>
  21. #include <net/dst_metadata.h>
  22. #include <net/nsh.h>
  23. struct sk_buff;
  24. enum sw_flow_mac_proto {
  25. MAC_PROTO_NONE = 0,
  26. MAC_PROTO_ETHERNET,
  27. };
  28. #define SW_FLOW_KEY_INVALID 0x80
  29. #define MPLS_LABEL_DEPTH 3
  30. /* Bit definitions for IPv6 Extension Header pseudo-field. */
  31. enum ofp12_ipv6exthdr_flags {
  32. OFPIEH12_NONEXT = 1 << 0, /* "No next header" encountered. */
  33. OFPIEH12_ESP = 1 << 1, /* Encrypted Sec Payload header present. */
  34. OFPIEH12_AUTH = 1 << 2, /* Authentication header present. */
  35. OFPIEH12_DEST = 1 << 3, /* 1 or 2 dest headers present. */
  36. OFPIEH12_FRAG = 1 << 4, /* Fragment header present. */
  37. OFPIEH12_ROUTER = 1 << 5, /* Router header present. */
  38. OFPIEH12_HOP = 1 << 6, /* Hop-by-hop header present. */
  39. OFPIEH12_UNREP = 1 << 7, /* Unexpected repeats encountered. */
  40. OFPIEH12_UNSEQ = 1 << 8 /* Unexpected sequencing encountered. */
  41. };
  42. /* Store options at the end of the array if they are less than the
  43. * maximum size. This allows us to get the benefits of variable length
  44. * matching for small options.
  45. */
  46. #define TUN_METADATA_OFFSET(opt_len) \
  47. (sizeof_field(struct sw_flow_key, tun_opts) - opt_len)
  48. #define TUN_METADATA_OPTS(flow_key, opt_len) \
  49. ((void *)((flow_key)->tun_opts + TUN_METADATA_OFFSET(opt_len)))
  50. struct ovs_tunnel_info {
  51. struct metadata_dst *tun_dst;
  52. };
  53. struct vlan_head {
  54. __be16 tpid; /* Vlan type. Generally 802.1q or 802.1ad.*/
  55. __be16 tci; /* 0 if no VLAN, VLAN_CFI_MASK set otherwise. */
  56. };
  57. #define OVS_SW_FLOW_KEY_METADATA_SIZE \
  58. (offsetof(struct sw_flow_key, recirc_id) + \
  59. sizeof_field(struct sw_flow_key, recirc_id))
  60. struct ovs_key_nsh {
  61. struct ovs_nsh_key_base base;
  62. __be32 context[NSH_MD1_CONTEXT_SIZE];
  63. };
  64. struct sw_flow_key {
  65. u8 tun_opts[IP_TUNNEL_OPTS_MAX];
  66. u8 tun_opts_len;
  67. struct ip_tunnel_key tun_key; /* Encapsulating tunnel key. */
  68. struct {
  69. u32 priority; /* Packet QoS priority. */
  70. u32 skb_mark; /* SKB mark. */
  71. u16 in_port; /* Input switch port (or DP_MAX_PORTS). */
  72. } __packed phy; /* Safe when right after 'tun_key'. */
  73. u8 mac_proto; /* MAC layer protocol (e.g. Ethernet). */
  74. u8 tun_proto; /* Protocol of encapsulating tunnel. */
  75. u32 ovs_flow_hash; /* Datapath computed hash value. */
  76. u32 recirc_id; /* Recirculation ID. */
  77. struct {
  78. u8 src[ETH_ALEN]; /* Ethernet source address. */
  79. u8 dst[ETH_ALEN]; /* Ethernet destination address. */
  80. struct vlan_head vlan;
  81. struct vlan_head cvlan;
  82. __be16 type; /* Ethernet frame type. */
  83. } eth;
  84. /* Filling a hole of two bytes. */
  85. u8 ct_state;
  86. u8 ct_orig_proto; /* CT original direction tuple IP
  87. * protocol.
  88. */
  89. union {
  90. struct {
  91. u8 proto; /* IP protocol or lower 8 bits of ARP opcode. */
  92. u8 tos; /* IP ToS. */
  93. u8 ttl; /* IP TTL/hop limit. */
  94. u8 frag; /* One of OVS_FRAG_TYPE_*. */
  95. } ip;
  96. };
  97. u16 ct_zone; /* Conntrack zone. */
  98. struct {
  99. __be16 src; /* TCP/UDP/SCTP source port. */
  100. __be16 dst; /* TCP/UDP/SCTP destination port. */
  101. __be16 flags; /* TCP flags. */
  102. } tp;
  103. union {
  104. struct {
  105. struct {
  106. __be32 src; /* IP source address. */
  107. __be32 dst; /* IP destination address. */
  108. } addr;
  109. union {
  110. struct {
  111. __be32 src;
  112. __be32 dst;
  113. } ct_orig; /* Conntrack original direction fields. */
  114. struct {
  115. u8 sha[ETH_ALEN]; /* ARP source hardware address. */
  116. u8 tha[ETH_ALEN]; /* ARP target hardware address. */
  117. } arp;
  118. };
  119. } ipv4;
  120. struct {
  121. struct {
  122. struct in6_addr src; /* IPv6 source address. */
  123. struct in6_addr dst; /* IPv6 destination address. */
  124. } addr;
  125. __be32 label; /* IPv6 flow label. */
  126. u16 exthdrs; /* IPv6 extension header flags */
  127. union {
  128. struct {
  129. struct in6_addr src;
  130. struct in6_addr dst;
  131. } ct_orig; /* Conntrack original direction fields. */
  132. struct {
  133. struct in6_addr target; /* ND target address. */
  134. u8 sll[ETH_ALEN]; /* ND source link layer address. */
  135. u8 tll[ETH_ALEN]; /* ND target link layer address. */
  136. } nd;
  137. };
  138. } ipv6;
  139. struct {
  140. u32 num_labels_mask; /* labels present bitmap of effective length MPLS_LABEL_DEPTH */
  141. __be32 lse[MPLS_LABEL_DEPTH]; /* label stack entry */
  142. } mpls;
  143. struct ovs_key_nsh nsh; /* network service header */
  144. };
  145. struct {
  146. /* Connection tracking fields not packed above. */
  147. struct {
  148. __be16 src; /* CT orig tuple tp src port. */
  149. __be16 dst; /* CT orig tuple tp dst port. */
  150. } orig_tp;
  151. u32 mark;
  152. struct ovs_key_ct_labels labels;
  153. } ct;
  154. } __aligned(BITS_PER_LONG/8); /* Ensure that we can do comparisons as longs. */
  155. static inline bool sw_flow_key_is_nd(const struct sw_flow_key *key)
  156. {
  157. return key->eth.type == htons(ETH_P_IPV6) &&
  158. key->ip.proto == NEXTHDR_ICMP &&
  159. key->tp.dst == 0 &&
  160. (key->tp.src == htons(NDISC_NEIGHBOUR_SOLICITATION) ||
  161. key->tp.src == htons(NDISC_NEIGHBOUR_ADVERTISEMENT));
  162. }
  163. struct sw_flow_key_range {
  164. unsigned short int start;
  165. unsigned short int end;
  166. };
  167. struct sw_flow_mask {
  168. int ref_count;
  169. struct rcu_head rcu;
  170. struct sw_flow_key_range range;
  171. struct sw_flow_key key;
  172. };
  173. struct sw_flow_match {
  174. struct sw_flow_key *key;
  175. struct sw_flow_key_range range;
  176. struct sw_flow_mask *mask;
  177. };
  178. #define MAX_UFID_LENGTH 16 /* 128 bits */
  179. struct sw_flow_id {
  180. u32 ufid_len;
  181. union {
  182. u32 ufid[MAX_UFID_LENGTH / 4];
  183. struct sw_flow_key *unmasked_key;
  184. };
  185. };
  186. struct sw_flow_actions {
  187. struct rcu_head rcu;
  188. size_t orig_len; /* From flow_cmd_new netlink actions size */
  189. u32 actions_len;
  190. struct nlattr actions[];
  191. };
  192. struct sw_flow_stats {
  193. u64 packet_count; /* Number of packets matched. */
  194. u64 byte_count; /* Number of bytes matched. */
  195. unsigned long used; /* Last used time (in jiffies). */
  196. spinlock_t lock; /* Lock for atomic stats update. */
  197. __be16 tcp_flags; /* Union of seen TCP flags. */
  198. };
  199. struct sw_flow {
  200. struct rcu_head rcu;
  201. struct {
  202. struct hlist_node node[2];
  203. u32 hash;
  204. } flow_table, ufid_table;
  205. int stats_last_writer; /* CPU id of the last writer on
  206. * 'stats[0]'.
  207. */
  208. struct sw_flow_key key;
  209. struct sw_flow_id id;
  210. struct cpumask cpu_used_mask;
  211. struct sw_flow_mask *mask;
  212. struct sw_flow_actions __rcu *sf_acts;
  213. struct sw_flow_stats __rcu *stats[]; /* One for each CPU. First one
  214. * is allocated at flow creation time,
  215. * the rest are allocated on demand
  216. * while holding the 'stats[0].lock'.
  217. */
  218. };
  219. struct arp_eth_header {
  220. __be16 ar_hrd; /* format of hardware address */
  221. __be16 ar_pro; /* format of protocol address */
  222. unsigned char ar_hln; /* length of hardware address */
  223. unsigned char ar_pln; /* length of protocol address */
  224. __be16 ar_op; /* ARP opcode (command) */
  225. /* Ethernet+IPv4 specific members. */
  226. unsigned char ar_sha[ETH_ALEN]; /* sender hardware address */
  227. unsigned char ar_sip[4]; /* sender IP address */
  228. unsigned char ar_tha[ETH_ALEN]; /* target hardware address */
  229. unsigned char ar_tip[4]; /* target IP address */
  230. } __packed;
  231. static inline u8 ovs_key_mac_proto(const struct sw_flow_key *key)
  232. {
  233. return key->mac_proto & ~SW_FLOW_KEY_INVALID;
  234. }
  235. static inline u16 __ovs_mac_header_len(u8 mac_proto)
  236. {
  237. return mac_proto == MAC_PROTO_ETHERNET ? ETH_HLEN : 0;
  238. }
  239. static inline u16 ovs_mac_header_len(const struct sw_flow_key *key)
  240. {
  241. return __ovs_mac_header_len(ovs_key_mac_proto(key));
  242. }
  243. static inline bool ovs_identifier_is_ufid(const struct sw_flow_id *sfid)
  244. {
  245. return sfid->ufid_len;
  246. }
  247. static inline bool ovs_identifier_is_key(const struct sw_flow_id *sfid)
  248. {
  249. return !ovs_identifier_is_ufid(sfid);
  250. }
  251. void ovs_flow_stats_update(struct sw_flow *, __be16 tcp_flags,
  252. const struct sk_buff *);
  253. void ovs_flow_stats_get(const struct sw_flow *, struct ovs_flow_stats *,
  254. unsigned long *used, __be16 *tcp_flags);
  255. void ovs_flow_stats_clear(struct sw_flow *);
  256. u64 ovs_flow_used_time(unsigned long flow_jiffies);
  257. int ovs_flow_key_update(struct sk_buff *skb, struct sw_flow_key *key);
  258. int ovs_flow_key_update_l3l4(struct sk_buff *skb, struct sw_flow_key *key);
  259. int ovs_flow_key_extract(const struct ip_tunnel_info *tun_info,
  260. struct sk_buff *skb,
  261. struct sw_flow_key *key);
  262. /* Extract key from packet coming from userspace. */
  263. int ovs_flow_key_extract_userspace(struct net *net, const struct nlattr *attr,
  264. struct sk_buff *skb,
  265. struct sw_flow_key *key, bool log);
  266. #endif /* flow.h */