1085 lines · 27.2 KB · C
RawDownload
/* * Copyright (c) 2007 Patrick McHardy <kaber@trash.net> * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License as * published by the Free Software Foundation; either version 2 of * the License, or (at your option) any later version. * * The code this is based on carried the following copyright notice: * --- * (C) Copyright 2001-2006 * Alex Zeffertt, Cambridge Broadband Ltd, ajz@cambridgebroadband.com * Re-worked by Ben Greear <greearb@candelatech.com> * --- */#include <linux/kernel.h>#include <linux/types.h>#include <linux/module.h>#include <linux/init.h>#include <linux/errno.h>#include <linux/slab.h>#include <linux/string.h>#include <linux/rculist.h>#include <linux/notifier.h>#include <linux/netdevice.h>#include <linux/etherdevice.h>#include <linux/ethtool.h>#include <linux/if_arp.h>#include <linux/if_vlan.h>#include <linux/if_link.h>#include <linux/if_macvlan.h>#include <linux/hash.h>#include <net/rtnetlink.h>#include <net/xfrm.h> #define MACVLAN_HASH_SIZE	(1 << BITS_PER_BYTE) struct macvlan_port {	struct net_device	*dev;	struct hlist_head	vlan_hash[MACVLAN_HASH_SIZE];	struct list_head	vlans;	struct rcu_head		rcu;	bool 			passthru;	int			count;}; static void macvlan_port_destroy(struct net_device *dev); static struct macvlan_port *macvlan_port_get_rcu(const struct net_device *dev){	return rcu_dereference(dev->rx_handler_data);} static struct macvlan_port *macvlan_port_get_rtnl(const struct net_device *dev){	return rtnl_dereference(dev->rx_handler_data);} #define macvlan_port_exists(dev) (dev->priv_flags & IFF_MACVLAN_PORT) static struct macvlan_dev *macvlan_hash_lookup(const struct macvlan_port *port,					       const unsigned char *addr){	struct macvlan_dev *vlan; 	hlist_for_each_entry_rcu(vlan, &port->vlan_hash[addr[5]], hlist) {		if (ether_addr_equal_64bits(vlan->dev->dev_addr, addr))			return vlan;	}	return NULL;} static void macvlan_hash_add(struct macvlan_dev *vlan){	struct macvlan_port *port = vlan->port;	const unsigned char *addr = vlan->dev->dev_addr; 	hlist_add_head_rcu(&vlan->hlist, &port->vlan_hash[addr[5]]);} static void macvlan_hash_del(struct macvlan_dev *vlan, bool sync){	hlist_del_rcu(&vlan->hlist);	if (sync)		synchronize_rcu();} static void macvlan_hash_change_addr(struct macvlan_dev *vlan,					const unsigned char *addr){	macvlan_hash_del(vlan, true);	/* Now that we are unhashed it is safe to change the device	 * address without confusing packet delivery.	 */	memcpy(vlan->dev->dev_addr, addr, ETH_ALEN);	macvlan_hash_add(vlan);} static int macvlan_addr_busy(const struct macvlan_port *port,				const unsigned char *addr){	/* Test to see if the specified multicast address is	 * currently in use by the underlying device or	 * another macvlan.	 */	if (ether_addr_equal_64bits(port->dev->dev_addr, addr))		return 1; 	if (macvlan_hash_lookup(port, addr))		return 1; 	return 0;}  static int macvlan_broadcast_one(struct sk_buff *skb,				 const struct macvlan_dev *vlan,				 const struct ethhdr *eth, bool local){	struct net_device *dev = vlan->dev; 	if (local)		return vlan->forward(dev, skb); 	skb->dev = dev;	if (ether_addr_equal_64bits(eth->h_dest, dev->broadcast))		skb->pkt_type = PACKET_BROADCAST;	else		skb->pkt_type = PACKET_MULTICAST; 	return vlan->receive(skb);} static u32 macvlan_hash_mix(const struct macvlan_dev *vlan){	return (u32)(((unsigned long)vlan) >> L1_CACHE_SHIFT);}  static unsigned int mc_hash(const struct macvlan_dev *vlan,			    const unsigned char *addr){	u32 val = __get_unaligned_cpu32(addr + 2); 	val ^= macvlan_hash_mix(vlan);	return hash_32(val, MACVLAN_MC_FILTER_BITS);} static void macvlan_broadcast(struct sk_buff *skb,			      const struct macvlan_port *port,			      struct net_device *src,			      enum macvlan_mode mode){	const struct ethhdr *eth = eth_hdr(skb);	const struct macvlan_dev *vlan;	struct sk_buff *nskb;	unsigned int i;	int err;	unsigned int hash; 	if (skb->protocol == htons(ETH_P_PAUSE))		return; 	for (i = 0; i < MACVLAN_HASH_SIZE; i++) {		hlist_for_each_entry_rcu(vlan, &port->vlan_hash[i], hlist) {			if (vlan->dev == src || !(vlan->mode & mode))				continue; 			hash = mc_hash(vlan, eth->h_dest);			if (!test_bit(hash, vlan->mc_filter))				continue; 			err = NET_RX_DROP;			nskb = skb_clone(skb, GFP_ATOMIC);			if (likely(nskb))				err = macvlan_broadcast_one(					nskb, vlan, eth,					mode == MACVLAN_MODE_BRIDGE);			macvlan_count_rx(vlan, skb->len + ETH_HLEN,					 err == NET_RX_SUCCESS, 1);		}	}} /* called under rcu_read_lock() from netif_receive_skb */static rx_handler_result_t macvlan_handle_frame(struct sk_buff **pskb){	struct macvlan_port *port;	struct sk_buff *skb = *pskb;	const struct ethhdr *eth = eth_hdr(skb);	const struct macvlan_dev *vlan;	const struct macvlan_dev *src;	struct net_device *dev;	unsigned int len = 0;	int ret = NET_RX_DROP; 	port = macvlan_port_get_rcu(skb->dev);	if (is_multicast_ether_addr(eth->h_dest)) {		skb = ip_check_defrag(skb, IP_DEFRAG_MACVLAN);		if (!skb)			return RX_HANDLER_CONSUMED;		eth = eth_hdr(skb);		src = macvlan_hash_lookup(port, eth->h_source);		if (!src)			/* frame comes from an external address */			macvlan_broadcast(skb, port, NULL,					  MACVLAN_MODE_PRIVATE |					  MACVLAN_MODE_VEPA    |					  MACVLAN_MODE_PASSTHRU|					  MACVLAN_MODE_BRIDGE);		else if (src->mode == MACVLAN_MODE_VEPA)			/* flood to everyone except source */			macvlan_broadcast(skb, port, src->dev,					  MACVLAN_MODE_VEPA |					  MACVLAN_MODE_BRIDGE);		else if (src->mode == MACVLAN_MODE_BRIDGE)			/*			 * flood only to VEPA ports, bridge ports			 * already saw the frame on the way out.			 */			macvlan_broadcast(skb, port, src->dev,					  MACVLAN_MODE_VEPA);		else {			/* forward to original port. */			vlan = src;			ret = macvlan_broadcast_one(skb, vlan, eth, 0);			goto out;		} 		return RX_HANDLER_PASS;	} 	if (port->passthru)		vlan = list_first_or_null_rcu(&port->vlans,					      struct macvlan_dev, list);	else		vlan = macvlan_hash_lookup(port, eth->h_dest);	if (vlan == NULL)		return RX_HANDLER_PASS; 	dev = vlan->dev;	if (unlikely(!(dev->flags & IFF_UP))) {		kfree_skb(skb);		return RX_HANDLER_CONSUMED;	}	len = skb->len + ETH_HLEN;	skb = skb_share_check(skb, GFP_ATOMIC);	if (!skb)		goto out; 	skb->dev = dev;	skb->pkt_type = PACKET_HOST; 	ret = vlan->receive(skb); out:	macvlan_count_rx(vlan, len, ret == NET_RX_SUCCESS, 0);	return RX_HANDLER_CONSUMED;} static int macvlan_queue_xmit(struct sk_buff *skb, struct net_device *dev){	const struct macvlan_dev *vlan = netdev_priv(dev);	const struct macvlan_port *port = vlan->port;	const struct macvlan_dev *dest;	__u8 ip_summed = skb->ip_summed; 	if (vlan->mode == MACVLAN_MODE_BRIDGE) {		const struct ethhdr *eth = (void *)skb->data;		skb->ip_summed = CHECKSUM_UNNECESSARY; 		/* send to other bridge ports directly */		if (is_multicast_ether_addr(eth->h_dest)) {			macvlan_broadcast(skb, port, dev, MACVLAN_MODE_BRIDGE);			goto xmit_world;		} 		dest = macvlan_hash_lookup(port, eth->h_dest);		if (dest && dest->mode == MACVLAN_MODE_BRIDGE) {			/* send to lowerdev first for its network taps */			dev_forward_skb(vlan->lowerdev, skb); 			return NET_XMIT_SUCCESS;		}	} xmit_world:	skb->ip_summed = ip_summed;	skb->dev = vlan->lowerdev;	return dev_queue_xmit(skb);} netdev_tx_t macvlan_start_xmit(struct sk_buff *skb,			       struct net_device *dev){	unsigned int len = skb->len;	int ret;	const struct macvlan_dev *vlan = netdev_priv(dev); 	if (vlan->fwd_priv) {		skb->dev = vlan->lowerdev;		ret = dev_queue_xmit_accel(skb, vlan->fwd_priv);	} else {		ret = macvlan_queue_xmit(skb, dev);	} 	if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {		struct macvlan_pcpu_stats *pcpu_stats; 		pcpu_stats = this_cpu_ptr(vlan->pcpu_stats);		u64_stats_update_begin(&pcpu_stats->syncp);		pcpu_stats->tx_packets++;		pcpu_stats->tx_bytes += len;		u64_stats_update_end(&pcpu_stats->syncp);	} else {		this_cpu_inc(vlan->pcpu_stats->tx_dropped);	}	return ret;}EXPORT_SYMBOL_GPL(macvlan_start_xmit); static int macvlan_hard_header(struct sk_buff *skb, struct net_device *dev,			       unsigned short type, const void *daddr,			       const void *saddr, unsigned len){	const struct macvlan_dev *vlan = netdev_priv(dev);	struct net_device *lowerdev = vlan->lowerdev; 	return dev_hard_header(skb, lowerdev, type, daddr,			       saddr ? : dev->dev_addr, len);} static const struct header_ops macvlan_hard_header_ops = {	.create  	= macvlan_hard_header,	.rebuild	= eth_rebuild_header,	.parse		= eth_header_parse,	.cache		= eth_header_cache,	.cache_update	= eth_header_cache_update,}; static struct rtnl_link_ops macvlan_link_ops; static int macvlan_open(struct net_device *dev){	struct macvlan_dev *vlan = netdev_priv(dev);	struct net_device *lowerdev = vlan->lowerdev;	int err; 	if (vlan->port->passthru) {		if (!(vlan->flags & MACVLAN_FLAG_NOPROMISC)) {			err = dev_set_promiscuity(lowerdev, 1);			if (err < 0)				goto out;		}		goto hash_add;	} 	if (lowerdev->features & NETIF_F_HW_L2FW_DOFFLOAD &&	    dev->rtnl_link_ops == &macvlan_link_ops) {		vlan->fwd_priv =		      lowerdev->netdev_ops->ndo_dfwd_add_station(lowerdev, dev); 		/* If we get a NULL pointer back, or if we get an error		 * then we should just fall through to the non accelerated path		 */		if (IS_ERR_OR_NULL(vlan->fwd_priv)) {			vlan->fwd_priv = NULL;		} else			return 0;	} 	err = -EBUSY;	if (macvlan_addr_busy(vlan->port, dev->dev_addr))		goto out; 	err = dev_uc_add(lowerdev, dev->dev_addr);	if (err < 0)		goto out;	if (dev->flags & IFF_ALLMULTI) {		err = dev_set_allmulti(lowerdev, 1);		if (err < 0)			goto del_unicast;	} hash_add:	macvlan_hash_add(vlan);	return 0; del_unicast:	dev_uc_del(lowerdev, dev->dev_addr);out:	if (vlan->fwd_priv) {		lowerdev->netdev_ops->ndo_dfwd_del_station(lowerdev,							   vlan->fwd_priv);		vlan->fwd_priv = NULL;	}	return err;} static int macvlan_stop(struct net_device *dev){	struct macvlan_dev *vlan = netdev_priv(dev);	struct net_device *lowerdev = vlan->lowerdev; 	if (vlan->fwd_priv) {		lowerdev->netdev_ops->ndo_dfwd_del_station(lowerdev,							   vlan->fwd_priv);		vlan->fwd_priv = NULL;		return 0;	} 	dev_uc_unsync(lowerdev, dev);	dev_mc_unsync(lowerdev, dev); 	if (vlan->port->passthru) {		if (!(vlan->flags & MACVLAN_FLAG_NOPROMISC))			dev_set_promiscuity(lowerdev, -1);		goto hash_del;	} 	if (dev->flags & IFF_ALLMULTI)		dev_set_allmulti(lowerdev, -1); 	dev_uc_del(lowerdev, dev->dev_addr); hash_del:	macvlan_hash_del(vlan, !dev->dismantle);	return 0;} static int macvlan_set_mac_address(struct net_device *dev, void *p){	struct macvlan_dev *vlan = netdev_priv(dev);	struct net_device *lowerdev = vlan->lowerdev;	struct sockaddr *addr = p;	int err; 	if (!is_valid_ether_addr(addr->sa_data))		return -EADDRNOTAVAIL; 	if (!(dev->flags & IFF_UP)) {		/* Just copy in the new address */		memcpy(dev->dev_addr, addr->sa_data, ETH_ALEN);	} else {		/* Rehash and update the device filters */		if (macvlan_addr_busy(vlan->port, addr->sa_data))			return -EBUSY; 		err = dev_uc_add(lowerdev, addr->sa_data);		if (err)			return err; 		dev_uc_del(lowerdev, dev->dev_addr); 		macvlan_hash_change_addr(vlan, addr->sa_data);	}	return 0;} static void macvlan_change_rx_flags(struct net_device *dev, int change){	struct macvlan_dev *vlan = netdev_priv(dev);	struct net_device *lowerdev = vlan->lowerdev; 	if (change & IFF_ALLMULTI)		dev_set_allmulti(lowerdev, dev->flags & IFF_ALLMULTI ? 1 : -1);} static void macvlan_set_mac_lists(struct net_device *dev){	struct macvlan_dev *vlan = netdev_priv(dev); 	if (dev->flags & (IFF_PROMISC | IFF_ALLMULTI)) {		bitmap_fill(vlan->mc_filter, MACVLAN_MC_FILTER_SZ);	} else {		struct netdev_hw_addr *ha;		DECLARE_BITMAP(filter, MACVLAN_MC_FILTER_SZ); 		bitmap_zero(filter, MACVLAN_MC_FILTER_SZ);		netdev_for_each_mc_addr(ha, dev) {			__set_bit(mc_hash(vlan, ha->addr), filter);		} 		__set_bit(mc_hash(vlan, dev->broadcast), filter); 		bitmap_copy(vlan->mc_filter, filter, MACVLAN_MC_FILTER_SZ);	}	dev_uc_sync(vlan->lowerdev, dev);	dev_mc_sync(vlan->lowerdev, dev);} static int macvlan_change_mtu(struct net_device *dev, int new_mtu){	struct macvlan_dev *vlan = netdev_priv(dev); 	if (new_mtu < 68 || vlan->lowerdev->mtu < new_mtu)		return -EINVAL;	dev->mtu = new_mtu;	return 0;}

Lines 1–500 of 1085.