1#ifndef _NET_FLOW_OFFLOAD_H
2#define _NET_FLOW_OFFLOAD_H
3
4#include <net/flow_dissector.h>
5
6struct flow_match {
7 struct flow_dissector *dissector;
8 void *mask;
9 void *key;
10};
11
12struct flow_match_basic {
13 struct flow_dissector_key_basic *key, *mask;
14};
15
16struct flow_match_control {
17 struct flow_dissector_key_control *key, *mask;
18};
19
20struct flow_match_eth_addrs {
21 struct flow_dissector_key_eth_addrs *key, *mask;
22};
23
24struct flow_match_vlan {
25 struct flow_dissector_key_vlan *key, *mask;
26};
27
28struct flow_match_ipv4_addrs {
29 struct flow_dissector_key_ipv4_addrs *key, *mask;
30};
31
32struct flow_match_ipv6_addrs {
33 struct flow_dissector_key_ipv6_addrs *key, *mask;
34};
35
36struct flow_match_ip {
37 struct flow_dissector_key_ip *key, *mask;
38};
39
40struct flow_match_ports {
41 struct flow_dissector_key_ports *key, *mask;
42};
43
44struct flow_match_icmp {
45 struct flow_dissector_key_icmp *key, *mask;
46};
47
48struct flow_match_tcp {
49 struct flow_dissector_key_tcp *key, *mask;
50};
51
52struct flow_match_mpls {
53 struct flow_dissector_key_mpls *key, *mask;
54};
55
56struct flow_match_enc_keyid {
57 struct flow_dissector_key_keyid *key, *mask;
58};
59
60struct flow_match_enc_opts {
61 struct flow_dissector_key_enc_opts *key, *mask;
62};
63
64struct flow_rule;
65
66void flow_rule_match_basic(const struct flow_rule *rule,
67 struct flow_match_basic *out);
68void flow_rule_match_control(const struct flow_rule *rule,
69 struct flow_match_control *out);
70void flow_rule_match_eth_addrs(const struct flow_rule *rule,
71 struct flow_match_eth_addrs *out);
72void flow_rule_match_vlan(const struct flow_rule *rule,
73 struct flow_match_vlan *out);
74void flow_rule_match_ipv4_addrs(const struct flow_rule *rule,
75 struct flow_match_ipv4_addrs *out);
76void flow_rule_match_ipv6_addrs(const struct flow_rule *rule,
77 struct flow_match_ipv6_addrs *out);
78void flow_rule_match_ip(const struct flow_rule *rule,
79 struct flow_match_ip *out);
80void flow_rule_match_ports(const struct flow_rule *rule,
81 struct flow_match_ports *out);
82void flow_rule_match_tcp(const struct flow_rule *rule,
83 struct flow_match_tcp *out);
84void flow_rule_match_icmp(const struct flow_rule *rule,
85 struct flow_match_icmp *out);
86void flow_rule_match_mpls(const struct flow_rule *rule,
87 struct flow_match_mpls *out);
88void flow_rule_match_enc_control(const struct flow_rule *rule,
89 struct flow_match_control *out);
90void flow_rule_match_enc_ipv4_addrs(const struct flow_rule *rule,
91 struct flow_match_ipv4_addrs *out);
92void flow_rule_match_enc_ipv6_addrs(const struct flow_rule *rule,
93 struct flow_match_ipv6_addrs *out);
94void flow_rule_match_enc_ip(const struct flow_rule *rule,
95 struct flow_match_ip *out);
96void flow_rule_match_enc_ports(const struct flow_rule *rule,
97 struct flow_match_ports *out);
98void flow_rule_match_enc_keyid(const struct flow_rule *rule,
99 struct flow_match_enc_keyid *out);
100void flow_rule_match_enc_opts(const struct flow_rule *rule,
101 struct flow_match_enc_opts *out);
102
103enum flow_action_id {
104 FLOW_ACTION_ACCEPT = 0,
105 FLOW_ACTION_DROP,
106 FLOW_ACTION_TRAP,
107 FLOW_ACTION_GOTO,
108 FLOW_ACTION_REDIRECT,
109 FLOW_ACTION_MIRRED,
110 FLOW_ACTION_VLAN_PUSH,
111 FLOW_ACTION_VLAN_POP,
112 FLOW_ACTION_VLAN_MANGLE,
113 FLOW_ACTION_TUNNEL_ENCAP,
114 FLOW_ACTION_TUNNEL_DECAP,
115 FLOW_ACTION_MANGLE,
116 FLOW_ACTION_ADD,
117 FLOW_ACTION_CSUM,
118 FLOW_ACTION_MARK,
119 FLOW_ACTION_WAKE,
120 FLOW_ACTION_QUEUE,
121};
122
123/* This is mirroring enum pedit_header_type definition for easy mapping between
124 * tc pedit action. Legacy TCA_PEDIT_KEY_EX_HDR_TYPE_NETWORK is mapped to
125 * FLOW_ACT_MANGLE_UNSPEC, which is supported by no driver.
126 */
127enum flow_action_mangle_base {
128 FLOW_ACT_MANGLE_UNSPEC = 0,
129 FLOW_ACT_MANGLE_HDR_TYPE_ETH,
130 FLOW_ACT_MANGLE_HDR_TYPE_IP4,
131 FLOW_ACT_MANGLE_HDR_TYPE_IP6,
132 FLOW_ACT_MANGLE_HDR_TYPE_TCP,
133 FLOW_ACT_MANGLE_HDR_TYPE_UDP,
134};
135
136struct flow_action_entry {
137 enum flow_action_id id;
138 union {
139 u32 chain_index; /* FLOW_ACTION_GOTO */
140 struct net_device *dev; /* FLOW_ACTION_REDIRECT */
141 struct { /* FLOW_ACTION_VLAN */
142 u16 vid;
143 __be16 proto;
144 u8 prio;
145 } vlan;
146 struct { /* FLOW_ACTION_PACKET_EDIT */
147 enum flow_action_mangle_base htype;
148 u32 offset;
149 u32 mask;
150 u32 val;
151 } mangle;
152 const struct ip_tunnel_info *tunnel; /* FLOW_ACTION_TUNNEL_ENCAP */
153 u32 csum_flags; /* FLOW_ACTION_CSUM */
154 u32 mark; /* FLOW_ACTION_MARK */
155 struct { /* FLOW_ACTION_QUEUE */
156 u32 ctx;
157 u32 index;
158 u8 vf;
159 } queue;
160 };
161};
162
163struct flow_action {
164 unsigned int num_entries;
165 struct flow_action_entry entries[0];
166};
167
168static inline bool flow_action_has_entries(const struct flow_action *action)
169{
170 return action->num_entries;
171}
172
173#define flow_action_for_each(__i, __act, __actions) \
174 for (__i = 0, __act = &(__actions)->entries[0]; __i < (__actions)->num_entries; __act = &(__actions)->entries[++__i])
175
176struct flow_rule {
177 struct flow_match match;
178 struct flow_action action;
179};
180
181struct flow_rule *flow_rule_alloc(unsigned int num_actions);
182
183static inline bool flow_rule_match_key(const struct flow_rule *rule,
184 enum flow_dissector_key_id key)
185{
186 return dissector_uses_key(rule->match.dissector, key);
187}
188
189struct flow_stats {
190 u64 pkts;
191 u64 bytes;
192 u64 lastused;
193};
194
195static inline void flow_stats_update(struct flow_stats *flow_stats,
196 u64 bytes, u64 pkts, u64 lastused)
197{
198 flow_stats->pkts += pkts;
199 flow_stats->bytes += bytes;
200 flow_stats->lastused = max_t(u64, flow_stats->lastused, lastused);
201}
202
203#endif /* _NET_FLOW_OFFLOAD_H */
204