Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2019 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
Maciej Żenczykowski | 776200e | 2020-02-05 02:05:16 -0800 | [diff] [blame] | 17 | #pragma once |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 18 | |
Hungming Chen | ec20338 | 2020-02-13 19:15:33 +0800 | [diff] [blame] | 19 | #include <android-base/result.h> |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 20 | #include <errno.h> |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 21 | #include <linux/if_ether.h> |
Maciej Żenczykowski | ba6ac9a | 2021-01-07 18:45:11 -0800 | [diff] [blame] | 22 | #include <linux/if_link.h> |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 23 | #include <linux/rtnetlink.h> |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 24 | |
Maciej Żenczykowski | 0a7dce8 | 2019-01-28 15:31:55 -0800 | [diff] [blame] | 25 | #include <string> |
| 26 | |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 27 | #include "bpf/BpfUtils.h" |
| 28 | #include "netdbpf/bpf_shared.h" |
| 29 | |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 30 | namespace android { |
| 31 | namespace net { |
| 32 | |
Maciej Żenczykowski | ad73089 | 2020-02-13 18:21:32 -0800 | [diff] [blame] | 33 | // For better code clarity - do not change values - used for booleans like |
| 34 | // with_ethernet_header or isEthernet. |
| 35 | constexpr bool RAWIP = false; |
| 36 | constexpr bool ETHER = true; |
| 37 | |
Maciej Żenczykowski | 8640003 | 2020-02-13 18:39:34 -0800 | [diff] [blame] | 38 | // For better code clarity when used for 'bool ingress' parameter. |
| 39 | constexpr bool EGRESS = false; |
| 40 | constexpr bool INGRESS = true; |
| 41 | |
Hungming Chen | ec20338 | 2020-02-13 19:15:33 +0800 | [diff] [blame] | 42 | // this returns an ARPHRD_* constant or a -errno |
| 43 | int hardwareAddressType(const std::string& interface); |
| 44 | |
Maciej Żenczykowski | 7547c73 | 2021-01-23 03:45:35 -0800 | [diff] [blame] | 45 | // return MTU or -errno |
| 46 | int deviceMTU(const std::string& interface); |
| 47 | |
Hungming Chen | ec20338 | 2020-02-13 19:15:33 +0800 | [diff] [blame] | 48 | base::Result<bool> isEthernet(const std::string& interface); |
| 49 | |
Maciej Żenczykowski | 79eea38 | 2021-01-17 02:52:11 -0800 | [diff] [blame] | 50 | inline int getClatEgress4MapFd(void) { |
| 51 | const int fd = bpf::mapRetrieveRW(CLAT_EGRESS4_MAP_PATH); |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 52 | return (fd == -1) ? -errno : fd; |
| 53 | } |
Maciej Żenczykowski | 4e36f13 | 2019-12-15 13:20:15 -0800 | [diff] [blame] | 54 | |
Maciej Żenczykowski | 79eea38 | 2021-01-17 02:52:11 -0800 | [diff] [blame] | 55 | inline int getClatEgress4ProgFd(bool with_ethernet_header) { |
| 56 | const int fd = bpf::retrieveProgram(with_ethernet_header ? CLAT_EGRESS4_PROG_ETHER_PATH |
| 57 | : CLAT_EGRESS4_PROG_RAWIP_PATH); |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 58 | return (fd == -1) ? -errno : fd; |
| 59 | } |
Maciej Żenczykowski | e870a87 | 2019-12-15 13:56:13 -0800 | [diff] [blame] | 60 | |
Maciej Żenczykowski | 79eea38 | 2021-01-17 02:52:11 -0800 | [diff] [blame] | 61 | inline int getClatIngress6MapFd(void) { |
| 62 | const int fd = bpf::mapRetrieveRW(CLAT_INGRESS6_MAP_PATH); |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 63 | return (fd == -1) ? -errno : fd; |
| 64 | } |
Maciej Żenczykowski | 88d28ff | 2019-03-25 11:54:32 -0700 | [diff] [blame] | 65 | |
Maciej Żenczykowski | 79eea38 | 2021-01-17 02:52:11 -0800 | [diff] [blame] | 66 | inline int getClatIngress6ProgFd(bool with_ethernet_header) { |
| 67 | const int fd = bpf::retrieveProgram(with_ethernet_header ? CLAT_INGRESS6_PROG_ETHER_PATH |
| 68 | : CLAT_INGRESS6_PROG_RAWIP_PATH); |
Maciej Żenczykowski | e5b6b4d | 2020-02-05 02:00:38 -0800 | [diff] [blame] | 69 | return (fd == -1) ? -errno : fd; |
| 70 | } |
Maciej Żenczykowski | 949d84a | 2019-01-28 17:22:30 -0800 | [diff] [blame] | 71 | |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 72 | int doTcQdiscClsact(int ifIndex, uint16_t nlMsgType, uint16_t nlMsgFlags); |
Maciej Żenczykowski | 7330b02 | 2019-01-28 17:30:24 -0800 | [diff] [blame] | 73 | |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 74 | inline int tcQdiscAddDevClsact(int ifIndex) { |
| 75 | return doTcQdiscClsact(ifIndex, RTM_NEWQDISC, NLM_F_EXCL | NLM_F_CREATE); |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 76 | } |
| 77 | |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 78 | inline int tcQdiscReplaceDevClsact(int ifIndex) { |
| 79 | return doTcQdiscClsact(ifIndex, RTM_NEWQDISC, NLM_F_CREATE | NLM_F_REPLACE); |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 80 | } |
| 81 | |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 82 | inline int tcQdiscDelDevClsact(int ifIndex) { |
| 83 | return doTcQdiscClsact(ifIndex, RTM_DELQDISC, 0); |
Maciej Żenczykowski | b3e69d6 | 2020-02-05 02:44:16 -0800 | [diff] [blame] | 84 | } |
Maciej Żenczykowski | ff3308d | 2019-02-12 19:10:55 -0800 | [diff] [blame] | 85 | |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 86 | // tc filter add dev .. in/egress prio 4 protocol ipv6/ip bpf object-pinned /sys/fs/bpf/... |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 87 | // direct-action |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 88 | int tcFilterAddDevBpf(int ifIndex, bool ingress, uint16_t proto, int bpfFd, bool ethernet); |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 89 | |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 90 | // tc filter add dev .. ingress prio 4 protocol ipv6 bpf object-pinned /sys/fs/bpf/... direct-action |
Maciej Żenczykowski | 3316382 | 2020-02-16 17:12:41 -0800 | [diff] [blame] | 91 | inline int tcFilterAddDevIngressClatIpv6(int ifIndex, int bpfFd, bool ethernet) { |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 92 | return tcFilterAddDevBpf(ifIndex, INGRESS, ETH_P_IPV6, bpfFd, ethernet); |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 93 | } |
| 94 | |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 95 | // tc filter add dev .. egress prio 4 protocol ip bpf object-pinned /sys/fs/bpf/... direct-action |
Maciej Żenczykowski | 3316382 | 2020-02-16 17:12:41 -0800 | [diff] [blame] | 96 | inline int tcFilterAddDevEgressClatIpv4(int ifIndex, int bpfFd, bool ethernet) { |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 97 | return tcFilterAddDevBpf(ifIndex, EGRESS, ETH_P_IP, bpfFd, ethernet); |
Maciej Żenczykowski | 74f8c9d | 2020-02-05 02:59:20 -0800 | [diff] [blame] | 98 | } |
Maciej Żenczykowski | 2f8ff89 | 2019-03-25 13:57:20 -0700 | [diff] [blame] | 99 | |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 100 | // tc filter del dev .. in/egress prio .. protocol .. |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 101 | int tcFilterDelDev(int ifIndex, bool ingress, uint16_t proto); |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 102 | |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 103 | // tc filter del dev .. ingress prio 4 protocol ipv6 |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 104 | inline int tcFilterDelDevIngressClatIpv6(int ifIndex) { |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 105 | return tcFilterDelDev(ifIndex, INGRESS, ETH_P_IPV6); |
Maciej Żenczykowski | f124738 | 2020-02-05 00:44:14 -0800 | [diff] [blame] | 106 | } |
| 107 | |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 108 | // tc filter del dev .. egress prio 4 protocol ip |
Maciej Żenczykowski | f89e911 | 2020-02-12 05:22:56 -0800 | [diff] [blame] | 109 | inline int tcFilterDelDevEgressClatIpv4(int ifIndex) { |
Maciej Żenczykowski | 21c5bc0 | 2021-03-17 20:29:40 -0700 | [diff] [blame] | 110 | return tcFilterDelDev(ifIndex, EGRESS, ETH_P_IP); |
Maciej Żenczykowski | 830a15e | 2020-02-13 18:47:25 -0800 | [diff] [blame] | 111 | } |
| 112 | |
Maciej Żenczykowski | b70da76 | 2019-01-28 15:20:48 -0800 | [diff] [blame] | 113 | } // namespace net |
| 114 | } // namespace android |