mirror of
https://github.com/openvswitch/ovs
synced 2025-10-19 14:37:21 +00:00
144 lines
4.1 KiB
C
144 lines
4.1 KiB
C
/*
|
||
* Copyright (c) 2015, 2016, 2017, 2019 Nicira, Inc.
|
||
*
|
||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||
* you may not use this file except in compliance with the License.
|
||
* You may obtain a copy of the License at:
|
||
*
|
||
* http://www.apache.org/licenses/LICENSE-2.0
|
||
*
|
||
* Unless required by applicable law or agreed to in writing, software
|
||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
* See the License for the specific language governing permissions and
|
||
* limitations under the License.
|
||
*/
|
||
|
||
#ifndef CONNTRACK_H
|
||
#define CONNTRACK_H 1
|
||
|
||
#include <stdbool.h>
|
||
|
||
#include "cmap.h"
|
||
#include "latch.h"
|
||
#include "odp-netlink.h"
|
||
#include "openvswitch/hmap.h"
|
||
#include "openvswitch/list.h"
|
||
#include "openvswitch/thread.h"
|
||
#include "openvswitch/types.h"
|
||
#include "ovs-atomic.h"
|
||
#include "ovs-thread.h"
|
||
#include "packets.h"
|
||
#include "hindex.h"
|
||
|
||
/* Userspace connection tracker
|
||
* ============================
|
||
*
|
||
* This is a connection tracking module that keeps all the state in userspace.
|
||
*
|
||
* Usage
|
||
* =====
|
||
*
|
||
* struct conntrack *ct;
|
||
*
|
||
* Initialization:
|
||
*
|
||
* ct = conntrack_init();
|
||
*
|
||
* To send a group of packets through the connection tracker:
|
||
*
|
||
* conntrack_execute(ct, pkt_batch, ...);
|
||
*
|
||
* Thread-safety:
|
||
*
|
||
* conntrack_execute() can be called by multiple threads simultaneoulsy.
|
||
*
|
||
* Shutdown:
|
||
*
|
||
* 1/ Shutdown packet input to the datapath
|
||
* 2/ Destroy PMD threads after quiescence.
|
||
* 3/ conntrack_destroy(ct);
|
||
*/
|
||
|
||
struct dp_packet_batch;
|
||
|
||
struct conntrack;
|
||
|
||
union ct_addr {
|
||
ovs_be32 ipv4;
|
||
struct in6_addr ipv6;
|
||
};
|
||
|
||
enum nat_action_e {
|
||
NAT_ACTION_SRC = 1 << 0,
|
||
NAT_ACTION_SRC_PORT = 1 << 1,
|
||
NAT_ACTION_DST = 1 << 2,
|
||
NAT_ACTION_DST_PORT = 1 << 3,
|
||
};
|
||
|
||
struct nat_action_info_t {
|
||
union ct_addr min_addr;
|
||
union ct_addr max_addr;
|
||
uint16_t min_port;
|
||
uint16_t max_port;
|
||
uint16_t nat_action;
|
||
};
|
||
|
||
struct conntrack *conntrack_init(void);
|
||
void conntrack_destroy(struct conntrack *);
|
||
|
||
int conntrack_execute(struct conntrack *ct, struct dp_packet_batch *pkt_batch,
|
||
ovs_be16 dl_type, bool force, bool commit, uint16_t zone,
|
||
const uint32_t *setmark,
|
||
const struct ovs_key_ct_labels *setlabel,
|
||
ovs_be16 tp_src, ovs_be16 tp_dst, const char *helper,
|
||
const struct nat_action_info_t *nat_action_info,
|
||
long long now);
|
||
void conntrack_clear(struct dp_packet *packet);
|
||
|
||
struct conntrack_dump {
|
||
struct conntrack *ct;
|
||
unsigned bucket;
|
||
struct cmap_position cm_pos;
|
||
bool filter_zone;
|
||
uint16_t zone;
|
||
};
|
||
|
||
struct conntrack_zone_limit {
|
||
int32_t zone;
|
||
uint32_t limit;
|
||
uint32_t count;
|
||
uint32_t zone_limit_seq; /* Used to disambiguate zone limit counts. */
|
||
};
|
||
|
||
enum {
|
||
INVALID_ZONE = -2,
|
||
DEFAULT_ZONE = -1, /* Default zone for zone limit management. */
|
||
MIN_ZONE = 0,
|
||
MAX_ZONE = 0xFFFF,
|
||
};
|
||
|
||
struct ct_dpif_entry;
|
||
struct ct_dpif_tuple;
|
||
|
||
int conntrack_dump_start(struct conntrack *, struct conntrack_dump *,
|
||
const uint16_t *pzone, int *);
|
||
int conntrack_dump_next(struct conntrack_dump *, struct ct_dpif_entry *);
|
||
int conntrack_dump_done(struct conntrack_dump *);
|
||
|
||
int conntrack_flush(struct conntrack *, const uint16_t *zone);
|
||
int conntrack_flush_tuple(struct conntrack *, const struct ct_dpif_tuple *,
|
||
uint16_t zone);
|
||
int conntrack_set_maxconns(struct conntrack *ct, uint32_t maxconns);
|
||
int conntrack_get_maxconns(struct conntrack *ct, uint32_t *maxconns);
|
||
int conntrack_get_nconns(struct conntrack *ct, uint32_t *nconns);
|
||
int conntrack_set_tcp_seq_chk(struct conntrack *ct, bool enabled);
|
||
bool conntrack_get_tcp_seq_chk(struct conntrack *ct);
|
||
struct ipf *conntrack_ipf_ctx(struct conntrack *ct);
|
||
struct conntrack_zone_limit zone_limit_get(struct conntrack *ct,
|
||
int32_t zone);
|
||
int zone_limit_update(struct conntrack *ct, int32_t zone, uint32_t limit);
|
||
int zone_limit_delete(struct conntrack *ct, uint16_t zone);
|
||
|
||
#endif /* conntrack.h */
|