mirror of
https://github.com/torvalds/linux.git
synced 2024-12-06 19:11:31 +00:00
83f6d60079
Add a new VLAN attribute that allows user space to set the neighbor suppression state of the port VLAN. Example: # bridge -d -j -p vlan show dev swp1 vid 10 | jq '.[]["vlans"][]["neigh_suppress"]' false # bridge vlan set vid 10 dev swp1 neigh_suppress on # bridge -d -j -p vlan show dev swp1 vid 10 | jq '.[]["vlans"][]["neigh_suppress"]' true # bridge vlan set vid 10 dev swp1 neigh_suppress off # bridge -d -j -p vlan show dev swp1 vid 10 | jq '.[]["vlans"][]["neigh_suppress"]' false # bridge vlan set vid 10 dev br0 neigh_suppress on Error: bridge: Can't set neigh_suppress for non-port vlans. Signed-off-by: Ido Schimmel <idosch@nvidia.com> Acked-by: Nikolay Aleksandrov <razor@blackwall.org> Signed-off-by: David S. Miller <davem@davemloft.net>
741 lines
22 KiB
C
741 lines
22 KiB
C
// SPDX-License-Identifier: GPL-2.0-only
|
|
// Copyright (c) 2020, Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
|
|
#include <linux/kernel.h>
|
|
#include <linux/netdevice.h>
|
|
#include <linux/rtnetlink.h>
|
|
#include <linux/slab.h>
|
|
#include <net/ip_tunnels.h>
|
|
|
|
#include "br_private.h"
|
|
#include "br_private_tunnel.h"
|
|
|
|
static bool __vlan_tun_put(struct sk_buff *skb, const struct net_bridge_vlan *v)
|
|
{
|
|
__be32 tid = tunnel_id_to_key32(v->tinfo.tunnel_id);
|
|
struct nlattr *nest;
|
|
|
|
if (!v->tinfo.tunnel_dst)
|
|
return true;
|
|
|
|
nest = nla_nest_start(skb, BRIDGE_VLANDB_ENTRY_TUNNEL_INFO);
|
|
if (!nest)
|
|
return false;
|
|
if (nla_put_u32(skb, BRIDGE_VLANDB_TINFO_ID, be32_to_cpu(tid))) {
|
|
nla_nest_cancel(skb, nest);
|
|
return false;
|
|
}
|
|
nla_nest_end(skb, nest);
|
|
|
|
return true;
|
|
}
|
|
|
|
static bool __vlan_tun_can_enter_range(const struct net_bridge_vlan *v_curr,
|
|
const struct net_bridge_vlan *range_end)
|
|
{
|
|
return (!v_curr->tinfo.tunnel_dst && !range_end->tinfo.tunnel_dst) ||
|
|
vlan_tunid_inrange(v_curr, range_end);
|
|
}
|
|
|
|
/* check if the options' state of v_curr allow it to enter the range */
|
|
bool br_vlan_opts_eq_range(const struct net_bridge_vlan *v_curr,
|
|
const struct net_bridge_vlan *range_end)
|
|
{
|
|
u8 range_mc_rtr = br_vlan_multicast_router(range_end);
|
|
u8 curr_mc_rtr = br_vlan_multicast_router(v_curr);
|
|
|
|
return v_curr->state == range_end->state &&
|
|
__vlan_tun_can_enter_range(v_curr, range_end) &&
|
|
curr_mc_rtr == range_mc_rtr;
|
|
}
|
|
|
|
bool br_vlan_opts_fill(struct sk_buff *skb, const struct net_bridge_vlan *v,
|
|
const struct net_bridge_port *p)
|
|
{
|
|
if (nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_STATE, br_vlan_get_state(v)) ||
|
|
!__vlan_tun_put(skb, v) ||
|
|
nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_NEIGH_SUPPRESS,
|
|
!!(v->priv_flags & BR_VLFLAG_NEIGH_SUPPRESS_ENABLED)))
|
|
return false;
|
|
|
|
#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
|
|
if (nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_MCAST_ROUTER,
|
|
br_vlan_multicast_router(v)))
|
|
return false;
|
|
if (p && !br_multicast_port_ctx_vlan_disabled(&v->port_mcast_ctx) &&
|
|
(nla_put_u32(skb, BRIDGE_VLANDB_ENTRY_MCAST_N_GROUPS,
|
|
br_multicast_ngroups_get(&v->port_mcast_ctx)) ||
|
|
nla_put_u32(skb, BRIDGE_VLANDB_ENTRY_MCAST_MAX_GROUPS,
|
|
br_multicast_ngroups_get_max(&v->port_mcast_ctx))))
|
|
return false;
|
|
#endif
|
|
|
|
return true;
|
|
}
|
|
|
|
size_t br_vlan_opts_nl_size(void)
|
|
{
|
|
return nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_STATE */
|
|
+ nla_total_size(0) /* BRIDGE_VLANDB_ENTRY_TUNNEL_INFO */
|
|
+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_TINFO_ID */
|
|
#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
|
|
+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_MCAST_ROUTER */
|
|
+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_ENTRY_MCAST_N_GROUPS */
|
|
+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_ENTRY_MCAST_MAX_GROUPS */
|
|
#endif
|
|
+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_NEIGH_SUPPRESS */
|
|
+ 0;
|
|
}
|
|
|
|
static int br_vlan_modify_state(struct net_bridge_vlan_group *vg,
|
|
struct net_bridge_vlan *v,
|
|
u8 state,
|
|
bool *changed,
|
|
struct netlink_ext_ack *extack)
|
|
{
|
|
struct net_bridge *br;
|
|
|
|
ASSERT_RTNL();
|
|
|
|
if (state > BR_STATE_BLOCKING) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Invalid vlan state");
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (br_vlan_is_brentry(v))
|
|
br = v->br;
|
|
else
|
|
br = v->port->br;
|
|
|
|
if (br->stp_enabled == BR_KERNEL_STP) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Can't modify vlan state when using kernel STP");
|
|
return -EBUSY;
|
|
}
|
|
|
|
if (br_opt_get(br, BROPT_MST_ENABLED)) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Can't modify vlan state directly when MST is enabled");
|
|
return -EBUSY;
|
|
}
|
|
|
|
if (v->state == state)
|
|
return 0;
|
|
|
|
if (v->vid == br_get_pvid(vg))
|
|
br_vlan_set_pvid_state(vg, state);
|
|
|
|
br_vlan_set_state(v, state);
|
|
*changed = true;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static const struct nla_policy br_vlandb_tinfo_pol[BRIDGE_VLANDB_TINFO_MAX + 1] = {
|
|
[BRIDGE_VLANDB_TINFO_ID] = { .type = NLA_U32 },
|
|
[BRIDGE_VLANDB_TINFO_CMD] = { .type = NLA_U32 },
|
|
};
|
|
|
|
static int br_vlan_modify_tunnel(const struct net_bridge_port *p,
|
|
struct net_bridge_vlan *v,
|
|
struct nlattr **tb,
|
|
bool *changed,
|
|
struct netlink_ext_ack *extack)
|
|
{
|
|
struct nlattr *tun_tb[BRIDGE_VLANDB_TINFO_MAX + 1], *attr;
|
|
struct bridge_vlan_info *vinfo;
|
|
u32 tun_id = 0;
|
|
int cmd, err;
|
|
|
|
if (!p) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Can't modify tunnel mapping of non-port vlans");
|
|
return -EINVAL;
|
|
}
|
|
if (!(p->flags & BR_VLAN_TUNNEL)) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Port doesn't have tunnel flag set");
|
|
return -EINVAL;
|
|
}
|
|
|
|
attr = tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO];
|
|
err = nla_parse_nested(tun_tb, BRIDGE_VLANDB_TINFO_MAX, attr,
|
|
br_vlandb_tinfo_pol, extack);
|
|
if (err)
|
|
return err;
|
|
|
|
if (!tun_tb[BRIDGE_VLANDB_TINFO_CMD]) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Missing tunnel command attribute");
|
|
return -ENOENT;
|
|
}
|
|
cmd = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_CMD]);
|
|
switch (cmd) {
|
|
case RTM_SETLINK:
|
|
if (!tun_tb[BRIDGE_VLANDB_TINFO_ID]) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Missing tunnel id attribute");
|
|
return -ENOENT;
|
|
}
|
|
/* when working on vlan ranges this is the starting tunnel id */
|
|
tun_id = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_ID]);
|
|
/* vlan info attr is guaranteed by br_vlan_rtm_process_one */
|
|
vinfo = nla_data(tb[BRIDGE_VLANDB_ENTRY_INFO]);
|
|
/* tunnel ids are mapped to each vlan in increasing order,
|
|
* the starting vlan is in BRIDGE_VLANDB_ENTRY_INFO and v is the
|
|
* current vlan, so we compute: tun_id + v - vinfo->vid
|
|
*/
|
|
tun_id += v->vid - vinfo->vid;
|
|
break;
|
|
case RTM_DELLINK:
|
|
break;
|
|
default:
|
|
NL_SET_ERR_MSG_MOD(extack, "Unsupported tunnel command");
|
|
return -EINVAL;
|
|
}
|
|
|
|
return br_vlan_tunnel_info(p, cmd, v->vid, tun_id, changed);
|
|
}
|
|
|
|
static int br_vlan_process_one_opts(const struct net_bridge *br,
|
|
const struct net_bridge_port *p,
|
|
struct net_bridge_vlan_group *vg,
|
|
struct net_bridge_vlan *v,
|
|
struct nlattr **tb,
|
|
bool *changed,
|
|
struct netlink_ext_ack *extack)
|
|
{
|
|
int err;
|
|
|
|
*changed = false;
|
|
if (tb[BRIDGE_VLANDB_ENTRY_STATE]) {
|
|
u8 state = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_STATE]);
|
|
|
|
err = br_vlan_modify_state(vg, v, state, changed, extack);
|
|
if (err)
|
|
return err;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO]) {
|
|
err = br_vlan_modify_tunnel(p, v, tb, changed, extack);
|
|
if (err)
|
|
return err;
|
|
}
|
|
|
|
#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
|
|
if (tb[BRIDGE_VLANDB_ENTRY_MCAST_ROUTER]) {
|
|
u8 val;
|
|
|
|
val = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_MCAST_ROUTER]);
|
|
err = br_multicast_set_vlan_router(v, val);
|
|
if (err)
|
|
return err;
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_ENTRY_MCAST_MAX_GROUPS]) {
|
|
u32 val;
|
|
|
|
if (!p) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Can't set mcast_max_groups for non-port vlans");
|
|
return -EINVAL;
|
|
}
|
|
if (br_multicast_port_ctx_vlan_disabled(&v->port_mcast_ctx)) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Multicast snooping disabled on this VLAN");
|
|
return -EINVAL;
|
|
}
|
|
|
|
val = nla_get_u32(tb[BRIDGE_VLANDB_ENTRY_MCAST_MAX_GROUPS]);
|
|
br_multicast_ngroups_set_max(&v->port_mcast_ctx, val);
|
|
*changed = true;
|
|
}
|
|
#endif
|
|
|
|
if (tb[BRIDGE_VLANDB_ENTRY_NEIGH_SUPPRESS]) {
|
|
bool enabled = v->priv_flags & BR_VLFLAG_NEIGH_SUPPRESS_ENABLED;
|
|
bool val = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_NEIGH_SUPPRESS]);
|
|
|
|
if (!p) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Can't set neigh_suppress for non-port vlans");
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (val != enabled) {
|
|
v->priv_flags ^= BR_VLFLAG_NEIGH_SUPPRESS_ENABLED;
|
|
*changed = true;
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int br_vlan_process_options(const struct net_bridge *br,
|
|
const struct net_bridge_port *p,
|
|
struct net_bridge_vlan *range_start,
|
|
struct net_bridge_vlan *range_end,
|
|
struct nlattr **tb,
|
|
struct netlink_ext_ack *extack)
|
|
{
|
|
struct net_bridge_vlan *v, *curr_start = NULL, *curr_end = NULL;
|
|
struct net_bridge_vlan_group *vg;
|
|
int vid, err = 0;
|
|
u16 pvid;
|
|
|
|
if (p)
|
|
vg = nbp_vlan_group(p);
|
|
else
|
|
vg = br_vlan_group(br);
|
|
|
|
if (!range_start || !br_vlan_should_use(range_start)) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Vlan range start doesn't exist, can't process options");
|
|
return -ENOENT;
|
|
}
|
|
if (!range_end || !br_vlan_should_use(range_end)) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Vlan range end doesn't exist, can't process options");
|
|
return -ENOENT;
|
|
}
|
|
|
|
pvid = br_get_pvid(vg);
|
|
for (vid = range_start->vid; vid <= range_end->vid; vid++) {
|
|
bool changed = false;
|
|
|
|
v = br_vlan_find(vg, vid);
|
|
if (!v || !br_vlan_should_use(v)) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process options");
|
|
err = -ENOENT;
|
|
break;
|
|
}
|
|
|
|
err = br_vlan_process_one_opts(br, p, vg, v, tb, &changed,
|
|
extack);
|
|
if (err)
|
|
break;
|
|
|
|
if (changed) {
|
|
/* vlan options changed, check for range */
|
|
if (!curr_start) {
|
|
curr_start = v;
|
|
curr_end = v;
|
|
continue;
|
|
}
|
|
|
|
if (v->vid == pvid ||
|
|
!br_vlan_can_enter_range(v, curr_end)) {
|
|
br_vlan_notify(br, p, curr_start->vid,
|
|
curr_end->vid, RTM_NEWVLAN);
|
|
curr_start = v;
|
|
}
|
|
curr_end = v;
|
|
} else {
|
|
/* nothing changed and nothing to notify yet */
|
|
if (!curr_start)
|
|
continue;
|
|
|
|
br_vlan_notify(br, p, curr_start->vid, curr_end->vid,
|
|
RTM_NEWVLAN);
|
|
curr_start = NULL;
|
|
curr_end = NULL;
|
|
}
|
|
}
|
|
if (curr_start)
|
|
br_vlan_notify(br, p, curr_start->vid, curr_end->vid,
|
|
RTM_NEWVLAN);
|
|
|
|
return err;
|
|
}
|
|
|
|
bool br_vlan_global_opts_can_enter_range(const struct net_bridge_vlan *v_curr,
|
|
const struct net_bridge_vlan *r_end)
|
|
{
|
|
return v_curr->vid - r_end->vid == 1 &&
|
|
v_curr->msti == r_end->msti &&
|
|
((v_curr->priv_flags ^ r_end->priv_flags) &
|
|
BR_VLFLAG_GLOBAL_MCAST_ENABLED) == 0 &&
|
|
br_multicast_ctx_options_equal(&v_curr->br_mcast_ctx,
|
|
&r_end->br_mcast_ctx);
|
|
}
|
|
|
|
bool br_vlan_global_opts_fill(struct sk_buff *skb, u16 vid, u16 vid_range,
|
|
const struct net_bridge_vlan *v_opts)
|
|
{
|
|
struct nlattr *nest2 __maybe_unused;
|
|
u64 clockval __maybe_unused;
|
|
struct nlattr *nest;
|
|
|
|
nest = nla_nest_start(skb, BRIDGE_VLANDB_GLOBAL_OPTIONS);
|
|
if (!nest)
|
|
return false;
|
|
|
|
if (nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_ID, vid))
|
|
goto out_err;
|
|
|
|
if (vid_range && vid < vid_range &&
|
|
nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_RANGE, vid_range))
|
|
goto out_err;
|
|
|
|
#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
|
|
if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING,
|
|
!!(v_opts->priv_flags & BR_VLFLAG_GLOBAL_MCAST_ENABLED)) ||
|
|
nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION,
|
|
v_opts->br_mcast_ctx.multicast_igmp_version) ||
|
|
nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT,
|
|
v_opts->br_mcast_ctx.multicast_last_member_count) ||
|
|
nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT,
|
|
v_opts->br_mcast_ctx.multicast_startup_query_count) ||
|
|
nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERIER,
|
|
v_opts->br_mcast_ctx.multicast_querier) ||
|
|
br_multicast_dump_querier_state(skb, &v_opts->br_mcast_ctx,
|
|
BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_STATE))
|
|
goto out_err;
|
|
|
|
clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_last_member_interval);
|
|
if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL,
|
|
clockval, BRIDGE_VLANDB_GOPTS_PAD))
|
|
goto out_err;
|
|
clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_membership_interval);
|
|
if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL,
|
|
clockval, BRIDGE_VLANDB_GOPTS_PAD))
|
|
goto out_err;
|
|
clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_querier_interval);
|
|
if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL,
|
|
clockval, BRIDGE_VLANDB_GOPTS_PAD))
|
|
goto out_err;
|
|
clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_query_interval);
|
|
if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL,
|
|
clockval, BRIDGE_VLANDB_GOPTS_PAD))
|
|
goto out_err;
|
|
clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_query_response_interval);
|
|
if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL,
|
|
clockval, BRIDGE_VLANDB_GOPTS_PAD))
|
|
goto out_err;
|
|
clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_startup_query_interval);
|
|
if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL,
|
|
clockval, BRIDGE_VLANDB_GOPTS_PAD))
|
|
goto out_err;
|
|
|
|
if (br_rports_have_mc_router(&v_opts->br_mcast_ctx)) {
|
|
nest2 = nla_nest_start(skb,
|
|
BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS);
|
|
if (!nest2)
|
|
goto out_err;
|
|
|
|
rcu_read_lock();
|
|
if (br_rports_fill_info(skb, &v_opts->br_mcast_ctx)) {
|
|
rcu_read_unlock();
|
|
nla_nest_cancel(skb, nest2);
|
|
goto out_err;
|
|
}
|
|
rcu_read_unlock();
|
|
|
|
nla_nest_end(skb, nest2);
|
|
}
|
|
|
|
#if IS_ENABLED(CONFIG_IPV6)
|
|
if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION,
|
|
v_opts->br_mcast_ctx.multicast_mld_version))
|
|
goto out_err;
|
|
#endif
|
|
#endif
|
|
|
|
if (nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_MSTI, v_opts->msti))
|
|
goto out_err;
|
|
|
|
nla_nest_end(skb, nest);
|
|
|
|
return true;
|
|
|
|
out_err:
|
|
nla_nest_cancel(skb, nest);
|
|
return false;
|
|
}
|
|
|
|
static size_t rtnl_vlan_global_opts_nlmsg_size(const struct net_bridge_vlan *v)
|
|
{
|
|
return NLMSG_ALIGN(sizeof(struct br_vlan_msg))
|
|
+ nla_total_size(0) /* BRIDGE_VLANDB_GLOBAL_OPTIONS */
|
|
+ nla_total_size(sizeof(u16)) /* BRIDGE_VLANDB_GOPTS_ID */
|
|
#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
|
|
+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING */
|
|
+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION */
|
|
+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION */
|
|
+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT */
|
|
+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT */
|
|
+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL */
|
|
+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL */
|
|
+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL */
|
|
+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL */
|
|
+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL */
|
|
+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL */
|
|
+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER */
|
|
+ br_multicast_querier_state_size() /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_STATE */
|
|
+ nla_total_size(0) /* BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS */
|
|
+ br_rports_size(&v->br_mcast_ctx) /* BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS */
|
|
#endif
|
|
+ nla_total_size(sizeof(u16)) /* BRIDGE_VLANDB_GOPTS_MSTI */
|
|
+ nla_total_size(sizeof(u16)); /* BRIDGE_VLANDB_GOPTS_RANGE */
|
|
}
|
|
|
|
static void br_vlan_global_opts_notify(const struct net_bridge *br,
|
|
u16 vid, u16 vid_range)
|
|
{
|
|
struct net_bridge_vlan *v;
|
|
struct br_vlan_msg *bvm;
|
|
struct nlmsghdr *nlh;
|
|
struct sk_buff *skb;
|
|
int err = -ENOBUFS;
|
|
|
|
/* right now notifications are done only with rtnl held */
|
|
ASSERT_RTNL();
|
|
|
|
/* need to find the vlan due to flags/options */
|
|
v = br_vlan_find(br_vlan_group(br), vid);
|
|
if (!v)
|
|
return;
|
|
|
|
skb = nlmsg_new(rtnl_vlan_global_opts_nlmsg_size(v), GFP_KERNEL);
|
|
if (!skb)
|
|
goto out_err;
|
|
|
|
err = -EMSGSIZE;
|
|
nlh = nlmsg_put(skb, 0, 0, RTM_NEWVLAN, sizeof(*bvm), 0);
|
|
if (!nlh)
|
|
goto out_err;
|
|
bvm = nlmsg_data(nlh);
|
|
memset(bvm, 0, sizeof(*bvm));
|
|
bvm->family = AF_BRIDGE;
|
|
bvm->ifindex = br->dev->ifindex;
|
|
|
|
if (!br_vlan_global_opts_fill(skb, vid, vid_range, v))
|
|
goto out_err;
|
|
|
|
nlmsg_end(skb, nlh);
|
|
rtnl_notify(skb, dev_net(br->dev), 0, RTNLGRP_BRVLAN, NULL, GFP_KERNEL);
|
|
return;
|
|
|
|
out_err:
|
|
rtnl_set_sk_err(dev_net(br->dev), RTNLGRP_BRVLAN, err);
|
|
kfree_skb(skb);
|
|
}
|
|
|
|
static int br_vlan_process_global_one_opts(const struct net_bridge *br,
|
|
struct net_bridge_vlan_group *vg,
|
|
struct net_bridge_vlan *v,
|
|
struct nlattr **tb,
|
|
bool *changed,
|
|
struct netlink_ext_ack *extack)
|
|
{
|
|
int err __maybe_unused;
|
|
|
|
*changed = false;
|
|
#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]) {
|
|
u8 mc_snooping;
|
|
|
|
mc_snooping = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]);
|
|
if (br_multicast_toggle_global_vlan(v, !!mc_snooping))
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]) {
|
|
u8 ver;
|
|
|
|
ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]);
|
|
err = br_multicast_set_igmp_version(&v->br_mcast_ctx, ver);
|
|
if (err)
|
|
return err;
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]) {
|
|
u32 cnt;
|
|
|
|
cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]);
|
|
v->br_mcast_ctx.multicast_last_member_count = cnt;
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]) {
|
|
u32 cnt;
|
|
|
|
cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]);
|
|
v->br_mcast_ctx.multicast_startup_query_count = cnt;
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]) {
|
|
u64 val;
|
|
|
|
val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]);
|
|
v->br_mcast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]) {
|
|
u64 val;
|
|
|
|
val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]);
|
|
v->br_mcast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]) {
|
|
u64 val;
|
|
|
|
val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]);
|
|
v->br_mcast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]) {
|
|
u64 val;
|
|
|
|
val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]);
|
|
br_multicast_set_query_intvl(&v->br_mcast_ctx, val);
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL]) {
|
|
u64 val;
|
|
|
|
val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL]);
|
|
v->br_mcast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val);
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL]) {
|
|
u64 val;
|
|
|
|
val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL]);
|
|
br_multicast_set_startup_query_intvl(&v->br_mcast_ctx, val);
|
|
*changed = true;
|
|
}
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER]) {
|
|
u8 val;
|
|
|
|
val = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER]);
|
|
err = br_multicast_set_querier(&v->br_mcast_ctx, val);
|
|
if (err)
|
|
return err;
|
|
*changed = true;
|
|
}
|
|
#if IS_ENABLED(CONFIG_IPV6)
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]) {
|
|
u8 ver;
|
|
|
|
ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]);
|
|
err = br_multicast_set_mld_version(&v->br_mcast_ctx, ver);
|
|
if (err)
|
|
return err;
|
|
*changed = true;
|
|
}
|
|
#endif
|
|
#endif
|
|
if (tb[BRIDGE_VLANDB_GOPTS_MSTI]) {
|
|
u16 msti;
|
|
|
|
msti = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_MSTI]);
|
|
err = br_mst_vlan_set_msti(v, msti);
|
|
if (err)
|
|
return err;
|
|
*changed = true;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static const struct nla_policy br_vlan_db_gpol[BRIDGE_VLANDB_GOPTS_MAX + 1] = {
|
|
[BRIDGE_VLANDB_GOPTS_ID] = { .type = NLA_U16 },
|
|
[BRIDGE_VLANDB_GOPTS_RANGE] = { .type = NLA_U16 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING] = { .type = NLA_U8 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION] = { .type = NLA_U8 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER] = { .type = NLA_U8 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
|
|
[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
|
|
[BRIDGE_VLANDB_GOPTS_MSTI] = NLA_POLICY_MAX(NLA_U16, VLAN_N_VID - 1),
|
|
};
|
|
|
|
int br_vlan_rtm_process_global_options(struct net_device *dev,
|
|
const struct nlattr *attr,
|
|
int cmd,
|
|
struct netlink_ext_ack *extack)
|
|
{
|
|
struct net_bridge_vlan *v, *curr_start = NULL, *curr_end = NULL;
|
|
struct nlattr *tb[BRIDGE_VLANDB_GOPTS_MAX + 1];
|
|
struct net_bridge_vlan_group *vg;
|
|
u16 vid, vid_range = 0;
|
|
struct net_bridge *br;
|
|
int err = 0;
|
|
|
|
if (cmd != RTM_NEWVLAN) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Global vlan options support only set operation");
|
|
return -EINVAL;
|
|
}
|
|
if (!netif_is_bridge_master(dev)) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Global vlan options can only be set on bridge device");
|
|
return -EINVAL;
|
|
}
|
|
br = netdev_priv(dev);
|
|
vg = br_vlan_group(br);
|
|
if (WARN_ON(!vg))
|
|
return -ENODEV;
|
|
|
|
err = nla_parse_nested(tb, BRIDGE_VLANDB_GOPTS_MAX, attr,
|
|
br_vlan_db_gpol, extack);
|
|
if (err)
|
|
return err;
|
|
|
|
if (!tb[BRIDGE_VLANDB_GOPTS_ID]) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Missing vlan entry id");
|
|
return -EINVAL;
|
|
}
|
|
vid = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_ID]);
|
|
if (!br_vlan_valid_id(vid, extack))
|
|
return -EINVAL;
|
|
|
|
if (tb[BRIDGE_VLANDB_GOPTS_RANGE]) {
|
|
vid_range = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_RANGE]);
|
|
if (!br_vlan_valid_id(vid_range, extack))
|
|
return -EINVAL;
|
|
if (vid >= vid_range) {
|
|
NL_SET_ERR_MSG_MOD(extack, "End vlan id is less than or equal to start vlan id");
|
|
return -EINVAL;
|
|
}
|
|
} else {
|
|
vid_range = vid;
|
|
}
|
|
|
|
for (; vid <= vid_range; vid++) {
|
|
bool changed = false;
|
|
|
|
v = br_vlan_find(vg, vid);
|
|
if (!v) {
|
|
NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process global options");
|
|
err = -ENOENT;
|
|
break;
|
|
}
|
|
|
|
err = br_vlan_process_global_one_opts(br, vg, v, tb, &changed,
|
|
extack);
|
|
if (err)
|
|
break;
|
|
|
|
if (changed) {
|
|
/* vlan options changed, check for range */
|
|
if (!curr_start) {
|
|
curr_start = v;
|
|
curr_end = v;
|
|
continue;
|
|
}
|
|
|
|
if (!br_vlan_global_opts_can_enter_range(v, curr_end)) {
|
|
br_vlan_global_opts_notify(br, curr_start->vid,
|
|
curr_end->vid);
|
|
curr_start = v;
|
|
}
|
|
curr_end = v;
|
|
} else {
|
|
/* nothing changed and nothing to notify yet */
|
|
if (!curr_start)
|
|
continue;
|
|
|
|
br_vlan_global_opts_notify(br, curr_start->vid,
|
|
curr_end->vid);
|
|
curr_start = NULL;
|
|
curr_end = NULL;
|
|
}
|
|
}
|
|
if (curr_start)
|
|
br_vlan_global_opts_notify(br, curr_start->vid, curr_end->vid);
|
|
|
|
return err;
|
|
}
|