1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
2 #ifndef __LINUX_PKT_CLS_H
3 #define __LINUX_PKT_CLS_H
5 #include <linux/types.h>
6 #include <linux/pkt_sched.h>
8 #define TC_COOKIE_MAX_SIZE 16
10 /* Action attributes */
22 #define TCA_ACT_MAX __TCA_ACT_MAX
23 #define TCA_OLD_COMPAT (TCA_ACT_MAX+1)
24 #define TCA_ACT_MAX_PRIO 32
25 #define TCA_ACT_BIND 1
26 #define TCA_ACT_NOBIND 0
27 #define TCA_ACT_UNBIND 1
28 #define TCA_ACT_NOUNBIND 0
29 #define TCA_ACT_REPLACE 1
30 #define TCA_ACT_NOREPLACE 0
32 #define TC_ACT_UNSPEC (-1)
34 #define TC_ACT_RECLASSIFY 1
37 #define TC_ACT_STOLEN 4
38 #define TC_ACT_QUEUED 5
39 #define TC_ACT_REPEAT 6
40 #define TC_ACT_REDIRECT 7
41 #define TC_ACT_TRAP 8 /* For hw path, this means "trap to cpu"
42 * and don't further process the frame
43 * in hardware. For sw path, this is
44 * equivalent of TC_ACT_STOLEN - drop
45 * the skb and act like everything
48 #define TC_ACT_VALUE_MAX TC_ACT_TRAP
50 /* There is a special kind of actions called "extended actions",
51 * which need a value parameter. These have a local opcode located in
52 * the highest nibble, starting from 1. The rest of the bits
53 * are used to carry the value. These two parts together make
56 #define __TC_ACT_EXT_SHIFT 28
57 #define __TC_ACT_EXT(local) ((local) << __TC_ACT_EXT_SHIFT)
58 #define TC_ACT_EXT_VAL_MASK ((1 << __TC_ACT_EXT_SHIFT) - 1)
59 #define TC_ACT_EXT_OPCODE(combined) ((combined) & (~TC_ACT_EXT_VAL_MASK))
60 #define TC_ACT_EXT_CMP(combined, opcode) (TC_ACT_EXT_OPCODE(combined) == opcode)
62 #define TC_ACT_JUMP __TC_ACT_EXT(1)
63 #define TC_ACT_GOTO_CHAIN __TC_ACT_EXT(2)
64 #define TC_ACT_EXT_OPCODE_MAX TC_ACT_GOTO_CHAIN
66 /* Action type identifiers*/
70 /* other actions go here */
74 #define TCA_ID_MAX __TCA_ID_MAX
79 #define TC_POLICE_UNSPEC TC_ACT_UNSPEC
80 #define TC_POLICE_OK TC_ACT_OK
81 #define TC_POLICE_RECLASSIFY TC_ACT_RECLASSIFY
82 #define TC_POLICE_SHOT TC_ACT_SHOT
83 #define TC_POLICE_PIPE TC_ACT_PIPE
88 struct tc_ratespec rate;
89 struct tc_ratespec peakrate;
124 #define TCA_POLICE_RESULT TCA_POLICE_RESULT
127 #define TCA_POLICE_MAX (__TCA_POLICE_MAX - 1)
129 /* tca flags definitions */
130 #define TCA_CLS_FLAGS_SKIP_HW (1 << 0) /* don't offload filter to HW */
131 #define TCA_CLS_FLAGS_SKIP_SW (1 << 1) /* don't use filter in SW */
132 #define TCA_CLS_FLAGS_IN_HW (1 << 2) /* filter is offloaded to HW */
133 #define TCA_CLS_FLAGS_NOT_IN_HW (1 << 3) /* filter isn't offloaded to HW */
134 #define TCA_CLS_FLAGS_VERBOSE (1 << 4) /* verbose logging */
138 #define TC_U32_HTID(h) ((h)&0xFFF00000)
139 #define TC_U32_USERHTID(h) (TC_U32_HTID(h)>>20)
140 #define TC_U32_HASH(h) (((h)>>12)&0xFF)
141 #define TC_U32_NODE(h) ((h)&0xFFF)
142 #define TC_U32_KEY(h) ((h)&0xFFFFF)
143 #define TC_U32_UNSPEC 0
144 #define TC_U32_ROOT (0xFFF00000)
163 #define TCA_U32_MAX (__TCA_U32_MAX - 1)
174 unsigned char offshift;
183 struct tc_u32_key keys[];
200 #define TC_U32_TERMINAL 1
201 #define TC_U32_OFFSET 2
202 #define TC_U32_VAROFFSET 4
205 #define TC_U32_MAXDEPTH 8
221 #define TCA_RSVP_MAX (__TCA_RSVP_MAX - 1 )
229 struct tc_rsvp_pinfo {
230 struct tc_rsvp_gpi dpi;
231 struct tc_rsvp_gpi spi;
251 #define TCA_ROUTE4_MAX (__TCA_ROUTE4_MAX - 1)
261 TCA_FW_ACT, /* used by CONFIG_NET_CLS_ACT */
266 #define TCA_FW_MAX (__TCA_FW_MAX - 1)
268 /* TC index filter */
275 TCA_TCINDEX_FALL_THROUGH,
282 #define TCA_TCINDEX_MAX (__TCA_TCINDEX_MAX - 1)
298 FLOW_KEY_NFCT_PROTO_SRC,
299 FLOW_KEY_NFCT_PROTO_DST,
308 #define FLOW_KEY_MAX (__FLOW_KEY_MAX - 1)
332 #define TCA_FLOW_MAX (__TCA_FLOW_MAX - 1)
345 #define TCA_BASIC_MAX (__TCA_BASIC_MAX - 1)
348 /* Cgroup classifier */
358 #define TCA_CGROUP_MAX (__TCA_CGROUP_MAX - 1)
362 #define TCA_BPF_FLAG_ACT_DIRECT (1 << 0)
380 #define TCA_BPF_MAX (__TCA_BPF_MAX - 1)
382 /* Flower classifier */
389 TCA_FLOWER_KEY_ETH_DST, /* ETH_ALEN */
390 TCA_FLOWER_KEY_ETH_DST_MASK, /* ETH_ALEN */
391 TCA_FLOWER_KEY_ETH_SRC, /* ETH_ALEN */
392 TCA_FLOWER_KEY_ETH_SRC_MASK, /* ETH_ALEN */
393 TCA_FLOWER_KEY_ETH_TYPE, /* be16 */
394 TCA_FLOWER_KEY_IP_PROTO, /* u8 */
395 TCA_FLOWER_KEY_IPV4_SRC, /* be32 */
396 TCA_FLOWER_KEY_IPV4_SRC_MASK, /* be32 */
397 TCA_FLOWER_KEY_IPV4_DST, /* be32 */
398 TCA_FLOWER_KEY_IPV4_DST_MASK, /* be32 */
399 TCA_FLOWER_KEY_IPV6_SRC, /* struct in6_addr */
400 TCA_FLOWER_KEY_IPV6_SRC_MASK, /* struct in6_addr */
401 TCA_FLOWER_KEY_IPV6_DST, /* struct in6_addr */
402 TCA_FLOWER_KEY_IPV6_DST_MASK, /* struct in6_addr */
403 TCA_FLOWER_KEY_TCP_SRC, /* be16 */
404 TCA_FLOWER_KEY_TCP_DST, /* be16 */
405 TCA_FLOWER_KEY_UDP_SRC, /* be16 */
406 TCA_FLOWER_KEY_UDP_DST, /* be16 */
409 TCA_FLOWER_KEY_VLAN_ID, /* be16 */
410 TCA_FLOWER_KEY_VLAN_PRIO, /* u8 */
411 TCA_FLOWER_KEY_VLAN_ETH_TYPE, /* be16 */
413 TCA_FLOWER_KEY_ENC_KEY_ID, /* be32 */
414 TCA_FLOWER_KEY_ENC_IPV4_SRC, /* be32 */
415 TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK,/* be32 */
416 TCA_FLOWER_KEY_ENC_IPV4_DST, /* be32 */
417 TCA_FLOWER_KEY_ENC_IPV4_DST_MASK,/* be32 */
418 TCA_FLOWER_KEY_ENC_IPV6_SRC, /* struct in6_addr */
419 TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK,/* struct in6_addr */
420 TCA_FLOWER_KEY_ENC_IPV6_DST, /* struct in6_addr */
421 TCA_FLOWER_KEY_ENC_IPV6_DST_MASK,/* struct in6_addr */
423 TCA_FLOWER_KEY_TCP_SRC_MASK, /* be16 */
424 TCA_FLOWER_KEY_TCP_DST_MASK, /* be16 */
425 TCA_FLOWER_KEY_UDP_SRC_MASK, /* be16 */
426 TCA_FLOWER_KEY_UDP_DST_MASK, /* be16 */
427 TCA_FLOWER_KEY_SCTP_SRC_MASK, /* be16 */
428 TCA_FLOWER_KEY_SCTP_DST_MASK, /* be16 */
430 TCA_FLOWER_KEY_SCTP_SRC, /* be16 */
431 TCA_FLOWER_KEY_SCTP_DST, /* be16 */
433 TCA_FLOWER_KEY_ENC_UDP_SRC_PORT, /* be16 */
434 TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK, /* be16 */
435 TCA_FLOWER_KEY_ENC_UDP_DST_PORT, /* be16 */
436 TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK, /* be16 */
438 TCA_FLOWER_KEY_FLAGS, /* be32 */
439 TCA_FLOWER_KEY_FLAGS_MASK, /* be32 */
441 TCA_FLOWER_KEY_ICMPV4_CODE, /* u8 */
442 TCA_FLOWER_KEY_ICMPV4_CODE_MASK,/* u8 */
443 TCA_FLOWER_KEY_ICMPV4_TYPE, /* u8 */
444 TCA_FLOWER_KEY_ICMPV4_TYPE_MASK,/* u8 */
445 TCA_FLOWER_KEY_ICMPV6_CODE, /* u8 */
446 TCA_FLOWER_KEY_ICMPV6_CODE_MASK,/* u8 */
447 TCA_FLOWER_KEY_ICMPV6_TYPE, /* u8 */
448 TCA_FLOWER_KEY_ICMPV6_TYPE_MASK,/* u8 */
450 TCA_FLOWER_KEY_ARP_SIP, /* be32 */
451 TCA_FLOWER_KEY_ARP_SIP_MASK, /* be32 */
452 TCA_FLOWER_KEY_ARP_TIP, /* be32 */
453 TCA_FLOWER_KEY_ARP_TIP_MASK, /* be32 */
454 TCA_FLOWER_KEY_ARP_OP, /* u8 */
455 TCA_FLOWER_KEY_ARP_OP_MASK, /* u8 */
456 TCA_FLOWER_KEY_ARP_SHA, /* ETH_ALEN */
457 TCA_FLOWER_KEY_ARP_SHA_MASK, /* ETH_ALEN */
458 TCA_FLOWER_KEY_ARP_THA, /* ETH_ALEN */
459 TCA_FLOWER_KEY_ARP_THA_MASK, /* ETH_ALEN */
461 TCA_FLOWER_KEY_MPLS_TTL, /* u8 - 8 bits */
462 TCA_FLOWER_KEY_MPLS_BOS, /* u8 - 1 bit */
463 TCA_FLOWER_KEY_MPLS_TC, /* u8 - 3 bits */
464 TCA_FLOWER_KEY_MPLS_LABEL, /* be32 - 20 bits */
466 TCA_FLOWER_KEY_TCP_FLAGS, /* be16 */
467 TCA_FLOWER_KEY_TCP_FLAGS_MASK, /* be16 */
469 TCA_FLOWER_KEY_IP_TOS, /* u8 */
470 TCA_FLOWER_KEY_IP_TOS_MASK, /* u8 */
471 TCA_FLOWER_KEY_IP_TTL, /* u8 */
472 TCA_FLOWER_KEY_IP_TTL_MASK, /* u8 */
474 TCA_FLOWER_KEY_CVLAN_ID, /* be16 */
475 TCA_FLOWER_KEY_CVLAN_PRIO, /* u8 */
476 TCA_FLOWER_KEY_CVLAN_ETH_TYPE, /* be16 */
478 TCA_FLOWER_KEY_ENC_IP_TOS, /* u8 */
479 TCA_FLOWER_KEY_ENC_IP_TOS_MASK, /* u8 */
480 TCA_FLOWER_KEY_ENC_IP_TTL, /* u8 */
481 TCA_FLOWER_KEY_ENC_IP_TTL_MASK, /* u8 */
483 TCA_FLOWER_KEY_ENC_OPTS,
484 TCA_FLOWER_KEY_ENC_OPTS_MASK,
486 TCA_FLOWER_IN_HW_COUNT,
491 #define TCA_FLOWER_MAX (__TCA_FLOWER_MAX - 1)
494 TCA_FLOWER_KEY_ENC_OPTS_UNSPEC,
495 TCA_FLOWER_KEY_ENC_OPTS_GENEVE, /* Nested
496 * TCA_FLOWER_KEY_ENC_OPT_GENEVE_
499 __TCA_FLOWER_KEY_ENC_OPTS_MAX,
502 #define TCA_FLOWER_KEY_ENC_OPTS_MAX (__TCA_FLOWER_KEY_ENC_OPTS_MAX - 1)
505 TCA_FLOWER_KEY_ENC_OPT_GENEVE_UNSPEC,
506 TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS, /* u16 */
507 TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE, /* u8 */
508 TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA, /* 4 to 128 bytes */
510 __TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX,
513 #define TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX \
514 (__TCA_FLOWER_KEY_ENC_OPT_GENEVE_MAX - 1)
517 TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT = (1 << 0),
518 TCA_FLOWER_KEY_FLAGS_FRAG_IS_FIRST = (1 << 1),
521 /* Match-all classifier */
525 TCA_MATCHALL_CLASSID,
531 #define TCA_MATCHALL_MAX (__TCA_MATCHALL_MAX - 1)
533 /* Extended Matches */
535 struct tcf_ematch_tree_hdr {
541 TCA_EMATCH_TREE_UNSPEC,
543 TCA_EMATCH_TREE_LIST,
544 __TCA_EMATCH_TREE_MAX
546 #define TCA_EMATCH_TREE_MAX (__TCA_EMATCH_TREE_MAX - 1)
548 struct tcf_ematch_hdr {
552 __u16 pad; /* currently unused */
556 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5
557 * +-----------------------+-+-+---+
559 * +-----------------------+-+-+---+
561 * R(2) ::= relation to next ematch
562 * where: 0 0 END (last ematch)
565 * 1 1 Unused (invalid)
566 * I(1) ::= invert result
567 * S(1) ::= simple payload
569 #define TCF_EM_REL_END 0
570 #define TCF_EM_REL_AND (1<<0)
571 #define TCF_EM_REL_OR (1<<1)
572 #define TCF_EM_INVERT (1<<2)
573 #define TCF_EM_SIMPLE (1<<3)
575 #define TCF_EM_REL_MASK 3
576 #define TCF_EM_REL_VALID(v) (((v) & TCF_EM_REL_MASK) != TCF_EM_REL_MASK)
584 #define TCF_LAYER_MAX (__TCF_LAYER_MAX - 1)
586 /* Ematch type assignments
587 * 1..32767 Reserved for ematches inside kernel tree
588 * 32768..65535 Free to use, not reliable
590 #define TCF_EM_CONTAINER 0
592 #define TCF_EM_NBYTE 2
594 #define TCF_EM_META 4
595 #define TCF_EM_TEXT 5
596 #define TCF_EM_VLAN 6
597 #define TCF_EM_CANID 7
598 #define TCF_EM_IPSET 8