2 * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
4 * Begun April 1, 1996, Mike Shaver.
5 * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
9 #include <linux/module.h>
10 #include <linux/sysctl.h>
11 #include <linux/igmp.h>
12 #include <linux/inetdevice.h>
13 #include <linux/seqlock.h>
14 #include <linux/init.h>
15 #include <linux/slab.h>
19 #include <net/route.h>
22 #include <net/cipso_ipv4.h>
23 #include <net/inet_frag.h>
26 static int tcp_retr1_max
= 255;
27 static int ip_local_port_range_min
[] = { 1, 1 };
28 static int ip_local_port_range_max
[] = { 65535, 65535 };
29 static int tcp_adv_win_scale_min
= -31;
30 static int tcp_adv_win_scale_max
= 31;
31 static int ip_ttl_min
= 1;
32 static int ip_ttl_max
= 255;
34 /* Update system visible IP port range */
35 static void set_local_port_range(int range
[2])
37 write_seqlock(&sysctl_local_ports
.lock
);
38 sysctl_local_ports
.range
[0] = range
[0];
39 sysctl_local_ports
.range
[1] = range
[1];
40 write_sequnlock(&sysctl_local_ports
.lock
);
43 /* Validate changes from /proc interface. */
44 static int ipv4_local_port_range(ctl_table
*table
, int write
,
46 size_t *lenp
, loff_t
*ppos
)
52 .maxlen
= sizeof(range
),
54 .extra1
= &ip_local_port_range_min
,
55 .extra2
= &ip_local_port_range_max
,
58 inet_get_local_port_range(range
, range
+ 1);
59 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
61 if (write
&& ret
== 0) {
62 if (range
[1] < range
[0])
65 set_local_port_range(range
);
71 static int proc_tcp_congestion_control(ctl_table
*ctl
, int write
,
72 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
74 char val
[TCP_CA_NAME_MAX
];
77 .maxlen
= TCP_CA_NAME_MAX
,
81 tcp_get_default_congestion_control(val
);
83 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
84 if (write
&& ret
== 0)
85 ret
= tcp_set_default_congestion_control(val
);
89 static int proc_tcp_available_congestion_control(ctl_table
*ctl
,
91 void __user
*buffer
, size_t *lenp
,
94 ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
, };
97 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
100 tcp_get_available_congestion_control(tbl
.data
, TCP_CA_BUF_MAX
);
101 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
106 static int proc_allowed_congestion_control(ctl_table
*ctl
,
108 void __user
*buffer
, size_t *lenp
,
111 ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
};
114 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
118 tcp_get_allowed_congestion_control(tbl
.data
, tbl
.maxlen
);
119 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
120 if (write
&& ret
== 0)
121 ret
= tcp_set_allowed_congestion_control(tbl
.data
);
126 static struct ctl_table ipv4_table
[] = {
128 .procname
= "tcp_timestamps",
129 .data
= &sysctl_tcp_timestamps
,
130 .maxlen
= sizeof(int),
132 .proc_handler
= proc_dointvec
135 .procname
= "tcp_window_scaling",
136 .data
= &sysctl_tcp_window_scaling
,
137 .maxlen
= sizeof(int),
139 .proc_handler
= proc_dointvec
142 .procname
= "tcp_sack",
143 .data
= &sysctl_tcp_sack
,
144 .maxlen
= sizeof(int),
146 .proc_handler
= proc_dointvec
149 .procname
= "tcp_retrans_collapse",
150 .data
= &sysctl_tcp_retrans_collapse
,
151 .maxlen
= sizeof(int),
153 .proc_handler
= proc_dointvec
156 .procname
= "ip_default_ttl",
157 .data
= &sysctl_ip_default_ttl
,
158 .maxlen
= sizeof(int),
160 .proc_handler
= proc_dointvec_minmax
,
161 .extra1
= &ip_ttl_min
,
162 .extra2
= &ip_ttl_max
,
165 .procname
= "ip_no_pmtu_disc",
166 .data
= &ipv4_config
.no_pmtu_disc
,
167 .maxlen
= sizeof(int),
169 .proc_handler
= proc_dointvec
172 .procname
= "ip_nonlocal_bind",
173 .data
= &sysctl_ip_nonlocal_bind
,
174 .maxlen
= sizeof(int),
176 .proc_handler
= proc_dointvec
179 .procname
= "tcp_syn_retries",
180 .data
= &sysctl_tcp_syn_retries
,
181 .maxlen
= sizeof(int),
183 .proc_handler
= proc_dointvec
186 .procname
= "tcp_synack_retries",
187 .data
= &sysctl_tcp_synack_retries
,
188 .maxlen
= sizeof(int),
190 .proc_handler
= proc_dointvec
193 .procname
= "tcp_max_orphans",
194 .data
= &sysctl_tcp_max_orphans
,
195 .maxlen
= sizeof(int),
197 .proc_handler
= proc_dointvec
200 .procname
= "tcp_max_tw_buckets",
201 .data
= &tcp_death_row
.sysctl_max_tw_buckets
,
202 .maxlen
= sizeof(int),
204 .proc_handler
= proc_dointvec
207 .procname
= "ip_dynaddr",
208 .data
= &sysctl_ip_dynaddr
,
209 .maxlen
= sizeof(int),
211 .proc_handler
= proc_dointvec
214 .procname
= "tcp_keepalive_time",
215 .data
= &sysctl_tcp_keepalive_time
,
216 .maxlen
= sizeof(int),
218 .proc_handler
= proc_dointvec_jiffies
,
221 .procname
= "tcp_keepalive_probes",
222 .data
= &sysctl_tcp_keepalive_probes
,
223 .maxlen
= sizeof(int),
225 .proc_handler
= proc_dointvec
228 .procname
= "tcp_keepalive_intvl",
229 .data
= &sysctl_tcp_keepalive_intvl
,
230 .maxlen
= sizeof(int),
232 .proc_handler
= proc_dointvec_jiffies
,
235 .procname
= "tcp_retries1",
236 .data
= &sysctl_tcp_retries1
,
237 .maxlen
= sizeof(int),
239 .proc_handler
= proc_dointvec_minmax
,
240 .extra2
= &tcp_retr1_max
243 .procname
= "tcp_retries2",
244 .data
= &sysctl_tcp_retries2
,
245 .maxlen
= sizeof(int),
247 .proc_handler
= proc_dointvec
250 .procname
= "tcp_fin_timeout",
251 .data
= &sysctl_tcp_fin_timeout
,
252 .maxlen
= sizeof(int),
254 .proc_handler
= proc_dointvec_jiffies
,
256 #ifdef CONFIG_SYN_COOKIES
258 .procname
= "tcp_syncookies",
259 .data
= &sysctl_tcp_syncookies
,
260 .maxlen
= sizeof(int),
262 .proc_handler
= proc_dointvec
266 .procname
= "tcp_tw_recycle",
267 .data
= &tcp_death_row
.sysctl_tw_recycle
,
268 .maxlen
= sizeof(int),
270 .proc_handler
= proc_dointvec
273 .procname
= "tcp_abort_on_overflow",
274 .data
= &sysctl_tcp_abort_on_overflow
,
275 .maxlen
= sizeof(int),
277 .proc_handler
= proc_dointvec
280 .procname
= "tcp_stdurg",
281 .data
= &sysctl_tcp_stdurg
,
282 .maxlen
= sizeof(int),
284 .proc_handler
= proc_dointvec
287 .procname
= "tcp_rfc1337",
288 .data
= &sysctl_tcp_rfc1337
,
289 .maxlen
= sizeof(int),
291 .proc_handler
= proc_dointvec
294 .procname
= "tcp_max_syn_backlog",
295 .data
= &sysctl_max_syn_backlog
,
296 .maxlen
= sizeof(int),
298 .proc_handler
= proc_dointvec
301 .procname
= "ip_local_port_range",
302 .data
= &sysctl_local_ports
.range
,
303 .maxlen
= sizeof(sysctl_local_ports
.range
),
305 .proc_handler
= ipv4_local_port_range
,
308 .procname
= "ip_local_reserved_ports",
309 .data
= NULL
, /* initialized in sysctl_ipv4_init */
312 .proc_handler
= proc_do_large_bitmap
,
314 #ifdef CONFIG_IP_MULTICAST
316 .procname
= "igmp_max_memberships",
317 .data
= &sysctl_igmp_max_memberships
,
318 .maxlen
= sizeof(int),
320 .proc_handler
= proc_dointvec
325 .procname
= "igmp_max_msf",
326 .data
= &sysctl_igmp_max_msf
,
327 .maxlen
= sizeof(int),
329 .proc_handler
= proc_dointvec
332 .procname
= "inet_peer_threshold",
333 .data
= &inet_peer_threshold
,
334 .maxlen
= sizeof(int),
336 .proc_handler
= proc_dointvec
339 .procname
= "inet_peer_minttl",
340 .data
= &inet_peer_minttl
,
341 .maxlen
= sizeof(int),
343 .proc_handler
= proc_dointvec_jiffies
,
346 .procname
= "inet_peer_maxttl",
347 .data
= &inet_peer_maxttl
,
348 .maxlen
= sizeof(int),
350 .proc_handler
= proc_dointvec_jiffies
,
353 .procname
= "inet_peer_gc_mintime",
354 .data
= &inet_peer_gc_mintime
,
355 .maxlen
= sizeof(int),
357 .proc_handler
= proc_dointvec_jiffies
,
360 .procname
= "inet_peer_gc_maxtime",
361 .data
= &inet_peer_gc_maxtime
,
362 .maxlen
= sizeof(int),
364 .proc_handler
= proc_dointvec_jiffies
,
367 .procname
= "tcp_orphan_retries",
368 .data
= &sysctl_tcp_orphan_retries
,
369 .maxlen
= sizeof(int),
371 .proc_handler
= proc_dointvec
374 .procname
= "tcp_fack",
375 .data
= &sysctl_tcp_fack
,
376 .maxlen
= sizeof(int),
378 .proc_handler
= proc_dointvec
381 .procname
= "tcp_reordering",
382 .data
= &sysctl_tcp_reordering
,
383 .maxlen
= sizeof(int),
385 .proc_handler
= proc_dointvec
388 .procname
= "tcp_ecn",
389 .data
= &sysctl_tcp_ecn
,
390 .maxlen
= sizeof(int),
392 .proc_handler
= proc_dointvec
395 .procname
= "tcp_dsack",
396 .data
= &sysctl_tcp_dsack
,
397 .maxlen
= sizeof(int),
399 .proc_handler
= proc_dointvec
402 .procname
= "tcp_mem",
403 .data
= &sysctl_tcp_mem
,
404 .maxlen
= sizeof(sysctl_tcp_mem
),
406 .proc_handler
= proc_doulongvec_minmax
409 .procname
= "tcp_wmem",
410 .data
= &sysctl_tcp_wmem
,
411 .maxlen
= sizeof(sysctl_tcp_wmem
),
413 .proc_handler
= proc_dointvec
416 .procname
= "tcp_rmem",
417 .data
= &sysctl_tcp_rmem
,
418 .maxlen
= sizeof(sysctl_tcp_rmem
),
420 .proc_handler
= proc_dointvec
423 .procname
= "tcp_app_win",
424 .data
= &sysctl_tcp_app_win
,
425 .maxlen
= sizeof(int),
427 .proc_handler
= proc_dointvec
430 .procname
= "tcp_adv_win_scale",
431 .data
= &sysctl_tcp_adv_win_scale
,
432 .maxlen
= sizeof(int),
434 .proc_handler
= proc_dointvec_minmax
,
435 .extra1
= &tcp_adv_win_scale_min
,
436 .extra2
= &tcp_adv_win_scale_max
,
439 .procname
= "tcp_tw_reuse",
440 .data
= &sysctl_tcp_tw_reuse
,
441 .maxlen
= sizeof(int),
443 .proc_handler
= proc_dointvec
446 .procname
= "tcp_frto",
447 .data
= &sysctl_tcp_frto
,
448 .maxlen
= sizeof(int),
450 .proc_handler
= proc_dointvec
453 .procname
= "tcp_frto_response",
454 .data
= &sysctl_tcp_frto_response
,
455 .maxlen
= sizeof(int),
457 .proc_handler
= proc_dointvec
460 .procname
= "tcp_low_latency",
461 .data
= &sysctl_tcp_low_latency
,
462 .maxlen
= sizeof(int),
464 .proc_handler
= proc_dointvec
467 .procname
= "tcp_no_metrics_save",
468 .data
= &sysctl_tcp_nometrics_save
,
469 .maxlen
= sizeof(int),
471 .proc_handler
= proc_dointvec
,
474 .procname
= "tcp_moderate_rcvbuf",
475 .data
= &sysctl_tcp_moderate_rcvbuf
,
476 .maxlen
= sizeof(int),
478 .proc_handler
= proc_dointvec
,
481 .procname
= "tcp_tso_win_divisor",
482 .data
= &sysctl_tcp_tso_win_divisor
,
483 .maxlen
= sizeof(int),
485 .proc_handler
= proc_dointvec
,
488 .procname
= "tcp_congestion_control",
490 .maxlen
= TCP_CA_NAME_MAX
,
491 .proc_handler
= proc_tcp_congestion_control
,
494 .procname
= "tcp_abc",
495 .data
= &sysctl_tcp_abc
,
496 .maxlen
= sizeof(int),
498 .proc_handler
= proc_dointvec
,
501 .procname
= "tcp_mtu_probing",
502 .data
= &sysctl_tcp_mtu_probing
,
503 .maxlen
= sizeof(int),
505 .proc_handler
= proc_dointvec
,
508 .procname
= "tcp_base_mss",
509 .data
= &sysctl_tcp_base_mss
,
510 .maxlen
= sizeof(int),
512 .proc_handler
= proc_dointvec
,
515 .procname
= "tcp_workaround_signed_windows",
516 .data
= &sysctl_tcp_workaround_signed_windows
,
517 .maxlen
= sizeof(int),
519 .proc_handler
= proc_dointvec
521 #ifdef CONFIG_NET_DMA
523 .procname
= "tcp_dma_copybreak",
524 .data
= &sysctl_tcp_dma_copybreak
,
525 .maxlen
= sizeof(int),
527 .proc_handler
= proc_dointvec
531 .procname
= "tcp_slow_start_after_idle",
532 .data
= &sysctl_tcp_slow_start_after_idle
,
533 .maxlen
= sizeof(int),
535 .proc_handler
= proc_dointvec
537 #ifdef CONFIG_NETLABEL
539 .procname
= "cipso_cache_enable",
540 .data
= &cipso_v4_cache_enabled
,
541 .maxlen
= sizeof(int),
543 .proc_handler
= proc_dointvec
,
546 .procname
= "cipso_cache_bucket_size",
547 .data
= &cipso_v4_cache_bucketsize
,
548 .maxlen
= sizeof(int),
550 .proc_handler
= proc_dointvec
,
553 .procname
= "cipso_rbm_optfmt",
554 .data
= &cipso_v4_rbm_optfmt
,
555 .maxlen
= sizeof(int),
557 .proc_handler
= proc_dointvec
,
560 .procname
= "cipso_rbm_strictvalid",
561 .data
= &cipso_v4_rbm_strictvalid
,
562 .maxlen
= sizeof(int),
564 .proc_handler
= proc_dointvec
,
566 #endif /* CONFIG_NETLABEL */
568 .procname
= "tcp_available_congestion_control",
569 .maxlen
= TCP_CA_BUF_MAX
,
571 .proc_handler
= proc_tcp_available_congestion_control
,
574 .procname
= "tcp_allowed_congestion_control",
575 .maxlen
= TCP_CA_BUF_MAX
,
577 .proc_handler
= proc_allowed_congestion_control
,
580 .procname
= "tcp_max_ssthresh",
581 .data
= &sysctl_tcp_max_ssthresh
,
582 .maxlen
= sizeof(int),
584 .proc_handler
= proc_dointvec
,
587 .procname
= "tcp_cookie_size",
588 .data
= &sysctl_tcp_cookie_size
,
589 .maxlen
= sizeof(int),
591 .proc_handler
= proc_dointvec
594 .procname
= "tcp_thin_linear_timeouts",
595 .data
= &sysctl_tcp_thin_linear_timeouts
,
596 .maxlen
= sizeof(int),
598 .proc_handler
= proc_dointvec
601 .procname
= "tcp_thin_dupack",
602 .data
= &sysctl_tcp_thin_dupack
,
603 .maxlen
= sizeof(int),
605 .proc_handler
= proc_dointvec
608 .procname
= "udp_mem",
609 .data
= &sysctl_udp_mem
,
610 .maxlen
= sizeof(sysctl_udp_mem
),
612 .proc_handler
= proc_doulongvec_minmax
,
615 .procname
= "udp_rmem_min",
616 .data
= &sysctl_udp_rmem_min
,
617 .maxlen
= sizeof(sysctl_udp_rmem_min
),
619 .proc_handler
= proc_dointvec_minmax
,
623 .procname
= "udp_wmem_min",
624 .data
= &sysctl_udp_wmem_min
,
625 .maxlen
= sizeof(sysctl_udp_wmem_min
),
627 .proc_handler
= proc_dointvec_minmax
,
633 static struct ctl_table ipv4_net_table
[] = {
635 .procname
= "icmp_echo_ignore_all",
636 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_all
,
637 .maxlen
= sizeof(int),
639 .proc_handler
= proc_dointvec
642 .procname
= "icmp_echo_ignore_broadcasts",
643 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_broadcasts
,
644 .maxlen
= sizeof(int),
646 .proc_handler
= proc_dointvec
649 .procname
= "icmp_ignore_bogus_error_responses",
650 .data
= &init_net
.ipv4
.sysctl_icmp_ignore_bogus_error_responses
,
651 .maxlen
= sizeof(int),
653 .proc_handler
= proc_dointvec
656 .procname
= "icmp_errors_use_inbound_ifaddr",
657 .data
= &init_net
.ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
,
658 .maxlen
= sizeof(int),
660 .proc_handler
= proc_dointvec
663 .procname
= "icmp_ratelimit",
664 .data
= &init_net
.ipv4
.sysctl_icmp_ratelimit
,
665 .maxlen
= sizeof(int),
667 .proc_handler
= proc_dointvec_ms_jiffies
,
670 .procname
= "icmp_ratemask",
671 .data
= &init_net
.ipv4
.sysctl_icmp_ratemask
,
672 .maxlen
= sizeof(int),
674 .proc_handler
= proc_dointvec
677 .procname
= "rt_cache_rebuild_count",
678 .data
= &init_net
.ipv4
.sysctl_rt_cache_rebuild_count
,
679 .maxlen
= sizeof(int),
681 .proc_handler
= proc_dointvec
686 struct ctl_path net_ipv4_ctl_path
[] = {
687 { .procname
= "net", },
688 { .procname
= "ipv4", },
691 EXPORT_SYMBOL_GPL(net_ipv4_ctl_path
);
693 static __net_init
int ipv4_sysctl_init_net(struct net
*net
)
695 struct ctl_table
*table
;
697 table
= ipv4_net_table
;
698 if (!net_eq(net
, &init_net
)) {
699 table
= kmemdup(table
, sizeof(ipv4_net_table
), GFP_KERNEL
);
704 &net
->ipv4
.sysctl_icmp_echo_ignore_all
;
706 &net
->ipv4
.sysctl_icmp_echo_ignore_broadcasts
;
708 &net
->ipv4
.sysctl_icmp_ignore_bogus_error_responses
;
710 &net
->ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
;
712 &net
->ipv4
.sysctl_icmp_ratelimit
;
714 &net
->ipv4
.sysctl_icmp_ratemask
;
716 &net
->ipv4
.sysctl_rt_cache_rebuild_count
;
719 net
->ipv4
.sysctl_rt_cache_rebuild_count
= 4;
721 net
->ipv4
.ipv4_hdr
= register_net_sysctl_table(net
,
722 net_ipv4_ctl_path
, table
);
723 if (net
->ipv4
.ipv4_hdr
== NULL
)
729 if (!net_eq(net
, &init_net
))
735 static __net_exit
void ipv4_sysctl_exit_net(struct net
*net
)
737 struct ctl_table
*table
;
739 table
= net
->ipv4
.ipv4_hdr
->ctl_table_arg
;
740 unregister_net_sysctl_table(net
->ipv4
.ipv4_hdr
);
744 static __net_initdata
struct pernet_operations ipv4_sysctl_ops
= {
745 .init
= ipv4_sysctl_init_net
,
746 .exit
= ipv4_sysctl_exit_net
,
749 static __init
int sysctl_ipv4_init(void)
751 struct ctl_table_header
*hdr
;
754 for (i
= ipv4_table
; i
->procname
; i
++) {
755 if (strcmp(i
->procname
, "ip_local_reserved_ports") == 0) {
756 i
->data
= sysctl_local_reserved_ports
;
763 hdr
= register_sysctl_paths(net_ipv4_ctl_path
, ipv4_table
);
767 if (register_pernet_subsys(&ipv4_sysctl_ops
)) {
768 unregister_sysctl_table(hdr
);
775 __initcall(sysctl_ipv4_init
);