2 * Copyright (c) 2007-2014 Nicira, Inc.
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of version 2 of the GNU General Public
6 * License as published by the Free Software Foundation.
8 * This program is distributed in the hope that it will be useful, but
9 * WITHOUT ANY WARRANTY; without even the implied warranty of
10 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
11 * General Public License for more details.
13 * You should have received a copy of the GNU General Public License
14 * along with this program; if not, write to the Free Software
15 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
21 #include "flow_netlink.h"
22 #include <linux/uaccess.h>
23 #include <linux/netdevice.h>
24 #include <linux/etherdevice.h>
25 #include <linux/if_ether.h>
26 #include <linux/if_vlan.h>
27 #include <net/llc_pdu.h>
28 #include <linux/kernel.h>
29 #include <linux/jhash.h>
30 #include <linux/jiffies.h>
31 #include <linux/llc.h>
32 #include <linux/module.h>
34 #include <linux/rcupdate.h>
35 #include <linux/cpumask.h>
36 #include <linux/if_arp.h>
38 #include <linux/ipv6.h>
39 #include <linux/sctp.h>
40 #include <linux/tcp.h>
41 #include <linux/udp.h>
42 #include <linux/icmp.h>
43 #include <linux/icmpv6.h>
44 #include <linux/rculist.h>
47 #include <net/ndisc.h>
49 #define TBL_MIN_BUCKETS 1024
50 #define REHASH_INTERVAL (10 * 60 * HZ)
52 static struct kmem_cache
*flow_cache
;
53 struct kmem_cache
*flow_stats_cache __read_mostly
;
55 static u16
range_n_bytes(const struct sw_flow_key_range
*range
)
57 return range
->end
- range
->start
;
60 void ovs_flow_mask_key(struct sw_flow_key
*dst
, const struct sw_flow_key
*src
,
61 bool full
, const struct sw_flow_mask
*mask
)
63 int start
= full
? 0 : mask
->range
.start
;
64 int len
= full
? sizeof *dst
: range_n_bytes(&mask
->range
);
65 const long *m
= (const long *)((const u8
*)&mask
->key
+ start
);
66 const long *s
= (const long *)((const u8
*)src
+ start
);
67 long *d
= (long *)((u8
*)dst
+ start
);
70 /* If 'full' is true then all of 'dst' is fully initialized. Otherwise,
71 * if 'full' is false the memory outside of the 'mask->range' is left
72 * uninitialized. This can be used as an optimization when further
73 * operations on 'dst' only use contents within 'mask->range'.
75 for (i
= 0; i
< len
; i
+= sizeof(long))
79 struct sw_flow
*ovs_flow_alloc(void)
82 struct flow_stats
*stats
;
84 flow
= kmem_cache_zalloc(flow_cache
, GFP_KERNEL
);
86 return ERR_PTR(-ENOMEM
);
88 flow
->stats_last_writer
= -1;
90 /* Initialize the default stat node. */
91 stats
= kmem_cache_alloc_node(flow_stats_cache
,
92 GFP_KERNEL
| __GFP_ZERO
,
93 node_online(0) ? 0 : NUMA_NO_NODE
);
97 spin_lock_init(&stats
->lock
);
99 RCU_INIT_POINTER(flow
->stats
[0], stats
);
103 kmem_cache_free(flow_cache
, flow
);
104 return ERR_PTR(-ENOMEM
);
107 int ovs_flow_tbl_count(const struct flow_table
*table
)
112 static struct flex_array
*alloc_buckets(unsigned int n_buckets
)
114 struct flex_array
*buckets
;
117 buckets
= flex_array_alloc(sizeof(struct hlist_head
),
118 n_buckets
, GFP_KERNEL
);
122 err
= flex_array_prealloc(buckets
, 0, n_buckets
, GFP_KERNEL
);
124 flex_array_free(buckets
);
128 for (i
= 0; i
< n_buckets
; i
++)
129 INIT_HLIST_HEAD((struct hlist_head
*)
130 flex_array_get(buckets
, i
));
135 static void flow_free(struct sw_flow
*flow
)
139 if (ovs_identifier_is_key(&flow
->id
))
140 kfree(flow
->id
.unmasked_key
);
142 ovs_nla_free_flow_actions((struct sw_flow_actions __force
*)flow
->sf_acts
);
143 /* We open code this to make sure cpu 0 is always considered */
144 for (cpu
= 0; cpu
< nr_cpu_ids
; cpu
= cpumask_next(cpu
, cpu_possible_mask
))
145 if (flow
->stats
[cpu
])
146 kmem_cache_free(flow_stats_cache
,
147 (struct flow_stats __force
*)flow
->stats
[cpu
]);
148 kmem_cache_free(flow_cache
, flow
);
151 static void rcu_free_flow_callback(struct rcu_head
*rcu
)
153 struct sw_flow
*flow
= container_of(rcu
, struct sw_flow
, rcu
);
158 void ovs_flow_free(struct sw_flow
*flow
, bool deferred
)
164 call_rcu(&flow
->rcu
, rcu_free_flow_callback
);
169 static void free_buckets(struct flex_array
*buckets
)
171 flex_array_free(buckets
);
175 static void __table_instance_destroy(struct table_instance
*ti
)
177 free_buckets(ti
->buckets
);
181 static struct table_instance
*table_instance_alloc(int new_size
)
183 struct table_instance
*ti
= kmalloc(sizeof(*ti
), GFP_KERNEL
);
188 ti
->buckets
= alloc_buckets(new_size
);
194 ti
->n_buckets
= new_size
;
196 ti
->keep_flows
= false;
197 get_random_bytes(&ti
->hash_seed
, sizeof(u32
));
202 int ovs_flow_tbl_init(struct flow_table
*table
)
204 struct table_instance
*ti
, *ufid_ti
;
206 ti
= table_instance_alloc(TBL_MIN_BUCKETS
);
211 ufid_ti
= table_instance_alloc(TBL_MIN_BUCKETS
);
215 rcu_assign_pointer(table
->ti
, ti
);
216 rcu_assign_pointer(table
->ufid_ti
, ufid_ti
);
217 INIT_LIST_HEAD(&table
->mask_list
);
218 table
->last_rehash
= jiffies
;
220 table
->ufid_count
= 0;
224 __table_instance_destroy(ti
);
228 static void flow_tbl_destroy_rcu_cb(struct rcu_head
*rcu
)
230 struct table_instance
*ti
= container_of(rcu
, struct table_instance
, rcu
);
232 __table_instance_destroy(ti
);
235 static void table_instance_destroy(struct table_instance
*ti
,
236 struct table_instance
*ufid_ti
,
248 for (i
= 0; i
< ti
->n_buckets
; i
++) {
249 struct sw_flow
*flow
;
250 struct hlist_head
*head
= flex_array_get(ti
->buckets
, i
);
251 struct hlist_node
*n
;
252 int ver
= ti
->node_ver
;
253 int ufid_ver
= ufid_ti
->node_ver
;
255 hlist_for_each_entry_safe(flow
, n
, head
, flow_table
.node
[ver
]) {
256 hlist_del_rcu(&flow
->flow_table
.node
[ver
]);
257 if (ovs_identifier_is_ufid(&flow
->id
))
258 hlist_del_rcu(&flow
->ufid_table
.node
[ufid_ver
]);
259 ovs_flow_free(flow
, deferred
);
265 call_rcu(&ti
->rcu
, flow_tbl_destroy_rcu_cb
);
266 call_rcu(&ufid_ti
->rcu
, flow_tbl_destroy_rcu_cb
);
268 __table_instance_destroy(ti
);
269 __table_instance_destroy(ufid_ti
);
273 /* No need for locking this function is called from RCU callback or
276 void ovs_flow_tbl_destroy(struct flow_table
*table
)
278 struct table_instance
*ti
= rcu_dereference_raw(table
->ti
);
279 struct table_instance
*ufid_ti
= rcu_dereference_raw(table
->ufid_ti
);
281 table_instance_destroy(ti
, ufid_ti
, false);
284 struct sw_flow
*ovs_flow_tbl_dump_next(struct table_instance
*ti
,
285 u32
*bucket
, u32
*last
)
287 struct sw_flow
*flow
;
288 struct hlist_head
*head
;
293 while (*bucket
< ti
->n_buckets
) {
295 head
= flex_array_get(ti
->buckets
, *bucket
);
296 hlist_for_each_entry_rcu(flow
, head
, flow_table
.node
[ver
]) {
311 static struct hlist_head
*find_bucket(struct table_instance
*ti
, u32 hash
)
313 hash
= jhash_1word(hash
, ti
->hash_seed
);
314 return flex_array_get(ti
->buckets
,
315 (hash
& (ti
->n_buckets
- 1)));
318 static void table_instance_insert(struct table_instance
*ti
,
319 struct sw_flow
*flow
)
321 struct hlist_head
*head
;
323 head
= find_bucket(ti
, flow
->flow_table
.hash
);
324 hlist_add_head_rcu(&flow
->flow_table
.node
[ti
->node_ver
], head
);
327 static void ufid_table_instance_insert(struct table_instance
*ti
,
328 struct sw_flow
*flow
)
330 struct hlist_head
*head
;
332 head
= find_bucket(ti
, flow
->ufid_table
.hash
);
333 hlist_add_head_rcu(&flow
->ufid_table
.node
[ti
->node_ver
], head
);
336 static void flow_table_copy_flows(struct table_instance
*old
,
337 struct table_instance
*new, bool ufid
)
342 old_ver
= old
->node_ver
;
343 new->node_ver
= !old_ver
;
345 /* Insert in new table. */
346 for (i
= 0; i
< old
->n_buckets
; i
++) {
347 struct sw_flow
*flow
;
348 struct hlist_head
*head
;
350 head
= flex_array_get(old
->buckets
, i
);
353 hlist_for_each_entry(flow
, head
,
354 ufid_table
.node
[old_ver
])
355 ufid_table_instance_insert(new, flow
);
357 hlist_for_each_entry(flow
, head
,
358 flow_table
.node
[old_ver
])
359 table_instance_insert(new, flow
);
362 old
->keep_flows
= true;
365 static struct table_instance
*table_instance_rehash(struct table_instance
*ti
,
366 int n_buckets
, bool ufid
)
368 struct table_instance
*new_ti
;
370 new_ti
= table_instance_alloc(n_buckets
);
374 flow_table_copy_flows(ti
, new_ti
, ufid
);
379 int ovs_flow_tbl_flush(struct flow_table
*flow_table
)
381 struct table_instance
*old_ti
, *new_ti
;
382 struct table_instance
*old_ufid_ti
, *new_ufid_ti
;
384 new_ti
= table_instance_alloc(TBL_MIN_BUCKETS
);
387 new_ufid_ti
= table_instance_alloc(TBL_MIN_BUCKETS
);
391 old_ti
= ovsl_dereference(flow_table
->ti
);
392 old_ufid_ti
= ovsl_dereference(flow_table
->ufid_ti
);
394 rcu_assign_pointer(flow_table
->ti
, new_ti
);
395 rcu_assign_pointer(flow_table
->ufid_ti
, new_ufid_ti
);
396 flow_table
->last_rehash
= jiffies
;
397 flow_table
->count
= 0;
398 flow_table
->ufid_count
= 0;
400 table_instance_destroy(old_ti
, old_ufid_ti
, true);
404 __table_instance_destroy(new_ti
);
408 static u32
flow_hash(const struct sw_flow_key
*key
,
409 const struct sw_flow_key_range
*range
)
411 int key_start
= range
->start
;
412 int key_end
= range
->end
;
413 const u32
*hash_key
= (const u32
*)((const u8
*)key
+ key_start
);
414 int hash_u32s
= (key_end
- key_start
) >> 2;
416 /* Make sure number of hash bytes are multiple of u32. */
417 BUILD_BUG_ON(sizeof(long) % sizeof(u32
));
419 return jhash2(hash_key
, hash_u32s
, 0);
422 static int flow_key_start(const struct sw_flow_key
*key
)
427 return rounddown(offsetof(struct sw_flow_key
, phy
),
431 static bool cmp_key(const struct sw_flow_key
*key1
,
432 const struct sw_flow_key
*key2
,
433 int key_start
, int key_end
)
435 const long *cp1
= (const long *)((const u8
*)key1
+ key_start
);
436 const long *cp2
= (const long *)((const u8
*)key2
+ key_start
);
440 for (i
= key_start
; i
< key_end
; i
+= sizeof(long))
441 diffs
|= *cp1
++ ^ *cp2
++;
446 static bool flow_cmp_masked_key(const struct sw_flow
*flow
,
447 const struct sw_flow_key
*key
,
448 const struct sw_flow_key_range
*range
)
450 return cmp_key(&flow
->key
, key
, range
->start
, range
->end
);
453 static bool ovs_flow_cmp_unmasked_key(const struct sw_flow
*flow
,
454 const struct sw_flow_match
*match
)
456 struct sw_flow_key
*key
= match
->key
;
457 int key_start
= flow_key_start(key
);
458 int key_end
= match
->range
.end
;
460 BUG_ON(ovs_identifier_is_ufid(&flow
->id
));
461 return cmp_key(flow
->id
.unmasked_key
, key
, key_start
, key_end
);
464 static struct sw_flow
*masked_flow_lookup(struct table_instance
*ti
,
465 const struct sw_flow_key
*unmasked
,
466 const struct sw_flow_mask
*mask
)
468 struct sw_flow
*flow
;
469 struct hlist_head
*head
;
471 struct sw_flow_key masked_key
;
473 ovs_flow_mask_key(&masked_key
, unmasked
, false, mask
);
474 hash
= flow_hash(&masked_key
, &mask
->range
);
475 head
= find_bucket(ti
, hash
);
476 hlist_for_each_entry_rcu(flow
, head
, flow_table
.node
[ti
->node_ver
]) {
477 if (flow
->mask
== mask
&& flow
->flow_table
.hash
== hash
&&
478 flow_cmp_masked_key(flow
, &masked_key
, &mask
->range
))
484 struct sw_flow
*ovs_flow_tbl_lookup_stats(struct flow_table
*tbl
,
485 const struct sw_flow_key
*key
,
488 struct table_instance
*ti
= rcu_dereference_ovsl(tbl
->ti
);
489 struct sw_flow_mask
*mask
;
490 struct sw_flow
*flow
;
493 list_for_each_entry_rcu(mask
, &tbl
->mask_list
, list
) {
495 flow
= masked_flow_lookup(ti
, key
, mask
);
496 if (flow
) /* Found */
502 struct sw_flow
*ovs_flow_tbl_lookup(struct flow_table
*tbl
,
503 const struct sw_flow_key
*key
)
505 u32 __always_unused n_mask_hit
;
507 return ovs_flow_tbl_lookup_stats(tbl
, key
, &n_mask_hit
);
510 struct sw_flow
*ovs_flow_tbl_lookup_exact(struct flow_table
*tbl
,
511 const struct sw_flow_match
*match
)
513 struct table_instance
*ti
= rcu_dereference_ovsl(tbl
->ti
);
514 struct sw_flow_mask
*mask
;
515 struct sw_flow
*flow
;
517 /* Always called under ovs-mutex. */
518 list_for_each_entry(mask
, &tbl
->mask_list
, list
) {
519 flow
= masked_flow_lookup(ti
, match
->key
, mask
);
520 if (flow
&& ovs_identifier_is_key(&flow
->id
) &&
521 ovs_flow_cmp_unmasked_key(flow
, match
))
527 static u32
ufid_hash(const struct sw_flow_id
*sfid
)
529 return jhash(sfid
->ufid
, sfid
->ufid_len
, 0);
532 static bool ovs_flow_cmp_ufid(const struct sw_flow
*flow
,
533 const struct sw_flow_id
*sfid
)
535 if (flow
->id
.ufid_len
!= sfid
->ufid_len
)
538 return !memcmp(flow
->id
.ufid
, sfid
->ufid
, sfid
->ufid_len
);
541 bool ovs_flow_cmp(const struct sw_flow
*flow
, const struct sw_flow_match
*match
)
543 if (ovs_identifier_is_ufid(&flow
->id
))
544 return flow_cmp_masked_key(flow
, match
->key
, &match
->range
);
546 return ovs_flow_cmp_unmasked_key(flow
, match
);
549 struct sw_flow
*ovs_flow_tbl_lookup_ufid(struct flow_table
*tbl
,
550 const struct sw_flow_id
*ufid
)
552 struct table_instance
*ti
= rcu_dereference_ovsl(tbl
->ufid_ti
);
553 struct sw_flow
*flow
;
554 struct hlist_head
*head
;
557 hash
= ufid_hash(ufid
);
558 head
= find_bucket(ti
, hash
);
559 hlist_for_each_entry_rcu(flow
, head
, ufid_table
.node
[ti
->node_ver
]) {
560 if (flow
->ufid_table
.hash
== hash
&&
561 ovs_flow_cmp_ufid(flow
, ufid
))
567 int ovs_flow_tbl_num_masks(const struct flow_table
*table
)
569 struct sw_flow_mask
*mask
;
572 list_for_each_entry(mask
, &table
->mask_list
, list
)
578 static struct table_instance
*table_instance_expand(struct table_instance
*ti
,
581 return table_instance_rehash(ti
, ti
->n_buckets
* 2, ufid
);
584 /* Remove 'mask' from the mask list, if it is not needed any more. */
585 static void flow_mask_remove(struct flow_table
*tbl
, struct sw_flow_mask
*mask
)
588 /* ovs-lock is required to protect mask-refcount and
592 BUG_ON(!mask
->ref_count
);
595 if (!mask
->ref_count
) {
596 list_del_rcu(&mask
->list
);
597 kfree_rcu(mask
, rcu
);
602 /* Must be called with OVS mutex held. */
603 void ovs_flow_tbl_remove(struct flow_table
*table
, struct sw_flow
*flow
)
605 struct table_instance
*ti
= ovsl_dereference(table
->ti
);
606 struct table_instance
*ufid_ti
= ovsl_dereference(table
->ufid_ti
);
608 BUG_ON(table
->count
== 0);
609 hlist_del_rcu(&flow
->flow_table
.node
[ti
->node_ver
]);
611 if (ovs_identifier_is_ufid(&flow
->id
)) {
612 hlist_del_rcu(&flow
->ufid_table
.node
[ufid_ti
->node_ver
]);
616 /* RCU delete the mask. 'flow->mask' is not NULLed, as it should be
617 * accessible as long as the RCU read lock is held.
619 flow_mask_remove(table
, flow
->mask
);
622 static struct sw_flow_mask
*mask_alloc(void)
624 struct sw_flow_mask
*mask
;
626 mask
= kmalloc(sizeof(*mask
), GFP_KERNEL
);
633 static bool mask_equal(const struct sw_flow_mask
*a
,
634 const struct sw_flow_mask
*b
)
636 const u8
*a_
= (const u8
*)&a
->key
+ a
->range
.start
;
637 const u8
*b_
= (const u8
*)&b
->key
+ b
->range
.start
;
639 return (a
->range
.end
== b
->range
.end
)
640 && (a
->range
.start
== b
->range
.start
)
641 && (memcmp(a_
, b_
, range_n_bytes(&a
->range
)) == 0);
644 static struct sw_flow_mask
*flow_mask_find(const struct flow_table
*tbl
,
645 const struct sw_flow_mask
*mask
)
647 struct list_head
*ml
;
649 list_for_each(ml
, &tbl
->mask_list
) {
650 struct sw_flow_mask
*m
;
651 m
= container_of(ml
, struct sw_flow_mask
, list
);
652 if (mask_equal(mask
, m
))
659 /* Add 'mask' into the mask list, if it is not already there. */
660 static int flow_mask_insert(struct flow_table
*tbl
, struct sw_flow
*flow
,
661 const struct sw_flow_mask
*new)
663 struct sw_flow_mask
*mask
;
664 mask
= flow_mask_find(tbl
, new);
666 /* Allocate a new mask if none exsits. */
670 mask
->key
= new->key
;
671 mask
->range
= new->range
;
672 list_add_rcu(&mask
->list
, &tbl
->mask_list
);
674 BUG_ON(!mask
->ref_count
);
682 /* Must be called with OVS mutex held. */
683 static void flow_key_insert(struct flow_table
*table
, struct sw_flow
*flow
)
685 struct table_instance
*new_ti
= NULL
;
686 struct table_instance
*ti
;
688 flow
->flow_table
.hash
= flow_hash(&flow
->key
, &flow
->mask
->range
);
689 ti
= ovsl_dereference(table
->ti
);
690 table_instance_insert(ti
, flow
);
693 /* Expand table, if necessary, to make room. */
694 if (table
->count
> ti
->n_buckets
)
695 new_ti
= table_instance_expand(ti
, false);
696 else if (time_after(jiffies
, table
->last_rehash
+ REHASH_INTERVAL
))
697 new_ti
= table_instance_rehash(ti
, ti
->n_buckets
, false);
700 rcu_assign_pointer(table
->ti
, new_ti
);
701 call_rcu(&ti
->rcu
, flow_tbl_destroy_rcu_cb
);
702 table
->last_rehash
= jiffies
;
706 /* Must be called with OVS mutex held. */
707 static void flow_ufid_insert(struct flow_table
*table
, struct sw_flow
*flow
)
709 struct table_instance
*ti
;
711 flow
->ufid_table
.hash
= ufid_hash(&flow
->id
);
712 ti
= ovsl_dereference(table
->ufid_ti
);
713 ufid_table_instance_insert(ti
, flow
);
716 /* Expand table, if necessary, to make room. */
717 if (table
->ufid_count
> ti
->n_buckets
) {
718 struct table_instance
*new_ti
;
720 new_ti
= table_instance_expand(ti
, true);
722 rcu_assign_pointer(table
->ufid_ti
, new_ti
);
723 call_rcu(&ti
->rcu
, flow_tbl_destroy_rcu_cb
);
728 /* Must be called with OVS mutex held. */
729 int ovs_flow_tbl_insert(struct flow_table
*table
, struct sw_flow
*flow
,
730 const struct sw_flow_mask
*mask
)
734 err
= flow_mask_insert(table
, flow
, mask
);
737 flow_key_insert(table
, flow
);
738 if (ovs_identifier_is_ufid(&flow
->id
))
739 flow_ufid_insert(table
, flow
);
744 /* Initializes the flow module.
745 * Returns zero if successful or a negative error code. */
746 int ovs_flow_init(void)
748 BUILD_BUG_ON(__alignof__(struct sw_flow_key
) % __alignof__(long));
749 BUILD_BUG_ON(sizeof(struct sw_flow_key
) % sizeof(long));
751 flow_cache
= kmem_cache_create("sw_flow", sizeof(struct sw_flow
)
753 * sizeof(struct flow_stats
*)),
755 if (flow_cache
== NULL
)
759 = kmem_cache_create("sw_flow_stats", sizeof(struct flow_stats
),
760 0, SLAB_HWCACHE_ALIGN
, NULL
);
761 if (flow_stats_cache
== NULL
) {
762 kmem_cache_destroy(flow_cache
);
770 /* Uninitializes the flow module. */
771 void ovs_flow_exit(void)
773 kmem_cache_destroy(flow_stats_cache
);
774 kmem_cache_destroy(flow_cache
);