1 // SPDX-License-Identifier: GPL-2.0
4 #include <linux/if_ether.h>
5 #include <linux/stddef.h>
8 #include <linux/pkt_cls.h>
10 #include <bpf/bpf_helpers.h>
11 #include <bpf/bpf_endian.h>
13 /* the maximum delay we are willing to add (drop packets beyond that) */
14 #define TIME_HORIZON_NS (2000 * 1000 * 1000)
15 #define NS_PER_SEC 1000000000
16 #define ECN_HORIZON_NS 5000000
17 #define THROTTLE_RATE_BPS (5 * 1000 * 1000)
19 /* flow_key => last_tstamp timestamp used */
20 struct bpf_map_def
SEC("maps") flow_map
= {
21 .type
= BPF_MAP_TYPE_HASH
,
22 .key_size
= sizeof(uint32_t),
23 .value_size
= sizeof(uint64_t),
27 static inline int throttle_flow(struct __sk_buff
*skb
)
30 uint64_t *last_tstamp
= bpf_map_lookup_elem(&flow_map
, &key
);
31 uint64_t delay_ns
= ((uint64_t)skb
->len
) * NS_PER_SEC
/
33 uint64_t now
= bpf_ktime_get_ns();
34 uint64_t tstamp
, next_tstamp
= 0;
37 next_tstamp
= *last_tstamp
+ delay_ns
;
43 /* should we throttle? */
44 if (next_tstamp
<= tstamp
) {
45 if (bpf_map_update_elem(&flow_map
, &key
, &tstamp
, BPF_ANY
))
50 /* do not queue past the time horizon */
51 if (next_tstamp
- now
>= TIME_HORIZON_NS
)
54 /* set ecn bit, if needed */
55 if (next_tstamp
- now
>= ECN_HORIZON_NS
)
56 bpf_skb_ecn_set_ce(skb
);
58 if (bpf_map_update_elem(&flow_map
, &key
, &next_tstamp
, BPF_EXIST
))
60 skb
->tstamp
= next_tstamp
;
65 static inline int handle_tcp(struct __sk_buff
*skb
, struct tcphdr
*tcp
)
67 void *data_end
= (void *)(long)skb
->data_end
;
69 /* drop malformed packets */
70 if ((void *)(tcp
+ 1) > data_end
)
73 if (tcp
->dest
== bpf_htons(9000))
74 return throttle_flow(skb
);
79 static inline int handle_ipv4(struct __sk_buff
*skb
)
81 void *data_end
= (void *)(long)skb
->data_end
;
82 void *data
= (void *)(long)skb
->data
;
86 /* drop malformed packets */
87 if (data
+ sizeof(struct ethhdr
) > data_end
)
89 iph
= (struct iphdr
*)(data
+ sizeof(struct ethhdr
));
90 if ((void *)(iph
+ 1) > data_end
)
93 if (((void *)iph
) + ihl
> data_end
)
96 if (iph
->protocol
== IPPROTO_TCP
)
97 return handle_tcp(skb
, (struct tcphdr
*)(((void *)iph
) + ihl
));
102 SEC("cls_test") int tc_prog(struct __sk_buff
*skb
)
104 if (skb
->protocol
== bpf_htons(ETH_P_IP
))
105 return handle_ipv4(skb
);
110 char __license
[] SEC("license") = "GPL";