VirtualBox

source: vbox/trunk/src/VBox/HostDrivers/VBoxNetFlt/linux/VBoxNetFlt-linux.c@ 62761

Last change on this file since 62761 was 62490, checked in by vboxsync, 8 years ago

(C) 2016
  • Property svn:eol-style set to native
  • Property svn:keywords set to Author Date Id Revision
File size: 83.4 KB
Line 
1/* $Id: VBoxNetFlt-linux.c 62490 2016-07-22 18:41:49Z vboxsync $ */
2/** @file
3 * VBoxNetFlt - Network Filter Driver (Host), Linux Specific Code.
4 */
5
6/*
7 * Copyright (C) 2006-2016 Oracle Corporation
8 *
9 * This file is part of VirtualBox Open Source Edition (OSE), as
10 * available from http://www.virtualbox.org. This file is free software;
11 * you can redistribute it and/or modify it under the terms of the GNU
12 * General Public License (GPL) as published by the Free Software
13 * Foundation, in version 2 as it comes in the "COPYING" file of the
14 * VirtualBox OSE distribution. VirtualBox OSE is distributed in the
15 * hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
16 */
17
18
19/*********************************************************************************************************************************
20* Header Files *
21*********************************************************************************************************************************/
22#define LOG_GROUP LOG_GROUP_NET_FLT_DRV
23#define VBOXNETFLT_LINUX_NO_XMIT_QUEUE
24#include "the-linux-kernel.h"
25#include "version-generated.h"
26#include "revision-generated.h"
27#include "product-generated.h"
28#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 24)
29#include <linux/nsproxy.h>
30#endif
31#include <linux/netdevice.h>
32#include <linux/etherdevice.h>
33#include <linux/rtnetlink.h>
34#include <linux/miscdevice.h>
35#include <linux/inetdevice.h>
36#include <linux/in.h>
37#include <linux/ip.h>
38#include <linux/if_vlan.h>
39#if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 5, 0)
40#include <uapi/linux/pkt_cls.h>
41#endif
42#include <net/ipv6.h>
43#include <net/if_inet6.h>
44#include <net/addrconf.h>
45
46#include <VBox/log.h>
47#include <VBox/err.h>
48#include <VBox/intnetinline.h>
49#include <VBox/vmm/pdmnetinline.h>
50#include <VBox/param.h>
51#include <iprt/alloca.h>
52#include <iprt/assert.h>
53#include <iprt/spinlock.h>
54#include <iprt/semaphore.h>
55#include <iprt/initterm.h>
56#include <iprt/process.h>
57#include <iprt/mem.h>
58#include <iprt/net.h>
59#include <iprt/log.h>
60#include <iprt/mp.h>
61#include <iprt/mem.h>
62#include <iprt/time.h>
63
64#define VBOXNETFLT_OS_SPECFIC 1
65#include "../VBoxNetFltInternal.h"
66
67typedef struct VBOXNETFLTNOTIFIER {
68 struct notifier_block Notifier;
69 PVBOXNETFLTINS pThis;
70} VBOXNETFLTNOTIFIER;
71typedef struct VBOXNETFLTNOTIFIER *PVBOXNETFLTNOTIFIER;
72
73
74/*********************************************************************************************************************************
75* Defined Constants And Macros *
76*********************************************************************************************************************************/
77#define VBOX_FLT_NB_TO_INST(pNB) RT_FROM_MEMBER(pNB, VBOXNETFLTINS, u.s.Notifier)
78#define VBOX_FLT_PT_TO_INST(pPT) RT_FROM_MEMBER(pPT, VBOXNETFLTINS, u.s.PacketType)
79#ifndef VBOXNETFLT_LINUX_NO_XMIT_QUEUE
80# define VBOX_FLT_XT_TO_INST(pXT) RT_FROM_MEMBER(pXT, VBOXNETFLTINS, u.s.XmitTask)
81#endif
82
83#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 11, 0)
84# define VBOX_NETDEV_NOTIFIER_INFO_TO_DEV(ptr) netdev_notifier_info_to_dev(ptr)
85#else
86# define VBOX_NETDEV_NOTIFIER_INFO_TO_DEV(ptr) ((struct net_device *)ptr)
87#endif
88
89#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 34)
90# define VBOX_NETDEV_NAME(dev) netdev_name(dev)
91#else
92# define VBOX_NETDEV_NAME(dev) ((dev)->reg_state != NETREG_REGISTERED ? "(unregistered net_device)" : (dev)->name)
93#endif
94
95#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 25)
96# define VBOX_IPV4_IS_LOOPBACK(addr) ipv4_is_loopback(addr)
97# define VBOX_IPV4_IS_LINKLOCAL_169(addr) ipv4_is_linklocal_169(addr)
98#else
99# define VBOX_IPV4_IS_LOOPBACK(addr) ((addr & htonl(IN_CLASSA_NET)) == htonl(0x7f000000))
100# define VBOX_IPV4_IS_LINKLOCAL_169(addr) ((addr & htonl(IN_CLASSB_NET)) == htonl(0xa9fe0000))
101#endif
102
103#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 22)
104# define VBOX_SKB_RESET_NETWORK_HDR(skb) skb_reset_network_header(skb)
105# define VBOX_SKB_RESET_MAC_HDR(skb) skb_reset_mac_header(skb)
106#else
107# define VBOX_SKB_RESET_NETWORK_HDR(skb) skb->nh.raw = skb->data
108# define VBOX_SKB_RESET_MAC_HDR(skb) skb->mac.raw = skb->data
109#endif
110
111#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 19)
112# define VBOX_SKB_CHECKSUM_HELP(skb) skb_checksum_help(skb)
113#else
114# define CHECKSUM_PARTIAL CHECKSUM_HW
115# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 10)
116# define VBOX_SKB_CHECKSUM_HELP(skb) skb_checksum_help(skb, 0)
117# else
118# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 7)
119# define VBOX_SKB_CHECKSUM_HELP(skb) skb_checksum_help(&skb, 0)
120# else
121# define VBOX_SKB_CHECKSUM_HELP(skb) (!skb_checksum_help(skb))
122# endif
123/* Versions prior 2.6.10 use stats for both bstats and qstats */
124# define bstats stats
125# define qstats stats
126# endif
127#endif
128
129#if LINUX_VERSION_CODE >= KERNEL_VERSION(3, 20, 0)
130# define VBOX_HAVE_SKB_VLAN
131#else
132# ifdef RHEL_RELEASE_CODE
133# if (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(7, 2) && RHEL_RELEASE_CODE < RHEL_RELEASE_VERSION(8, 0)) || \
134 (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(6, 8) && RHEL_RELEASE_CODE < RHEL_RELEASE_VERSION(7, 0))
135# define VBOX_HAVE_SKB_VLAN
136# endif
137# endif
138#endif
139
140#ifdef VBOX_HAVE_SKB_VLAN
141# define vlan_tx_tag_get(skb) skb_vlan_tag_get(skb)
142# define vlan_tx_tag_present(skb) skb_vlan_tag_present(skb)
143#endif
144
145#ifndef NET_IP_ALIGN
146# define NET_IP_ALIGN 2
147#endif
148
149#if 0
150/** Create scatter / gather segments for fragments. When not used, we will
151 * linearize the socket buffer before creating the internal networking SG. */
152# define VBOXNETFLT_SG_SUPPORT 1
153#endif
154
155#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 18)
156
157/** Indicates that the linux kernel may send us GSO frames. */
158# define VBOXNETFLT_WITH_GSO 1
159
160/** This enables or disables the transmitting of GSO frame from the internal
161 * network and to the host. */
162# define VBOXNETFLT_WITH_GSO_XMIT_HOST 1
163
164# if 0 /** @todo This is currently disable because it causes performance loss of 5-10%. */
165/** This enables or disables the transmitting of GSO frame from the internal
166 * network and to the wire. */
167# define VBOXNETFLT_WITH_GSO_XMIT_WIRE 1
168# endif
169
170/** This enables or disables the forwarding/flooding of GSO frame from the host
171 * to the internal network. */
172# define VBOXNETFLT_WITH_GSO_RECV 1
173
174#endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 18) */
175
176#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 29)
177/** This enables or disables handling of GSO frames coming from the wire (GRO). */
178# define VBOXNETFLT_WITH_GRO 1
179#endif
180
181/*
182 * GRO support was backported to RHEL 5.4
183 */
184#ifdef RHEL_RELEASE_CODE
185# if RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(5, 4)
186# define VBOXNETFLT_WITH_GRO 1
187# endif
188#endif
189
190
191/*********************************************************************************************************************************
192* Internal Functions *
193*********************************************************************************************************************************/
194static int VBoxNetFltLinuxInit(void);
195static void VBoxNetFltLinuxUnload(void);
196static void vboxNetFltLinuxForwardToIntNet(PVBOXNETFLTINS pThis, struct sk_buff *pBuf);
197
198
199/*********************************************************************************************************************************
200* Global Variables *
201*********************************************************************************************************************************/
202/**
203 * The (common) global data.
204 */
205static VBOXNETFLTGLOBALS g_VBoxNetFltGlobals;
206
207module_init(VBoxNetFltLinuxInit);
208module_exit(VBoxNetFltLinuxUnload);
209
210MODULE_AUTHOR(VBOX_VENDOR);
211MODULE_DESCRIPTION(VBOX_PRODUCT " Network Filter Driver");
212MODULE_LICENSE("GPL");
213#ifdef MODULE_VERSION
214MODULE_VERSION(VBOX_VERSION_STRING " r" RT_XSTR(VBOX_SVN_REV) " (" RT_XSTR(INTNETTRUNKIFPORT_VERSION) ")");
215#endif
216
217
218#if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 12) && defined(LOG_ENABLED)
219unsigned dev_get_flags(const struct net_device *dev)
220{
221 unsigned flags;
222
223 flags = (dev->flags & ~(IFF_PROMISC |
224 IFF_ALLMULTI |
225 IFF_RUNNING)) |
226 (dev->gflags & (IFF_PROMISC |
227 IFF_ALLMULTI));
228
229 if (netif_running(dev) && netif_carrier_ok(dev))
230 flags |= IFF_RUNNING;
231
232 return flags;
233}
234#endif /* LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 12) */
235
236
237/**
238 * Initialize module.
239 *
240 * @returns appropriate status code.
241 */
242static int __init VBoxNetFltLinuxInit(void)
243{
244 int rc;
245 /*
246 * Initialize IPRT.
247 */
248 rc = RTR0Init(0);
249 if (RT_SUCCESS(rc))
250 {
251 Log(("VBoxNetFltLinuxInit\n"));
252
253 /*
254 * Initialize the globals and connect to the support driver.
255 *
256 * This will call back vboxNetFltOsOpenSupDrv (and maybe vboxNetFltOsCloseSupDrv)
257 * for establishing the connect to the support driver.
258 */
259 memset(&g_VBoxNetFltGlobals, 0, sizeof(g_VBoxNetFltGlobals));
260 rc = vboxNetFltInitGlobalsAndIdc(&g_VBoxNetFltGlobals);
261 if (RT_SUCCESS(rc))
262 {
263 LogRel(("VBoxNetFlt: Successfully started.\n"));
264 return 0;
265 }
266
267 LogRel(("VBoxNetFlt: failed to initialize device extension (rc=%d)\n", rc));
268 RTR0Term();
269 }
270 else
271 LogRel(("VBoxNetFlt: failed to initialize IPRT (rc=%d)\n", rc));
272
273 memset(&g_VBoxNetFltGlobals, 0, sizeof(g_VBoxNetFltGlobals));
274 return -RTErrConvertToErrno(rc);
275}
276
277
278/**
279 * Unload the module.
280 *
281 * @todo We have to prevent this if we're busy!
282 */
283static void __exit VBoxNetFltLinuxUnload(void)
284{
285 int rc;
286 Log(("VBoxNetFltLinuxUnload\n"));
287 Assert(vboxNetFltCanUnload(&g_VBoxNetFltGlobals));
288
289 /*
290 * Undo the work done during start (in reverse order).
291 */
292 rc = vboxNetFltTryDeleteIdcAndGlobals(&g_VBoxNetFltGlobals);
293 AssertRC(rc); NOREF(rc);
294
295 RTR0Term();
296
297 memset(&g_VBoxNetFltGlobals, 0, sizeof(g_VBoxNetFltGlobals));
298
299 Log(("VBoxNetFltLinuxUnload - done\n"));
300}
301
302
303/**
304 * We filter traffic from the host to the internal network
305 * before it reaches the NIC driver.
306 *
307 * The current code uses a very ugly hack overriding hard_start_xmit
308 * callback in the device structure, but it has been shown to give us a
309 * performance boost of 60-100% though. Eventually we have to find some
310 * less hacky way of getting this job done.
311 */
312#define VBOXNETFLT_WITH_HOST2WIRE_FILTER
313
314#ifdef VBOXNETFLT_WITH_HOST2WIRE_FILTER
315
316# if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 29)
317
318# include <linux/ethtool.h>
319
320typedef struct ethtool_ops OVR_OPSTYPE;
321# define OVR_OPS ethtool_ops
322# define OVR_XMIT pfnStartXmit
323
324# else /* LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 29) */
325
326typedef struct net_device_ops OVR_OPSTYPE;
327# define OVR_OPS netdev_ops
328# define OVR_XMIT pOrgOps->ndo_start_xmit
329
330# endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 29) */
331
332/**
333 * The overridden net_device_ops of the device we're attached to.
334 *
335 * As there is no net_device_ops structure in pre-2.6.29 kernels we override
336 * ethtool_ops instead along with hard_start_xmit callback in net_device
337 * structure.
338 *
339 * This is a very dirty hack that was created to explore how much we can improve
340 * the host to guest transfers by not CC'ing the NIC. It turns out to be
341 * the only way to filter outgoing packets for devices without TX queue.
342 */
343typedef struct VBoxNetDeviceOpsOverride
344{
345 /** Our overridden ops. */
346 OVR_OPSTYPE Ops;
347 /** Magic word. */
348 uint32_t u32Magic;
349 /** Pointer to the original ops. */
350 OVR_OPSTYPE const *pOrgOps;
351# if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 29)
352 /** Pointer to the original hard_start_xmit function. */
353 int (*pfnStartXmit)(struct sk_buff *pSkb, struct net_device *pDev);
354# endif /* LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 29) */
355 /** Pointer to the net filter instance. */
356 PVBOXNETFLTINS pVBoxNetFlt;
357 /** The number of filtered packages. */
358 uint64_t cFiltered;
359 /** The total number of packets */
360 uint64_t cTotal;
361} VBOXNETDEVICEOPSOVERRIDE, *PVBOXNETDEVICEOPSOVERRIDE;
362/** VBOXNETDEVICEOPSOVERRIDE::u32Magic value. */
363#define VBOXNETDEVICEOPSOVERRIDE_MAGIC UINT32_C(0x00c0ffee)
364
365/**
366 * ndo_start_xmit wrapper that drops packets that shouldn't go to the wire
367 * because they belong on the internal network.
368 *
369 * @returns NETDEV_TX_XXX.
370 * @param pSkb The socket buffer to transmit.
371 * @param pDev The net device.
372 */
373static int vboxNetFltLinuxStartXmitFilter(struct sk_buff *pSkb, struct net_device *pDev)
374{
375 PVBOXNETDEVICEOPSOVERRIDE pOverride = (PVBOXNETDEVICEOPSOVERRIDE)pDev->OVR_OPS;
376 uint8_t abHdrBuf[sizeof(RTNETETHERHDR) + sizeof(uint32_t) + RTNETIPV4_MIN_LEN];
377 PCRTNETETHERHDR pEtherHdr;
378 PINTNETTRUNKSWPORT pSwitchPort;
379 uint32_t cbHdrs;
380
381
382 /*
383 * Validate the override structure.
384 *
385 * Note! We're racing vboxNetFltLinuxUnhookDev here. If this was supposed
386 * to be production quality code, we would have to be much more
387 * careful here and avoid the race.
388 */
389 if ( !VALID_PTR(pOverride)
390 || pOverride->u32Magic != VBOXNETDEVICEOPSOVERRIDE_MAGIC
391# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 29)
392 || !VALID_PTR(pOverride->pOrgOps)
393# endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 29) */
394 )
395 {
396 printk("vboxNetFltLinuxStartXmitFilter: bad override %p\n", pOverride);
397 dev_kfree_skb(pSkb);
398 return NETDEV_TX_OK;
399 }
400 pOverride->cTotal++;
401
402 /*
403 * Do the filtering base on the default OUI of our virtual NICs
404 *
405 * Note! In a real solution, we would ask the switch whether the
406 * destination MAC is 100% to be on the internal network and then
407 * drop it.
408 */
409 cbHdrs = skb_headlen(pSkb);
410 cbHdrs = RT_MIN(cbHdrs, sizeof(abHdrBuf));
411 pEtherHdr = (PCRTNETETHERHDR)skb_header_pointer(pSkb, 0, cbHdrs, &abHdrBuf[0]);
412 if ( pEtherHdr
413 && VALID_PTR(pOverride->pVBoxNetFlt)
414 && (pSwitchPort = pOverride->pVBoxNetFlt->pSwitchPort) != NULL
415 && VALID_PTR(pSwitchPort)
416 && cbHdrs >= 6)
417 {
418 INTNETSWDECISION enmDecision;
419
420 /** @todo consider reference counting, etc. */
421 enmDecision = pSwitchPort->pfnPreRecv(pSwitchPort, pEtherHdr, cbHdrs, INTNETTRUNKDIR_HOST);
422 if (enmDecision == INTNETSWDECISION_INTNET)
423 {
424 dev_kfree_skb(pSkb);
425 pOverride->cFiltered++;
426 return NETDEV_TX_OK;
427 }
428 }
429
430 return pOverride->OVR_XMIT(pSkb, pDev);
431}
432
433/**
434 * Hooks the device ndo_start_xmit operation of the device.
435 *
436 * @param pThis The net filter instance.
437 * @param pDev The net device.
438 */
439static void vboxNetFltLinuxHookDev(PVBOXNETFLTINS pThis, struct net_device *pDev)
440{
441 PVBOXNETDEVICEOPSOVERRIDE pOverride;
442
443 /* Cancel override if ethtool_ops is missing (host-only case, @bugref{5712}) */
444 if (!VALID_PTR(pDev->OVR_OPS))
445 return;
446 pOverride = RTMemAlloc(sizeof(*pOverride));
447 if (!pOverride)
448 return;
449 pOverride->pOrgOps = pDev->OVR_OPS;
450 pOverride->Ops = *pDev->OVR_OPS;
451# if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 29)
452 pOverride->pfnStartXmit = pDev->hard_start_xmit;
453# else /* LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 29) */
454 pOverride->Ops.ndo_start_xmit = vboxNetFltLinuxStartXmitFilter;
455# endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 29) */
456 pOverride->u32Magic = VBOXNETDEVICEOPSOVERRIDE_MAGIC;
457 pOverride->cTotal = 0;
458 pOverride->cFiltered = 0;
459 pOverride->pVBoxNetFlt = pThis;
460
461 RTSpinlockAcquire(pThis->hSpinlock); /* (this isn't necessary, but so what) */
462 ASMAtomicWritePtr((void * volatile *)&pDev->OVR_OPS, pOverride);
463# if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 29)
464 ASMAtomicXchgPtr((void * volatile *)&pDev->hard_start_xmit, vboxNetFltLinuxStartXmitFilter);
465# endif /* LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 29) */
466 RTSpinlockRelease(pThis->hSpinlock);
467}
468
469/**
470 * Undos what vboxNetFltLinuxHookDev did.
471 *
472 * @param pThis The net filter instance.
473 * @param pDev The net device. Can be NULL, in which case
474 * we'll try retrieve it from @a pThis.
475 */
476static void vboxNetFltLinuxUnhookDev(PVBOXNETFLTINS pThis, struct net_device *pDev)
477{
478 PVBOXNETDEVICEOPSOVERRIDE pOverride;
479
480 RTSpinlockAcquire(pThis->hSpinlock);
481 if (!pDev)
482 pDev = ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *);
483 if (VALID_PTR(pDev))
484 {
485 pOverride = (PVBOXNETDEVICEOPSOVERRIDE)pDev->OVR_OPS;
486 if ( VALID_PTR(pOverride)
487 && pOverride->u32Magic == VBOXNETDEVICEOPSOVERRIDE_MAGIC
488 && VALID_PTR(pOverride->pOrgOps)
489 )
490 {
491# if LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 29)
492 ASMAtomicWritePtr((void * volatile *)&pDev->hard_start_xmit, pOverride->pfnStartXmit);
493# endif /* LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 29) */
494 ASMAtomicWritePtr((void const * volatile *)&pDev->OVR_OPS, pOverride->pOrgOps);
495 ASMAtomicWriteU32(&pOverride->u32Magic, 0);
496 }
497 else
498 pOverride = NULL;
499 }
500 else
501 pOverride = NULL;
502 RTSpinlockRelease(pThis->hSpinlock);
503
504 if (pOverride)
505 {
506 printk("vboxnetflt: %llu out of %llu packets were not sent (directed to host)\n", pOverride->cFiltered, pOverride->cTotal);
507 RTMemFree(pOverride);
508 }
509}
510
511#endif /* VBOXNETFLT_WITH_HOST2WIRE_FILTER */
512
513
514/**
515 * Reads and retains the host interface handle.
516 *
517 * @returns The handle, NULL if detached.
518 * @param pThis
519 */
520DECLINLINE(struct net_device *) vboxNetFltLinuxRetainNetDev(PVBOXNETFLTINS pThis)
521{
522#if 0
523 struct net_device *pDev = NULL;
524
525 Log(("vboxNetFltLinuxRetainNetDev\n"));
526 /*
527 * Be careful here to avoid problems racing the detached callback.
528 */
529 RTSpinlockAcquire(pThis->hSpinlock);
530 if (!ASMAtomicUoReadBool(&pThis->fDisconnectedFromHost))
531 {
532 pDev = (struct net_device *)ASMAtomicUoReadPtr((void * volatile *)&pThis->u.s.pDev);
533 if (pDev)
534 {
535 dev_hold(pDev);
536 Log(("vboxNetFltLinuxRetainNetDev: Device %p(%s) retained. ref=%d\n",
537 pDev, pDev->name,
538#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 37)
539 netdev_refcnt_read(pDev)
540#else
541 atomic_read(&pDev->refcnt)
542#endif
543 ));
544 }
545 }
546 RTSpinlockRelease(pThis->hSpinlock);
547
548 Log(("vboxNetFltLinuxRetainNetDev - done\n"));
549 return pDev;
550#else
551 return ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *);
552#endif
553}
554
555
556/**
557 * Release the host interface handle previously retained
558 * by vboxNetFltLinuxRetainNetDev.
559 *
560 * @param pThis The instance.
561 * @param pDev The vboxNetFltLinuxRetainNetDev
562 * return value, NULL is fine.
563 */
564DECLINLINE(void) vboxNetFltLinuxReleaseNetDev(PVBOXNETFLTINS pThis, struct net_device *pDev)
565{
566#if 0
567 Log(("vboxNetFltLinuxReleaseNetDev\n"));
568 NOREF(pThis);
569 if (pDev)
570 {
571 dev_put(pDev);
572 Log(("vboxNetFltLinuxReleaseNetDev: Device %p(%s) released. ref=%d\n",
573 pDev, pDev->name,
574#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 37)
575 netdev_refcnt_read(pDev)
576#else
577 atomic_read(&pDev->refcnt)
578#endif
579 ));
580 }
581 Log(("vboxNetFltLinuxReleaseNetDev - done\n"));
582#endif
583}
584
585#define VBOXNETFLT_CB_TAG(skb) (0xA1C90000 | (skb->dev->ifindex & 0xFFFF))
586#define VBOXNETFLT_SKB_TAG(skb) (*(uint32_t*)&((skb)->cb[sizeof((skb)->cb)-sizeof(uint32_t)]))
587
588/**
589 * Checks whether this is an mbuf created by vboxNetFltLinuxMBufFromSG,
590 * i.e. a buffer which we're pushing and should be ignored by the filter callbacks.
591 *
592 * @returns true / false accordingly.
593 * @param pBuf The sk_buff.
594 */
595DECLINLINE(bool) vboxNetFltLinuxSkBufIsOur(struct sk_buff *pBuf)
596{
597 return VBOXNETFLT_SKB_TAG(pBuf) == VBOXNETFLT_CB_TAG(pBuf);
598}
599
600
601/**
602 * Checks whether this SG list contains a GSO packet.
603 *
604 * @returns true / false accordingly.
605 * @param pSG The (scatter/)gather list.
606 */
607DECLINLINE(bool) vboxNetFltLinuxIsGso(PINTNETSG pSG)
608{
609#if defined(VBOXNETFLT_WITH_GSO_XMIT_WIRE) || defined(VBOXNETFLT_WITH_GSO_XMIT_HOST)
610 return !((PDMNETWORKGSOTYPE)pSG->GsoCtx.u8Type == PDMNETWORKGSOTYPE_INVALID);
611#else /* !VBOXNETFLT_WITH_GSO_XMIT_WIRE && !VBOXNETFLT_WITH_GSO_XMIT_HOST */
612 return false;
613#endif /* !VBOXNETFLT_WITH_GSO_XMIT_WIRE && !VBOXNETFLT_WITH_GSO_XMIT_HOST */
614}
615
616
617/**
618 * Find out the frame size (of a single segment in case of GSO frames).
619 *
620 * @returns the frame size.
621 * @param pSG The (scatter/)gather list.
622 */
623DECLINLINE(uint32_t) vboxNetFltLinuxFrameSize(PINTNETSG pSG)
624{
625 uint16_t u16Type = 0;
626 uint32_t cbVlanTag = 0;
627 if (pSG->aSegs[0].cb >= sizeof(RTNETETHERHDR))
628 u16Type = RT_BE2H_U16(((PCRTNETETHERHDR)pSG->aSegs[0].pv)->EtherType);
629 else if (pSG->cbTotal >= sizeof(RTNETETHERHDR))
630 {
631 uint32_t off = RT_OFFSETOF(RTNETETHERHDR, EtherType);
632 uint32_t i;
633 for (i = 0; i < pSG->cSegsUsed; ++i)
634 {
635 if (off <= pSG->aSegs[i].cb)
636 {
637 if (off + sizeof(uint16_t) <= pSG->aSegs[i].cb)
638 u16Type = RT_BE2H_U16(*(uint16_t *)((uintptr_t)pSG->aSegs[i].pv + off));
639 else if (i + 1 < pSG->cSegsUsed)
640 u16Type = RT_BE2H_U16( ((uint16_t)( ((uint8_t *)pSG->aSegs[i].pv)[off] ) << 8)
641 + *(uint8_t *)pSG->aSegs[i + 1].pv); /* ASSUMES no empty segments! */
642 /* else: frame is too short. */
643 break;
644 }
645 off -= pSG->aSegs[i].cb;
646 }
647 }
648 if (u16Type == RTNET_ETHERTYPE_VLAN)
649 cbVlanTag = 4;
650 return (vboxNetFltLinuxIsGso(pSG) ? (uint32_t)pSG->GsoCtx.cbMaxSeg + pSG->GsoCtx.cbHdrsTotal : pSG->cbTotal) - cbVlanTag;
651}
652
653
654/**
655 * Internal worker that create a linux sk_buff for a
656 * (scatter/)gather list.
657 *
658 * @returns Pointer to the sk_buff.
659 * @param pThis The instance.
660 * @param pSG The (scatter/)gather list.
661 * @param fDstWire Set if the destination is the wire.
662 */
663static struct sk_buff *vboxNetFltLinuxSkBufFromSG(PVBOXNETFLTINS pThis, PINTNETSG pSG, bool fDstWire)
664{
665 struct sk_buff *pPkt;
666 struct net_device *pDev;
667 unsigned fGsoType = 0;
668
669 if (pSG->cbTotal == 0)
670 {
671 LogRel(("VBoxNetFlt: Dropped empty packet coming from internal network.\n"));
672 return NULL;
673 }
674 Log5(("VBoxNetFlt: Packet to %s of %d bytes (frame=%d).\n", fDstWire?"wire":"host", pSG->cbTotal, vboxNetFltLinuxFrameSize(pSG)));
675 if (fDstWire && (vboxNetFltLinuxFrameSize(pSG) > ASMAtomicReadU32(&pThis->u.s.cbMtu) + 14))
676 {
677 static bool s_fOnce = true;
678 if (s_fOnce)
679 {
680 s_fOnce = false;
681 printk("VBoxNetFlt: Dropped over-sized packet (%d bytes) coming from internal network.\n", vboxNetFltLinuxFrameSize(pSG));
682 }
683 return NULL;
684 }
685
686 /** @todo We should use fragments mapping the SG buffers with large packets.
687 * 256 bytes seems to be the a threshold used a lot for this. It
688 * requires some nasty work on the intnet side though... */
689 /*
690 * Allocate a packet and copy over the data.
691 */
692 pDev = ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *);
693 pPkt = dev_alloc_skb(pSG->cbTotal + NET_IP_ALIGN);
694 if (RT_UNLIKELY(!pPkt))
695 {
696 Log(("vboxNetFltLinuxSkBufFromSG: Failed to allocate sk_buff(%u).\n", pSG->cbTotal));
697 pSG->pvUserData = NULL;
698 return NULL;
699 }
700 pPkt->dev = pDev;
701 pPkt->ip_summed = CHECKSUM_NONE;
702
703 /* Align IP header on 16-byte boundary: 2 + 14 (ethernet hdr size). */
704 skb_reserve(pPkt, NET_IP_ALIGN);
705
706 /* Copy the segments. */
707 skb_put(pPkt, pSG->cbTotal);
708 IntNetSgRead(pSG, pPkt->data);
709
710#if defined(VBOXNETFLT_WITH_GSO_XMIT_WIRE) || defined(VBOXNETFLT_WITH_GSO_XMIT_HOST)
711 /*
712 * Setup GSO if used by this packet.
713 */
714 switch ((PDMNETWORKGSOTYPE)pSG->GsoCtx.u8Type)
715 {
716 default:
717 AssertMsgFailed(("%u (%s)\n", pSG->GsoCtx.u8Type, PDMNetGsoTypeName((PDMNETWORKGSOTYPE)pSG->GsoCtx.u8Type) ));
718 /* fall thru */
719 case PDMNETWORKGSOTYPE_INVALID:
720 fGsoType = 0;
721 break;
722 case PDMNETWORKGSOTYPE_IPV4_TCP:
723 fGsoType = SKB_GSO_TCPV4;
724 break;
725 case PDMNETWORKGSOTYPE_IPV4_UDP:
726 fGsoType = SKB_GSO_UDP;
727 break;
728 case PDMNETWORKGSOTYPE_IPV6_TCP:
729 fGsoType = SKB_GSO_TCPV6;
730 break;
731 }
732 if (fGsoType)
733 {
734 struct skb_shared_info *pShInfo = skb_shinfo(pPkt);
735
736 pShInfo->gso_type = fGsoType | SKB_GSO_DODGY;
737 pShInfo->gso_size = pSG->GsoCtx.cbMaxSeg;
738 pShInfo->gso_segs = PDMNetGsoCalcSegmentCount(&pSG->GsoCtx, pSG->cbTotal);
739
740 /*
741 * We need to set checksum fields even if the packet goes to the host
742 * directly as it may be immediately forwarded by IP layer @bugref{5020}.
743 */
744 Assert(skb_headlen(pPkt) >= pSG->GsoCtx.cbHdrsTotal);
745 pPkt->ip_summed = CHECKSUM_PARTIAL;
746# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 22)
747 pPkt->csum_start = skb_headroom(pPkt) + pSG->GsoCtx.offHdr2;
748 if (fGsoType & (SKB_GSO_TCPV4 | SKB_GSO_TCPV6))
749 pPkt->csum_offset = RT_OFFSETOF(RTNETTCP, th_sum);
750 else
751 pPkt->csum_offset = RT_OFFSETOF(RTNETUDP, uh_sum);
752# else
753 pPkt->h.raw = pPkt->data + pSG->GsoCtx.offHdr2;
754 if (fGsoType & (SKB_GSO_TCPV4 | SKB_GSO_TCPV6))
755 pPkt->csum = RT_OFFSETOF(RTNETTCP, th_sum);
756 else
757 pPkt->csum = RT_OFFSETOF(RTNETUDP, uh_sum);
758# endif
759 if (!fDstWire)
760 PDMNetGsoPrepForDirectUse(&pSG->GsoCtx, pPkt->data, pSG->cbTotal, PDMNETCSUMTYPE_PSEUDO);
761 }
762#endif /* VBOXNETFLT_WITH_GSO_XMIT_WIRE || VBOXNETFLT_WITH_GSO_XMIT_HOST */
763
764 /*
765 * Finish up the socket buffer.
766 */
767 pPkt->protocol = eth_type_trans(pPkt, pDev);
768 if (fDstWire)
769 {
770 VBOX_SKB_RESET_NETWORK_HDR(pPkt);
771
772 /* Restore ethernet header back. */
773 skb_push(pPkt, ETH_HLEN); /** @todo VLAN: +4 if VLAN? */
774 VBOX_SKB_RESET_MAC_HDR(pPkt);
775 }
776 VBOXNETFLT_SKB_TAG(pPkt) = VBOXNETFLT_CB_TAG(pPkt);
777
778 return pPkt;
779}
780
781
782/**
783 * Initializes a SG list from an sk_buff.
784 *
785 * @returns Number of segments.
786 * @param pThis The instance.
787 * @param pBuf The sk_buff.
788 * @param pSG The SG.
789 * @param cSegs The number of segments allocated for the SG.
790 * This should match the number in the mbuf exactly!
791 * @param fSrc The source of the frame.
792 * @param pGsoCtx Pointer to the GSO context if it's a GSO
793 * internal network frame. NULL if regular frame.
794 */
795DECLINLINE(void) vboxNetFltLinuxSkBufToSG(PVBOXNETFLTINS pThis, struct sk_buff *pBuf, PINTNETSG pSG,
796 unsigned cSegs, uint32_t fSrc, PCPDMNETWORKGSO pGsoCtx)
797{
798 int i;
799 NOREF(pThis);
800
801 Assert(!skb_shinfo(pBuf)->frag_list);
802
803 if (!pGsoCtx)
804 IntNetSgInitTempSegs(pSG, pBuf->len, cSegs, 0 /*cSegsUsed*/);
805 else
806 IntNetSgInitTempSegsGso(pSG, pBuf->len, cSegs, 0 /*cSegsUsed*/, pGsoCtx);
807
808#ifdef VBOXNETFLT_SG_SUPPORT
809 pSG->aSegs[0].cb = skb_headlen(pBuf);
810 pSG->aSegs[0].pv = pBuf->data;
811 pSG->aSegs[0].Phys = NIL_RTHCPHYS;
812
813 for (i = 0; i < skb_shinfo(pBuf)->nr_frags; i++)
814 {
815 skb_frag_t *pFrag = &skb_shinfo(pBuf)->frags[i];
816 pSG->aSegs[i+1].cb = pFrag->size;
817 pSG->aSegs[i+1].pv = kmap(pFrag->page);
818 printk("%p = kmap()\n", pSG->aSegs[i+1].pv);
819 pSG->aSegs[i+1].Phys = NIL_RTHCPHYS;
820 }
821 ++i;
822
823#else
824 pSG->aSegs[0].cb = pBuf->len;
825 pSG->aSegs[0].pv = pBuf->data;
826 pSG->aSegs[0].Phys = NIL_RTHCPHYS;
827 i = 1;
828#endif
829
830 pSG->cSegsUsed = i;
831
832#ifdef PADD_RUNT_FRAMES_FROM_HOST
833 /*
834 * Add a trailer if the frame is too small.
835 *
836 * Since we're getting to the packet before it is framed, it has not
837 * yet been padded. The current solution is to add a segment pointing
838 * to a buffer containing all zeros and pray that works for all frames...
839 */
840 if (pSG->cbTotal < 60 && (fSrc & INTNETTRUNKDIR_HOST))
841 {
842 static uint8_t const s_abZero[128] = {0};
843
844 AssertReturnVoid(i < cSegs);
845
846 pSG->aSegs[i].Phys = NIL_RTHCPHYS;
847 pSG->aSegs[i].pv = (void *)&s_abZero[0];
848 pSG->aSegs[i].cb = 60 - pSG->cbTotal;
849 pSG->cbTotal = 60;
850 pSG->cSegsUsed++;
851 Assert(i + 1 <= pSG->cSegsAlloc)
852 }
853#endif
854
855 Log4(("vboxNetFltLinuxSkBufToSG: allocated=%d, segments=%d frags=%d next=%p frag_list=%p pkt_type=%x fSrc=%x\n",
856 pSG->cSegsAlloc, pSG->cSegsUsed, skb_shinfo(pBuf)->nr_frags, pBuf->next, skb_shinfo(pBuf)->frag_list, pBuf->pkt_type, fSrc));
857 for (i = 0; i < pSG->cSegsUsed; i++)
858 Log4(("vboxNetFltLinuxSkBufToSG: #%d: cb=%d pv=%p\n",
859 i, pSG->aSegs[i].cb, pSG->aSegs[i].pv));
860}
861
862/**
863 * Packet handler; not really documented - figure it out yourself.
864 *
865 * @returns 0 or EJUSTRETURN - this is probably copy & pastry and thus wrong.
866 */
867#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 14)
868static int vboxNetFltLinuxPacketHandler(struct sk_buff *pBuf,
869 struct net_device *pSkbDev,
870 struct packet_type *pPacketType,
871 struct net_device *pOrigDev)
872#else
873static int vboxNetFltLinuxPacketHandler(struct sk_buff *pBuf,
874 struct net_device *pSkbDev,
875 struct packet_type *pPacketType)
876#endif
877{
878 PVBOXNETFLTINS pThis;
879 struct net_device *pDev;
880 LogFlow(("vboxNetFltLinuxPacketHandler: pBuf=%p pSkbDev=%p pPacketType=%p\n",
881 pBuf, pSkbDev, pPacketType));
882#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 18)
883 Log3(("vboxNetFltLinuxPacketHandler: skb len=%u data_len=%u truesize=%u next=%p nr_frags=%u gso_size=%u gso_seqs=%u gso_type=%x frag_list=%p pkt_type=%x\n",
884 pBuf->len, pBuf->data_len, pBuf->truesize, pBuf->next, skb_shinfo(pBuf)->nr_frags, skb_shinfo(pBuf)->gso_size, skb_shinfo(pBuf)->gso_segs, skb_shinfo(pBuf)->gso_type, skb_shinfo(pBuf)->frag_list, pBuf->pkt_type));
885# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 22)
886 Log4(("vboxNetFltLinuxPacketHandler: packet dump follows:\n%.*Rhxd\n", pBuf->len-pBuf->data_len, skb_mac_header(pBuf)));
887# endif
888#else
889 Log3(("vboxNetFltLinuxPacketHandler: skb len=%u data_len=%u truesize=%u next=%p nr_frags=%u tso_size=%u tso_seqs=%u frag_list=%p pkt_type=%x\n",
890 pBuf->len, pBuf->data_len, pBuf->truesize, pBuf->next, skb_shinfo(pBuf)->nr_frags, skb_shinfo(pBuf)->tso_size, skb_shinfo(pBuf)->tso_segs, skb_shinfo(pBuf)->frag_list, pBuf->pkt_type));
891#endif
892 /*
893 * Drop it immediately?
894 */
895 if (!pBuf)
896 return 0;
897
898 if (pBuf->pkt_type == PACKET_LOOPBACK)
899 {
900 /*
901 * We are not interested in loopbacked packets as they will always have
902 * another copy going to the wire.
903 */
904 Log2(("vboxNetFltLinuxPacketHandler: dropped loopback packet (cb=%u)\n", pBuf->len));
905 dev_kfree_skb(pBuf); /* We must 'consume' all packets we get (@bugref{6539})! */
906 return 0;
907 }
908
909 pThis = VBOX_FLT_PT_TO_INST(pPacketType);
910 pDev = ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *);
911 if (pDev != pSkbDev)
912 {
913 Log(("vboxNetFltLinuxPacketHandler: Devices do not match, pThis may be wrong! pThis=%p\n", pThis));
914 kfree_skb(pBuf); /* This is a failure, so we use kfree_skb instead of dev_kfree_skb. */
915 return 0;
916 }
917
918 Log4(("vboxNetFltLinuxPacketHandler: pBuf->cb dump:\n%.*Rhxd\n", sizeof(pBuf->cb), pBuf->cb));
919 if (vboxNetFltLinuxSkBufIsOur(pBuf))
920 {
921 Log2(("vboxNetFltLinuxPacketHandler: got our own sk_buff, drop it.\n"));
922 dev_kfree_skb(pBuf);
923 return 0;
924 }
925
926#ifndef VBOXNETFLT_SG_SUPPORT
927 {
928 /*
929 * Get rid of fragmented packets, they cause too much trouble.
930 */
931 unsigned int uMacLen = pBuf->mac_len;
932 struct sk_buff *pCopy = skb_copy(pBuf, GFP_ATOMIC);
933 dev_kfree_skb(pBuf);
934 if (!pCopy)
935 {
936 LogRel(("VBoxNetFlt: Failed to allocate packet buffer, dropping the packet.\n"));
937 return 0;
938 }
939 pBuf = pCopy;
940 /* Somehow skb_copy ignores mac_len */
941 pBuf->mac_len = uMacLen;
942# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 27)
943 /* Restore VLAN tag stripped by host hardware */
944 if (vlan_tx_tag_present(pBuf) && skb_headroom(pBuf) >= VLAN_ETH_HLEN)
945 {
946 uint8_t *pMac = (uint8_t*)skb_mac_header(pBuf);
947 struct vlan_ethhdr *pVHdr = (struct vlan_ethhdr *)(pMac - VLAN_HLEN);
948 memmove(pVHdr, pMac, ETH_ALEN * 2);
949 pVHdr->h_vlan_proto = RT_H2N_U16(ETH_P_8021Q);
950 pVHdr->h_vlan_TCI = RT_H2N_U16(vlan_tx_tag_get(pBuf));
951 pBuf->mac_header -= VLAN_HLEN;
952 pBuf->mac_len += VLAN_HLEN;
953 }
954# endif /* LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 27) */
955
956# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 18)
957 Log3(("vboxNetFltLinuxPacketHandler: skb copy len=%u data_len=%u truesize=%u next=%p nr_frags=%u gso_size=%u gso_seqs=%u gso_type=%x frag_list=%p pkt_type=%x\n",
958 pBuf->len, pBuf->data_len, pBuf->truesize, pBuf->next, skb_shinfo(pBuf)->nr_frags, skb_shinfo(pBuf)->gso_size, skb_shinfo(pBuf)->gso_segs, skb_shinfo(pBuf)->gso_type, skb_shinfo(pBuf)->frag_list, pBuf->pkt_type));
959# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 22)
960 Log4(("vboxNetFltLinuxPacketHandler: packet dump follows:\n%.*Rhxd\n", pBuf->len-pBuf->data_len, skb_mac_header(pBuf)));
961# endif
962# else
963 Log3(("vboxNetFltLinuxPacketHandler: skb copy len=%u data_len=%u truesize=%u next=%p nr_frags=%u tso_size=%u tso_seqs=%u frag_list=%p pkt_type=%x\n",
964 pBuf->len, pBuf->data_len, pBuf->truesize, pBuf->next, skb_shinfo(pBuf)->nr_frags, skb_shinfo(pBuf)->tso_size, skb_shinfo(pBuf)->tso_segs, skb_shinfo(pBuf)->frag_list, pBuf->pkt_type));
965# endif
966 }
967#endif
968
969#ifdef VBOXNETFLT_LINUX_NO_XMIT_QUEUE
970 /* Forward it to the internal network. */
971 vboxNetFltLinuxForwardToIntNet(pThis, pBuf);
972#else
973 /* Add the packet to transmit queue and schedule the bottom half. */
974 skb_queue_tail(&pThis->u.s.XmitQueue, pBuf);
975 schedule_work(&pThis->u.s.XmitTask);
976 Log4(("vboxNetFltLinuxPacketHandler: scheduled work %p for sk_buff %p\n",
977 &pThis->u.s.XmitTask, pBuf));
978#endif
979
980 /* It does not really matter what we return, it is ignored by the kernel. */
981 return 0;
982}
983
984/**
985 * Calculate the number of INTNETSEG segments the socket buffer will need.
986 *
987 * @returns Segment count.
988 * @param pBuf The socket buffer.
989 */
990DECLINLINE(unsigned) vboxNetFltLinuxCalcSGSegments(struct sk_buff *pBuf)
991{
992#ifdef VBOXNETFLT_SG_SUPPORT
993 unsigned cSegs = 1 + skb_shinfo(pBuf)->nr_frags;
994#else
995 unsigned cSegs = 1;
996#endif
997#ifdef PADD_RUNT_FRAMES_FROM_HOST
998 /* vboxNetFltLinuxSkBufToSG adds a padding segment if it's a runt. */
999 if (pBuf->len < 60)
1000 cSegs++;
1001#endif
1002 return cSegs;
1003}
1004
1005/**
1006 * Destroy the intnet scatter / gather buffer created by
1007 * vboxNetFltLinuxSkBufToSG.
1008 */
1009static void vboxNetFltLinuxDestroySG(PINTNETSG pSG)
1010{
1011#ifdef VBOXNETFLT_SG_SUPPORT
1012 int i;
1013
1014 for (i = 0; i < skb_shinfo(pBuf)->nr_frags; i++)
1015 {
1016 printk("kunmap(%p)\n", pSG->aSegs[i+1].pv);
1017 kunmap(pSG->aSegs[i+1].pv);
1018 }
1019#endif
1020 NOREF(pSG);
1021}
1022
1023#ifdef LOG_ENABLED
1024/**
1025 * Logging helper.
1026 */
1027static void vboxNetFltDumpPacket(PINTNETSG pSG, bool fEgress, const char *pszWhere, int iIncrement)
1028{
1029 int i, offSeg;
1030 uint8_t *pInt, *pExt;
1031 static int iPacketNo = 1;
1032 iPacketNo += iIncrement;
1033 if (fEgress)
1034 {
1035 pExt = pSG->aSegs[0].pv;
1036 pInt = pExt + 6;
1037 }
1038 else
1039 {
1040 pInt = pSG->aSegs[0].pv;
1041 pExt = pInt + 6;
1042 }
1043 Log(("VBoxNetFlt: (int)%02x:%02x:%02x:%02x:%02x:%02x"
1044 " %s (%s)%02x:%02x:%02x:%02x:%02x:%02x (%u bytes) packet #%u\n",
1045 pInt[0], pInt[1], pInt[2], pInt[3], pInt[4], pInt[5],
1046 fEgress ? "-->" : "<--", pszWhere,
1047 pExt[0], pExt[1], pExt[2], pExt[3], pExt[4], pExt[5],
1048 pSG->cbTotal, iPacketNo));
1049 if (pSG->cSegsUsed == 1)
1050 {
1051 Log3(("%.*Rhxd\n", pSG->aSegs[0].cb, pSG->aSegs[0].pv));
1052 }
1053 else
1054 {
1055 for (i = 0, offSeg = 0; i < pSG->cSegsUsed; i++)
1056 {
1057 Log3(("-- segment %d at 0x%x (%d bytes) --\n%.*Rhxd\n",
1058 i, offSeg, pSG->aSegs[i].cb, pSG->aSegs[i].cb, pSG->aSegs[i].pv));
1059 offSeg += pSG->aSegs[i].cb;
1060 }
1061 }
1062
1063}
1064#else
1065# define vboxNetFltDumpPacket(a, b, c, d) do {} while (0)
1066#endif
1067
1068#ifdef VBOXNETFLT_WITH_GSO_RECV
1069
1070/**
1071 * Worker for vboxNetFltLinuxForwardToIntNet that checks if we can forwards a
1072 * GSO socket buffer without having to segment it.
1073 *
1074 * @returns true on success, false if needs segmenting.
1075 * @param pThis The net filter instance.
1076 * @param pSkb The GSO socket buffer.
1077 * @param fSrc The source.
1078 * @param pGsoCtx Where to return the GSO context on success.
1079 */
1080static bool vboxNetFltLinuxCanForwardAsGso(PVBOXNETFLTINS pThis, struct sk_buff *pSkb, uint32_t fSrc,
1081 PPDMNETWORKGSO pGsoCtx)
1082{
1083 PDMNETWORKGSOTYPE enmGsoType;
1084 uint16_t uEtherType;
1085 unsigned int cbTransport;
1086 unsigned int offTransport;
1087 unsigned int cbTransportHdr;
1088 unsigned uProtocol;
1089 union
1090 {
1091 RTNETIPV4 IPv4;
1092 RTNETIPV6 IPv6;
1093 RTNETTCP Tcp;
1094 uint8_t ab[40];
1095 uint16_t au16[40/2];
1096 uint32_t au32[40/4];
1097 } Buf;
1098
1099 /*
1100 * Check the GSO properties of the socket buffer and make sure it fits.
1101 */
1102 /** @todo Figure out how to handle SKB_GSO_TCP_ECN! */
1103 if (RT_UNLIKELY( skb_shinfo(pSkb)->gso_type & ~(SKB_GSO_UDP | SKB_GSO_DODGY | SKB_GSO_TCPV6 | SKB_GSO_TCPV4) ))
1104 {
1105 Log5(("vboxNetFltLinuxCanForwardAsGso: gso_type=%#x\n", skb_shinfo(pSkb)->gso_type));
1106 return false;
1107 }
1108 if (RT_UNLIKELY( skb_shinfo(pSkb)->gso_size < 1
1109 || pSkb->len > VBOX_MAX_GSO_SIZE ))
1110 {
1111 Log5(("vboxNetFltLinuxCanForwardAsGso: gso_size=%#x skb_len=%#x (max=%#x)\n", skb_shinfo(pSkb)->gso_size, pSkb->len, VBOX_MAX_GSO_SIZE));
1112 return false;
1113 }
1114 /*
1115 * It is possible to receive GSO packets from wire if GRO is enabled.
1116 */
1117 if (RT_UNLIKELY(fSrc & INTNETTRUNKDIR_WIRE))
1118 {
1119 Log5(("vboxNetFltLinuxCanForwardAsGso: fSrc=wire\n"));
1120#ifdef VBOXNETFLT_WITH_GRO
1121 /*
1122 * The packet came from the wire and the driver has already consumed
1123 * mac header. We need to restore it back.
1124 */
1125 pSkb->mac_len = skb_network_header(pSkb) - skb_mac_header(pSkb);
1126 skb_push(pSkb, pSkb->mac_len);
1127 Log5(("vboxNetFltLinuxCanForwardAsGso: mac_len=%d data=%p mac_header=%p network_header=%p\n",
1128 pSkb->mac_len, pSkb->data, skb_mac_header(pSkb), skb_network_header(pSkb)));
1129#else /* !VBOXNETFLT_WITH_GRO */
1130 /* Older kernels didn't have GRO. */
1131 return false;
1132#endif /* !VBOXNETFLT_WITH_GRO */
1133 }
1134 else
1135 {
1136 /*
1137 * skb_gso_segment does the following. Do we need to do it as well?
1138 */
1139#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 22)
1140 skb_reset_mac_header(pSkb);
1141 pSkb->mac_len = pSkb->network_header - pSkb->mac_header;
1142#else
1143 pSkb->mac.raw = pSkb->data;
1144 pSkb->mac_len = pSkb->nh.raw - pSkb->data;
1145#endif
1146 }
1147
1148 /*
1149 * Switch on the ethertype.
1150 */
1151 uEtherType = pSkb->protocol;
1152 if ( uEtherType == RT_H2N_U16_C(RTNET_ETHERTYPE_VLAN)
1153 && pSkb->mac_len == sizeof(RTNETETHERHDR) + sizeof(uint32_t))
1154 {
1155 uint16_t const *puEtherType = skb_header_pointer(pSkb, sizeof(RTNETETHERHDR) + sizeof(uint16_t), sizeof(uint16_t), &Buf);
1156 if (puEtherType)
1157 uEtherType = *puEtherType;
1158 }
1159 switch (uEtherType)
1160 {
1161 case RT_H2N_U16_C(RTNET_ETHERTYPE_IPV4):
1162 {
1163 unsigned int cbHdr;
1164 PCRTNETIPV4 pIPv4 = (PCRTNETIPV4)skb_header_pointer(pSkb, pSkb->mac_len, sizeof(Buf.IPv4), &Buf);
1165 if (RT_UNLIKELY(!pIPv4))
1166 {
1167 Log5(("vboxNetFltLinuxCanForwardAsGso: failed to access IPv4 hdr\n"));
1168 return false;
1169 }
1170
1171 cbHdr = pIPv4->ip_hl * 4;
1172 cbTransport = RT_N2H_U16(pIPv4->ip_len);
1173 if (RT_UNLIKELY( cbHdr < RTNETIPV4_MIN_LEN
1174 || cbHdr > cbTransport ))
1175 {
1176 Log5(("vboxNetFltLinuxCanForwardAsGso: invalid IPv4 lengths: ip_hl=%u ip_len=%u\n", pIPv4->ip_hl, RT_N2H_U16(pIPv4->ip_len)));
1177 return false;
1178 }
1179 cbTransport -= cbHdr;
1180 offTransport = pSkb->mac_len + cbHdr;
1181 uProtocol = pIPv4->ip_p;
1182 if (uProtocol == RTNETIPV4_PROT_TCP)
1183 enmGsoType = PDMNETWORKGSOTYPE_IPV4_TCP;
1184 else if (uProtocol == RTNETIPV4_PROT_UDP)
1185 enmGsoType = PDMNETWORKGSOTYPE_IPV4_UDP;
1186 else /** @todo IPv6: 4to6 tunneling */
1187 enmGsoType = PDMNETWORKGSOTYPE_INVALID;
1188 break;
1189 }
1190
1191 case RT_H2N_U16_C(RTNET_ETHERTYPE_IPV6):
1192 {
1193 PCRTNETIPV6 pIPv6 = (PCRTNETIPV6)skb_header_pointer(pSkb, pSkb->mac_len, sizeof(Buf.IPv6), &Buf);
1194 if (RT_UNLIKELY(!pIPv6))
1195 {
1196 Log5(("vboxNetFltLinuxCanForwardAsGso: failed to access IPv6 hdr\n"));
1197 return false;
1198 }
1199
1200 cbTransport = RT_N2H_U16(pIPv6->ip6_plen);
1201 offTransport = pSkb->mac_len + sizeof(RTNETIPV6);
1202 uProtocol = pIPv6->ip6_nxt;
1203 /** @todo IPv6: Dig our way out of the other headers. */
1204 if (uProtocol == RTNETIPV4_PROT_TCP)
1205 enmGsoType = PDMNETWORKGSOTYPE_IPV6_TCP;
1206 else if (uProtocol == RTNETIPV4_PROT_UDP)
1207 enmGsoType = PDMNETWORKGSOTYPE_IPV6_UDP;
1208 else
1209 enmGsoType = PDMNETWORKGSOTYPE_INVALID;
1210 break;
1211 }
1212
1213 default:
1214 Log5(("vboxNetFltLinuxCanForwardAsGso: uEtherType=%#x\n", RT_H2N_U16(uEtherType)));
1215 return false;
1216 }
1217
1218 if (enmGsoType == PDMNETWORKGSOTYPE_INVALID)
1219 {
1220 Log5(("vboxNetFltLinuxCanForwardAsGso: Unsupported protocol %d\n", uProtocol));
1221 return false;
1222 }
1223
1224 if (RT_UNLIKELY( offTransport + cbTransport <= offTransport
1225 || offTransport + cbTransport > pSkb->len
1226 || cbTransport < (uProtocol == RTNETIPV4_PROT_TCP ? RTNETTCP_MIN_LEN : RTNETUDP_MIN_LEN)) )
1227 {
1228 Log5(("vboxNetFltLinuxCanForwardAsGso: Bad transport length; off=%#x + cb=%#x => %#x; skb_len=%#x (%s)\n",
1229 offTransport, cbTransport, offTransport + cbTransport, pSkb->len, PDMNetGsoTypeName(enmGsoType) ));
1230 return false;
1231 }
1232
1233 /*
1234 * Check the TCP/UDP bits.
1235 */
1236 if (uProtocol == RTNETIPV4_PROT_TCP)
1237 {
1238 PCRTNETTCP pTcp = (PCRTNETTCP)skb_header_pointer(pSkb, offTransport, sizeof(Buf.Tcp), &Buf);
1239 if (RT_UNLIKELY(!pTcp))
1240 {
1241 Log5(("vboxNetFltLinuxCanForwardAsGso: failed to access TCP hdr\n"));
1242 return false;
1243 }
1244
1245 cbTransportHdr = pTcp->th_off * 4;
1246 pGsoCtx->cbHdrsSeg = offTransport + cbTransportHdr;
1247 if (RT_UNLIKELY( cbTransportHdr < RTNETTCP_MIN_LEN
1248 || cbTransportHdr > cbTransport
1249 || offTransport + cbTransportHdr >= UINT8_MAX
1250 || offTransport + cbTransportHdr >= pSkb->len ))
1251 {
1252 Log5(("vboxNetFltLinuxCanForwardAsGso: No space for TCP header; off=%#x cb=%#x skb_len=%#x\n", offTransport, cbTransportHdr, pSkb->len));
1253 return false;
1254 }
1255
1256 }
1257 else
1258 {
1259 Assert(uProtocol == RTNETIPV4_PROT_UDP);
1260 cbTransportHdr = sizeof(RTNETUDP);
1261 pGsoCtx->cbHdrsSeg = offTransport; /* Exclude UDP header */
1262 if (RT_UNLIKELY( offTransport + cbTransportHdr >= UINT8_MAX
1263 || offTransport + cbTransportHdr >= pSkb->len ))
1264 {
1265 Log5(("vboxNetFltLinuxCanForwardAsGso: No space for UDP header; off=%#x skb_len=%#x\n", offTransport, pSkb->len));
1266 return false;
1267 }
1268 }
1269
1270 /*
1271 * We're good, init the GSO context.
1272 */
1273 pGsoCtx->u8Type = enmGsoType;
1274 pGsoCtx->cbHdrsTotal = offTransport + cbTransportHdr;
1275 pGsoCtx->cbMaxSeg = skb_shinfo(pSkb)->gso_size;
1276 pGsoCtx->offHdr1 = pSkb->mac_len;
1277 pGsoCtx->offHdr2 = offTransport;
1278 pGsoCtx->u8Unused = 0;
1279
1280 return true;
1281}
1282
1283/**
1284 * Forward the socket buffer as a GSO internal network frame.
1285 *
1286 * @returns IPRT status code.
1287 * @param pThis The net filter instance.
1288 * @param pSkb The GSO socket buffer.
1289 * @param fSrc The source.
1290 * @param pGsoCtx Where to return the GSO context on success.
1291 */
1292static int vboxNetFltLinuxForwardAsGso(PVBOXNETFLTINS pThis, struct sk_buff *pSkb, uint32_t fSrc, PCPDMNETWORKGSO pGsoCtx)
1293{
1294 int rc;
1295 unsigned cSegs = vboxNetFltLinuxCalcSGSegments(pSkb);
1296 if (RT_LIKELY(cSegs <= MAX_SKB_FRAGS + 1))
1297 {
1298 PINTNETSG pSG = (PINTNETSG)alloca(RT_OFFSETOF(INTNETSG, aSegs[cSegs]));
1299 if (RT_LIKELY(pSG))
1300 {
1301 vboxNetFltLinuxSkBufToSG(pThis, pSkb, pSG, cSegs, fSrc, pGsoCtx);
1302
1303 vboxNetFltDumpPacket(pSG, false, (fSrc & INTNETTRUNKDIR_HOST) ? "host" : "wire", 1);
1304 pThis->pSwitchPort->pfnRecv(pThis->pSwitchPort, NULL /* pvIf */, pSG, fSrc);
1305
1306 vboxNetFltLinuxDestroySG(pSG);
1307 rc = VINF_SUCCESS;
1308 }
1309 else
1310 {
1311 Log(("VBoxNetFlt: Dropping the sk_buff (failure case).\n"));
1312 rc = VERR_NO_MEMORY;
1313 }
1314 }
1315 else
1316 {
1317 Log(("VBoxNetFlt: Bad sk_buff? cSegs=%#x.\n", cSegs));
1318 rc = VERR_INTERNAL_ERROR_3;
1319 }
1320
1321 Log4(("VBoxNetFlt: Dropping the sk_buff.\n"));
1322 dev_kfree_skb(pSkb);
1323 return rc;
1324}
1325
1326#endif /* VBOXNETFLT_WITH_GSO_RECV */
1327
1328/**
1329 * Worker for vboxNetFltLinuxForwardToIntNet.
1330 *
1331 * @returns VINF_SUCCESS or VERR_NO_MEMORY.
1332 * @param pThis The net filter instance.
1333 * @param pBuf The socket buffer.
1334 * @param fSrc The source.
1335 */
1336static int vboxNetFltLinuxForwardSegment(PVBOXNETFLTINS pThis, struct sk_buff *pBuf, uint32_t fSrc)
1337{
1338 int rc;
1339 unsigned cSegs = vboxNetFltLinuxCalcSGSegments(pBuf);
1340 if (cSegs <= MAX_SKB_FRAGS + 1)
1341 {
1342 PINTNETSG pSG = (PINTNETSG)alloca(RT_OFFSETOF(INTNETSG, aSegs[cSegs]));
1343 if (RT_LIKELY(pSG))
1344 {
1345 if (fSrc & INTNETTRUNKDIR_WIRE)
1346 {
1347 /*
1348 * The packet came from wire, ethernet header was removed by device driver.
1349 * Restore it using mac_len field. This takes into account VLAN headers too.
1350 */
1351 skb_push(pBuf, pBuf->mac_len);
1352 }
1353
1354 vboxNetFltLinuxSkBufToSG(pThis, pBuf, pSG, cSegs, fSrc, NULL /*pGsoCtx*/);
1355
1356 vboxNetFltDumpPacket(pSG, false, (fSrc & INTNETTRUNKDIR_HOST) ? "host" : "wire", 1);
1357 pThis->pSwitchPort->pfnRecv(pThis->pSwitchPort, NULL /* pvIf */, pSG, fSrc);
1358
1359 vboxNetFltLinuxDestroySG(pSG);
1360 rc = VINF_SUCCESS;
1361 }
1362 else
1363 {
1364 Log(("VBoxNetFlt: Failed to allocate SG buffer.\n"));
1365 rc = VERR_NO_MEMORY;
1366 }
1367 }
1368 else
1369 {
1370 Log(("VBoxNetFlt: Bad sk_buff? cSegs=%#x.\n", cSegs));
1371 rc = VERR_INTERNAL_ERROR_3;
1372 }
1373
1374 Log4(("VBoxNetFlt: Dropping the sk_buff.\n"));
1375 dev_kfree_skb(pBuf);
1376 return rc;
1377}
1378
1379/**
1380 * I won't disclose what I do, figure it out yourself, including pThis referencing.
1381 *
1382 * @param pThis The net filter instance.
1383 * @param pBuf The socket buffer. This is consumed by this function.
1384 */
1385static void vboxNetFltLinuxForwardToIntNet(PVBOXNETFLTINS pThis, struct sk_buff *pBuf)
1386{
1387 uint32_t fSrc = pBuf->pkt_type == PACKET_OUTGOING ? INTNETTRUNKDIR_HOST : INTNETTRUNKDIR_WIRE;
1388
1389#ifdef VBOXNETFLT_WITH_GSO
1390 if (skb_is_gso(pBuf))
1391 {
1392 PDMNETWORKGSO GsoCtx;
1393 Log3(("vboxNetFltLinuxForwardToIntNet: skb len=%u data_len=%u truesize=%u next=%p nr_frags=%u gso_size=%u gso_seqs=%u gso_type=%x frag_list=%p pkt_type=%x ip_summed=%d\n",
1394 pBuf->len, pBuf->data_len, pBuf->truesize, pBuf->next, skb_shinfo(pBuf)->nr_frags, skb_shinfo(pBuf)->gso_size, skb_shinfo(pBuf)->gso_segs, skb_shinfo(pBuf)->gso_type, skb_shinfo(pBuf)->frag_list, pBuf->pkt_type, pBuf->ip_summed));
1395# ifdef VBOXNETFLT_WITH_GSO_RECV
1396 if ( (skb_shinfo(pBuf)->gso_type & (SKB_GSO_UDP | SKB_GSO_TCPV6 | SKB_GSO_TCPV4))
1397 && vboxNetFltLinuxCanForwardAsGso(pThis, pBuf, fSrc, &GsoCtx) )
1398 vboxNetFltLinuxForwardAsGso(pThis, pBuf, fSrc, &GsoCtx);
1399 else
1400# endif
1401 {
1402 /* Need to segment the packet */
1403 struct sk_buff *pNext;
1404 struct sk_buff *pSegment = skb_gso_segment(pBuf, 0 /*supported features*/);
1405 if (IS_ERR(pSegment))
1406 {
1407 dev_kfree_skb(pBuf);
1408 LogRel(("VBoxNetFlt: Failed to segment a packet (%d).\n", PTR_ERR(pSegment)));
1409 return;
1410 }
1411
1412 for (; pSegment; pSegment = pNext)
1413 {
1414 Log3(("vboxNetFltLinuxForwardToIntNet: segment len=%u data_len=%u truesize=%u next=%p nr_frags=%u gso_size=%u gso_seqs=%u gso_type=%x frag_list=%p pkt_type=%x\n",
1415 pSegment->len, pSegment->data_len, pSegment->truesize, pSegment->next, skb_shinfo(pSegment)->nr_frags, skb_shinfo(pSegment)->gso_size, skb_shinfo(pSegment)->gso_segs, skb_shinfo(pSegment)->gso_type, skb_shinfo(pSegment)->frag_list, pSegment->pkt_type));
1416 pNext = pSegment->next;
1417 pSegment->next = 0;
1418 vboxNetFltLinuxForwardSegment(pThis, pSegment, fSrc);
1419 }
1420 dev_kfree_skb(pBuf);
1421 }
1422 }
1423 else
1424#endif /* VBOXNETFLT_WITH_GSO */
1425 {
1426 if (pBuf->ip_summed == CHECKSUM_PARTIAL && pBuf->pkt_type == PACKET_OUTGOING)
1427 {
1428#if LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 18)
1429 /*
1430 * Try to work around the problem with CentOS 4.7 and 5.2 (2.6.9
1431 * and 2.6.18 kernels), they pass wrong 'h' pointer down. We take IP
1432 * header length from the header itself and reconstruct 'h' pointer
1433 * to TCP (or whatever) header.
1434 */
1435 unsigned char *tmp = pBuf->h.raw;
1436 if (pBuf->h.raw == pBuf->nh.raw && pBuf->protocol == htons(ETH_P_IP))
1437 pBuf->h.raw = pBuf->nh.raw + pBuf->nh.iph->ihl * 4;
1438#endif /* LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 18) */
1439 if (VBOX_SKB_CHECKSUM_HELP(pBuf))
1440 {
1441 LogRel(("VBoxNetFlt: Failed to compute checksum, dropping the packet.\n"));
1442 dev_kfree_skb(pBuf);
1443 return;
1444 }
1445#if LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 18)
1446 /* Restore the original (wrong) pointer. */
1447 pBuf->h.raw = tmp;
1448#endif /* LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 18) */
1449 }
1450 vboxNetFltLinuxForwardSegment(pThis, pBuf, fSrc);
1451 }
1452}
1453
1454#ifndef VBOXNETFLT_LINUX_NO_XMIT_QUEUE
1455/**
1456 * Work queue handler that forwards the socket buffers queued by
1457 * vboxNetFltLinuxPacketHandler to the internal network.
1458 *
1459 * @param pWork The work queue.
1460 */
1461# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 20)
1462static void vboxNetFltLinuxXmitTask(struct work_struct *pWork)
1463# else
1464static void vboxNetFltLinuxXmitTask(void *pWork)
1465# endif
1466{
1467 PVBOXNETFLTINS pThis = VBOX_FLT_XT_TO_INST(pWork);
1468 struct sk_buff *pBuf;
1469
1470 Log4(("vboxNetFltLinuxXmitTask: Got work %p.\n", pWork));
1471
1472 /*
1473 * Active? Retain the instance and increment the busy counter.
1474 */
1475 if (vboxNetFltTryRetainBusyActive(pThis))
1476 {
1477 while ((pBuf = skb_dequeue(&pThis->u.s.XmitQueue)) != NULL)
1478 vboxNetFltLinuxForwardToIntNet(pThis, pBuf);
1479
1480 vboxNetFltRelease(pThis, true /* fBusy */);
1481 }
1482 else
1483 {
1484 /** @todo Shouldn't we just drop the packets here? There is little point in
1485 * making them accumulate when the VM is paused and it'll only waste
1486 * kernel memory anyway... Hmm. maybe wait a short while (2-5 secs)
1487 * before start draining the packets (goes for the intnet ring buf
1488 * too)? */
1489 }
1490}
1491#endif /* !VBOXNETFLT_LINUX_NO_XMIT_QUEUE */
1492
1493/**
1494 * Reports the GSO capabilities of the hardware NIC.
1495 *
1496 * @param pThis The net filter instance. The caller hold a
1497 * reference to this.
1498 */
1499static void vboxNetFltLinuxReportNicGsoCapabilities(PVBOXNETFLTINS pThis)
1500{
1501#ifdef VBOXNETFLT_WITH_GSO_XMIT_WIRE
1502 if (vboxNetFltTryRetainBusyNotDisconnected(pThis))
1503 {
1504 struct net_device *pDev;
1505 PINTNETTRUNKSWPORT pSwitchPort;
1506 unsigned int fFeatures;
1507
1508 RTSpinlockAcquire(pThis->hSpinlock);
1509
1510 pSwitchPort = pThis->pSwitchPort; /* this doesn't need to be here, but it doesn't harm. */
1511 pDev = ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *);
1512 if (pDev)
1513 fFeatures = pDev->features;
1514 else
1515 fFeatures = 0;
1516
1517 RTSpinlockRelease(pThis->hSpinlock);
1518
1519 if (pThis->pSwitchPort)
1520 {
1521 /* Set/update the GSO capabilities of the NIC. */
1522 uint32_t fGsoCapabilites = 0;
1523 if (fFeatures & NETIF_F_TSO)
1524 fGsoCapabilites |= RT_BIT_32(PDMNETWORKGSOTYPE_IPV4_TCP);
1525 if (fFeatures & NETIF_F_TSO6)
1526 fGsoCapabilites |= RT_BIT_32(PDMNETWORKGSOTYPE_IPV6_TCP);
1527# if 0 /** @todo GSO: Test UDP offloading (UFO) on linux. */
1528 if (fFeatures & NETIF_F_UFO)
1529 fGsoCapabilites |= RT_BIT_32(PDMNETWORKGSOTYPE_IPV4_UDP);
1530 if (fFeatures & NETIF_F_UFO)
1531 fGsoCapabilites |= RT_BIT_32(PDMNETWORKGSOTYPE_IPV6_UDP);
1532# endif
1533 Log3(("vboxNetFltLinuxReportNicGsoCapabilities: reporting wire %s%s%s%s\n",
1534 (fGsoCapabilites & RT_BIT_32(PDMNETWORKGSOTYPE_IPV4_TCP)) ? "tso " : "",
1535 (fGsoCapabilites & RT_BIT_32(PDMNETWORKGSOTYPE_IPV6_TCP)) ? "tso6 " : "",
1536 (fGsoCapabilites & RT_BIT_32(PDMNETWORKGSOTYPE_IPV4_UDP)) ? "ufo " : "",
1537 (fGsoCapabilites & RT_BIT_32(PDMNETWORKGSOTYPE_IPV6_UDP)) ? "ufo6 " : ""));
1538 pThis->pSwitchPort->pfnReportGsoCapabilities(pThis->pSwitchPort, fGsoCapabilites, INTNETTRUNKDIR_WIRE);
1539 }
1540
1541 vboxNetFltRelease(pThis, true /*fBusy*/);
1542 }
1543#endif /* VBOXNETFLT_WITH_GSO_XMIT_WIRE */
1544}
1545
1546/**
1547 * Helper that determines whether the host (ignoreing us) is operating the
1548 * interface in promiscuous mode or not.
1549 */
1550static bool vboxNetFltLinuxPromiscuous(PVBOXNETFLTINS pThis)
1551{
1552 bool fRc = false;
1553 struct net_device * pDev = vboxNetFltLinuxRetainNetDev(pThis);
1554 if (pDev)
1555 {
1556 fRc = !!(pDev->promiscuity - (ASMAtomicUoReadBool(&pThis->u.s.fPromiscuousSet) & 1));
1557 LogFlow(("vboxNetFltPortOsIsPromiscuous: returns %d, pDev->promiscuity=%d, fPromiscuousSet=%d\n",
1558 fRc, pDev->promiscuity, pThis->u.s.fPromiscuousSet));
1559 vboxNetFltLinuxReleaseNetDev(pThis, pDev);
1560 }
1561 return fRc;
1562}
1563
1564/**
1565 * Does this device needs link state change signaled?
1566 * Currently we need it for our own VBoxNetAdp and TAP.
1567 */
1568static bool vboxNetFltNeedsLinkState(PVBOXNETFLTINS pThis, struct net_device *pDev)
1569{
1570 if (pDev->ethtool_ops && pDev->ethtool_ops->get_drvinfo)
1571 {
1572 struct ethtool_drvinfo Info;
1573
1574 memset(&Info, 0, sizeof(Info));
1575 Info.cmd = ETHTOOL_GDRVINFO;
1576 pDev->ethtool_ops->get_drvinfo(pDev, &Info);
1577 Log3(("%s: driver=%.*s version=%.*s bus_info=%.*s\n",
1578 __FUNCTION__,
1579 sizeof(Info.driver), Info.driver,
1580 sizeof(Info.version), Info.version,
1581 sizeof(Info.bus_info), Info.bus_info));
1582
1583 if (!strncmp(Info.driver, "vboxnet", sizeof(Info.driver)))
1584 return true;
1585
1586#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 36) /* TAP started doing carrier */
1587 return !strncmp(Info.driver, "tun", 4)
1588 && !strncmp(Info.bus_info, "tap", 4);
1589#endif
1590 }
1591
1592 return false;
1593}
1594
1595/**
1596 * Some devices need link state change when filter attaches/detaches
1597 * since the filter is their link in a sense.
1598 */
1599static void vboxNetFltSetLinkState(PVBOXNETFLTINS pThis, struct net_device *pDev, bool fLinkUp)
1600{
1601 if (vboxNetFltNeedsLinkState(pThis, pDev))
1602 {
1603 Log3(("%s: bringing device link %s\n",
1604 __FUNCTION__, fLinkUp ? "up" : "down"));
1605 netif_tx_lock_bh(pDev);
1606 if (fLinkUp)
1607 netif_carrier_on(pDev);
1608 else
1609 netif_carrier_off(pDev);
1610 netif_tx_unlock_bh(pDev);
1611 }
1612}
1613
1614/**
1615 * Internal worker for vboxNetFltLinuxNotifierCallback.
1616 *
1617 * @returns VBox status code.
1618 * @param pThis The instance.
1619 * @param pDev The device to attach to.
1620 */
1621static int vboxNetFltLinuxAttachToInterface(PVBOXNETFLTINS pThis, struct net_device *pDev)
1622{
1623 LogFlow(("vboxNetFltLinuxAttachToInterface: pThis=%p (%s)\n", pThis, pThis->szName));
1624
1625 /*
1626 * Retain and store the device.
1627 */
1628 dev_hold(pDev);
1629
1630 RTSpinlockAcquire(pThis->hSpinlock);
1631 ASMAtomicUoWritePtr(&pThis->u.s.pDev, pDev);
1632 RTSpinlockRelease(pThis->hSpinlock);
1633
1634 Log(("vboxNetFltLinuxAttachToInterface: Device %p(%s) retained. ref=%d\n",
1635 pDev, pDev->name,
1636#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 37)
1637 netdev_refcnt_read(pDev)
1638#else
1639 atomic_read(&pDev->refcnt)
1640#endif
1641 ));
1642 Log(("vboxNetFltLinuxAttachToInterface: Got pDev=%p pThis=%p pThis->u.s.pDev=%p\n",
1643 pDev, pThis, ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *)));
1644
1645 /* Get the mac address while we still have a valid net_device reference. */
1646 memcpy(&pThis->u.s.MacAddr, pDev->dev_addr, sizeof(pThis->u.s.MacAddr));
1647 /* Initialize MTU */
1648 pThis->u.s.cbMtu = pDev->mtu;
1649
1650 /*
1651 * Install a packet filter for this device with a protocol wildcard (ETH_P_ALL).
1652 */
1653 pThis->u.s.PacketType.type = __constant_htons(ETH_P_ALL);
1654 pThis->u.s.PacketType.dev = pDev;
1655 pThis->u.s.PacketType.func = vboxNetFltLinuxPacketHandler;
1656 dev_add_pack(&pThis->u.s.PacketType);
1657 ASMAtomicUoWriteBool(&pThis->u.s.fPacketHandler, true);
1658 Log(("vboxNetFltLinuxAttachToInterface: this=%p: Packet handler installed.\n", pThis));
1659
1660#ifdef VBOXNETFLT_WITH_HOST2WIRE_FILTER
1661 vboxNetFltLinuxHookDev(pThis, pDev);
1662#endif
1663
1664 /*
1665 * Are we the "carrier" for this device (e.g. vboxnet or tap)?
1666 */
1667 vboxNetFltSetLinkState(pThis, pDev, true);
1668
1669 /*
1670 * Set indicators that require the spinlock. Be abit paranoid about racing
1671 * the device notification handle.
1672 */
1673 RTSpinlockAcquire(pThis->hSpinlock);
1674 pDev = ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *);
1675 if (pDev)
1676 {
1677 ASMAtomicUoWriteBool(&pThis->fDisconnectedFromHost, false);
1678 ASMAtomicUoWriteBool(&pThis->u.s.fRegistered, true);
1679 pDev = NULL; /* don't dereference it */
1680 }
1681 RTSpinlockRelease(pThis->hSpinlock);
1682
1683 /*
1684 * If the above succeeded report GSO capabilities, if not undo and
1685 * release the device.
1686 */
1687 if (!pDev)
1688 {
1689 Assert(pThis->pSwitchPort);
1690 if (vboxNetFltTryRetainBusyNotDisconnected(pThis))
1691 {
1692 vboxNetFltLinuxReportNicGsoCapabilities(pThis);
1693 pThis->pSwitchPort->pfnReportMacAddress(pThis->pSwitchPort, &pThis->u.s.MacAddr);
1694 pThis->pSwitchPort->pfnReportPromiscuousMode(pThis->pSwitchPort, vboxNetFltLinuxPromiscuous(pThis));
1695 pThis->pSwitchPort->pfnReportNoPreemptDsts(pThis->pSwitchPort, INTNETTRUNKDIR_WIRE | INTNETTRUNKDIR_HOST);
1696 vboxNetFltRelease(pThis, true /*fBusy*/);
1697 }
1698 }
1699 else
1700 {
1701#ifdef VBOXNETFLT_WITH_HOST2WIRE_FILTER
1702 vboxNetFltLinuxUnhookDev(pThis, pDev);
1703#endif
1704 RTSpinlockAcquire(pThis->hSpinlock);
1705 ASMAtomicUoWriteNullPtr(&pThis->u.s.pDev);
1706 RTSpinlockRelease(pThis->hSpinlock);
1707 dev_put(pDev);
1708 Log(("vboxNetFltLinuxAttachToInterface: Device %p(%s) released. ref=%d\n",
1709 pDev, pDev->name,
1710#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 37)
1711 netdev_refcnt_read(pDev)
1712#else
1713 atomic_read(&pDev->refcnt)
1714#endif
1715 ));
1716 }
1717
1718 LogRel(("VBoxNetFlt: attached to '%s' / %RTmac\n", pThis->szName, &pThis->u.s.MacAddr));
1719 return VINF_SUCCESS;
1720}
1721
1722
1723static int vboxNetFltLinuxUnregisterDevice(PVBOXNETFLTINS pThis, struct net_device *pDev)
1724{
1725 bool fRegistered;
1726 Assert(!pThis->fDisconnectedFromHost);
1727
1728#ifdef VBOXNETFLT_WITH_HOST2WIRE_FILTER
1729 vboxNetFltLinuxUnhookDev(pThis, pDev);
1730#endif
1731
1732 if (ASMAtomicCmpXchgBool(&pThis->u.s.fPacketHandler, false, true))
1733 {
1734 dev_remove_pack(&pThis->u.s.PacketType);
1735 Log(("vboxNetFltLinuxUnregisterDevice: this=%p: packet handler removed.\n", pThis));
1736 }
1737
1738 RTSpinlockAcquire(pThis->hSpinlock);
1739 fRegistered = ASMAtomicXchgBool(&pThis->u.s.fRegistered, false);
1740 if (fRegistered)
1741 {
1742 ASMAtomicWriteBool(&pThis->fDisconnectedFromHost, true);
1743 ASMAtomicUoWriteNullPtr(&pThis->u.s.pDev);
1744 }
1745 RTSpinlockRelease(pThis->hSpinlock);
1746
1747 if (fRegistered)
1748 {
1749#ifndef VBOXNETFLT_LINUX_NO_XMIT_QUEUE
1750 skb_queue_purge(&pThis->u.s.XmitQueue);
1751#endif
1752 Log(("vboxNetFltLinuxUnregisterDevice: this=%p: xmit queue purged.\n", pThis));
1753 Log(("vboxNetFltLinuxUnregisterDevice: Device %p(%s) released. ref=%d\n",
1754 pDev, pDev->name,
1755#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 37)
1756 netdev_refcnt_read(pDev)
1757#else
1758 atomic_read(&pDev->refcnt)
1759#endif
1760 ));
1761 dev_put(pDev);
1762 }
1763
1764 return NOTIFY_OK;
1765}
1766
1767static int vboxNetFltLinuxDeviceIsUp(PVBOXNETFLTINS pThis, struct net_device *pDev)
1768{
1769 /* Check if we are not suspended and promiscuous mode has not been set. */
1770 if ( pThis->enmTrunkState == INTNETTRUNKIFSTATE_ACTIVE
1771 && !ASMAtomicUoReadBool(&pThis->u.s.fPromiscuousSet))
1772 {
1773 /* Note that there is no need for locking as the kernel got hold of the lock already. */
1774 dev_set_promiscuity(pDev, 1);
1775 ASMAtomicWriteBool(&pThis->u.s.fPromiscuousSet, true);
1776 Log(("vboxNetFltLinuxDeviceIsUp: enabled promiscuous mode on %s (%d)\n", pThis->szName, pDev->promiscuity));
1777 }
1778 else
1779 Log(("vboxNetFltLinuxDeviceIsUp: no need to enable promiscuous mode on %s (%d)\n", pThis->szName, pDev->promiscuity));
1780 return NOTIFY_OK;
1781}
1782
1783static int vboxNetFltLinuxDeviceGoingDown(PVBOXNETFLTINS pThis, struct net_device *pDev)
1784{
1785 /* Undo promiscuous mode if we has set it. */
1786 if (ASMAtomicUoReadBool(&pThis->u.s.fPromiscuousSet))
1787 {
1788 /* Note that there is no need for locking as the kernel got hold of the lock already. */
1789 dev_set_promiscuity(pDev, -1);
1790 ASMAtomicWriteBool(&pThis->u.s.fPromiscuousSet, false);
1791 Log(("vboxNetFltLinuxDeviceGoingDown: disabled promiscuous mode on %s (%d)\n", pThis->szName, pDev->promiscuity));
1792 }
1793 else
1794 Log(("vboxNetFltLinuxDeviceGoingDown: no need to disable promiscuous mode on %s (%d)\n", pThis->szName, pDev->promiscuity));
1795 return NOTIFY_OK;
1796}
1797
1798/**
1799 * Callback for listening to MTU change event.
1800 *
1801 * We need to track changes of host's inteface MTU to discard over-sized frames
1802 * coming from the internal network as they may hang the TX queue of host's
1803 * adapter.
1804 *
1805 * @returns NOTIFY_OK
1806 * @param pThis The netfilter instance.
1807 * @param pDev Pointer to device structure of host's interface.
1808 */
1809static int vboxNetFltLinuxDeviceMtuChange(PVBOXNETFLTINS pThis, struct net_device *pDev)
1810{
1811 ASMAtomicWriteU32(&pThis->u.s.cbMtu, pDev->mtu);
1812 Log(("vboxNetFltLinuxDeviceMtuChange: set MTU for %s to %d\n", pThis->szName, pDev->mtu));
1813 return NOTIFY_OK;
1814}
1815
1816#ifdef LOG_ENABLED
1817/** Stringify the NETDEV_XXX constants. */
1818static const char *vboxNetFltLinuxGetNetDevEventName(unsigned long ulEventType)
1819{
1820 const char *pszEvent = "NETDEV_<unknown>";
1821 switch (ulEventType)
1822 {
1823 case NETDEV_REGISTER: pszEvent = "NETDEV_REGISTER"; break;
1824 case NETDEV_UNREGISTER: pszEvent = "NETDEV_UNREGISTER"; break;
1825 case NETDEV_UP: pszEvent = "NETDEV_UP"; break;
1826 case NETDEV_DOWN: pszEvent = "NETDEV_DOWN"; break;
1827 case NETDEV_REBOOT: pszEvent = "NETDEV_REBOOT"; break;
1828 case NETDEV_CHANGENAME: pszEvent = "NETDEV_CHANGENAME"; break;
1829 case NETDEV_CHANGE: pszEvent = "NETDEV_CHANGE"; break;
1830 case NETDEV_CHANGEMTU: pszEvent = "NETDEV_CHANGEMTU"; break;
1831 case NETDEV_CHANGEADDR: pszEvent = "NETDEV_CHANGEADDR"; break;
1832 case NETDEV_GOING_DOWN: pszEvent = "NETDEV_GOING_DOWN"; break;
1833# ifdef NETDEV_FEAT_CHANGE
1834 case NETDEV_FEAT_CHANGE: pszEvent = "NETDEV_FEAT_CHANGE"; break;
1835# endif
1836 }
1837 return pszEvent;
1838}
1839#endif /* LOG_ENABLED */
1840
1841/**
1842 * Callback for listening to netdevice events.
1843 *
1844 * This works the rediscovery, clean up on unregistration, promiscuity on
1845 * up/down, and GSO feature changes from ethtool.
1846 *
1847 * @returns NOTIFY_OK
1848 * @param self Pointer to our notifier registration block.
1849 * @param ulEventType The event.
1850 * @param ptr Event specific, but it is usually the device it
1851 * relates to.
1852 */
1853static int vboxNetFltLinuxNotifierCallback(struct notifier_block *self, unsigned long ulEventType, void *ptr)
1854
1855{
1856 PVBOXNETFLTINS pThis = VBOX_FLT_NB_TO_INST(self);
1857 struct net_device *pMyDev = ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *);
1858 struct net_device *pDev = VBOX_NETDEV_NOTIFIER_INFO_TO_DEV(ptr);
1859 int rc = NOTIFY_OK;
1860
1861 Log(("VBoxNetFlt: got event %s(0x%lx) on %s, pDev=%p pThis=%p pThis->u.s.pDev=%p\n",
1862 vboxNetFltLinuxGetNetDevEventName(ulEventType), ulEventType, pDev->name, pDev, pThis, pMyDev));
1863
1864 if (ulEventType == NETDEV_REGISTER)
1865 {
1866#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 24) /* cgroups/namespaces introduced */
1867# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 26)
1868# define VBOX_DEV_NET(dev) dev_net(dev)
1869# define VBOX_NET_EQ(n1, n2) net_eq((n1), (n2))
1870# else
1871# define VBOX_DEV_NET(dev) ((dev)->nd_net)
1872# define VBOX_NET_EQ(n1, n2) ((n1) == (n2))
1873# endif
1874 struct net *pMyNet = current->nsproxy->net_ns;
1875 struct net *pDevNet = VBOX_DEV_NET(pDev);
1876
1877 if (VBOX_NET_EQ(pDevNet, pMyNet))
1878#endif /* namespaces */
1879 {
1880 if (strcmp(pDev->name, pThis->szName) == 0)
1881 {
1882 vboxNetFltLinuxAttachToInterface(pThis, pDev);
1883 }
1884 }
1885 }
1886 else
1887 {
1888 if (pDev == pMyDev)
1889 {
1890 switch (ulEventType)
1891 {
1892 case NETDEV_UNREGISTER:
1893 rc = vboxNetFltLinuxUnregisterDevice(pThis, pDev);
1894 break;
1895 case NETDEV_UP:
1896 rc = vboxNetFltLinuxDeviceIsUp(pThis, pDev);
1897 break;
1898 case NETDEV_GOING_DOWN:
1899 rc = vboxNetFltLinuxDeviceGoingDown(pThis, pDev);
1900 break;
1901 case NETDEV_CHANGEMTU:
1902 rc = vboxNetFltLinuxDeviceMtuChange(pThis, pDev);
1903 break;
1904 case NETDEV_CHANGENAME:
1905 break;
1906#ifdef NETDEV_FEAT_CHANGE
1907 case NETDEV_FEAT_CHANGE:
1908 vboxNetFltLinuxReportNicGsoCapabilities(pThis);
1909 break;
1910#endif
1911 }
1912 }
1913 }
1914
1915 return rc;
1916}
1917
1918/*
1919 * Initial enumeration of netdevs. Called with NETDEV_REGISTER by
1920 * register_netdevice_notifier() under rtnl lock.
1921 */
1922static int vboxNetFltLinuxEnumeratorCallback(struct notifier_block *self, unsigned long ulEventType, void *ptr)
1923{
1924 PVBOXNETFLTINS pThis = ((PVBOXNETFLTNOTIFIER)self)->pThis;
1925 struct net_device *dev = VBOX_NETDEV_NOTIFIER_INFO_TO_DEV(ptr);
1926 struct in_device *in_dev;
1927 struct inet6_dev *in6_dev;
1928
1929 if (ulEventType != NETDEV_REGISTER)
1930 return NOTIFY_OK;
1931
1932 if (RT_UNLIKELY(pThis->pSwitchPort->pfnNotifyHostAddress == NULL))
1933 return NOTIFY_OK;
1934
1935 /*
1936 * IPv4
1937 */
1938#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 14)
1939 in_dev = __in_dev_get_rtnl(dev);
1940#else
1941 in_dev = __in_dev_get(dev);
1942#endif
1943 if (in_dev != NULL)
1944 {
1945 for_ifa(in_dev) {
1946 if (VBOX_IPV4_IS_LOOPBACK(ifa->ifa_address))
1947 return NOTIFY_OK;
1948
1949 if ( dev != pThis->u.s.pDev
1950 && VBOX_IPV4_IS_LINKLOCAL_169(ifa->ifa_address))
1951 continue;
1952
1953 Log(("%s: %s: IPv4 addr %RTnaipv4 mask %RTnaipv4\n",
1954 __FUNCTION__, VBOX_NETDEV_NAME(dev),
1955 ifa->ifa_address, ifa->ifa_mask));
1956
1957 pThis->pSwitchPort->pfnNotifyHostAddress(pThis->pSwitchPort,
1958 /* :fAdded */ true, kIntNetAddrType_IPv4, &ifa->ifa_address);
1959 } endfor_ifa(in_dev);
1960 }
1961
1962 /*
1963 * IPv6
1964 */
1965 in6_dev = __in6_dev_get(dev);
1966 if (in6_dev != NULL)
1967 {
1968 struct inet6_ifaddr *ifa;
1969
1970 read_lock_bh(&in6_dev->lock);
1971#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 35)
1972 list_for_each_entry(ifa, &in6_dev->addr_list, if_list)
1973#else
1974 for (ifa = in6_dev->addr_list; ifa != NULL; ifa = ifa->if_next)
1975#endif
1976 {
1977 if ( dev != pThis->u.s.pDev
1978 && ipv6_addr_type(&ifa->addr) & (IPV6_ADDR_LINKLOCAL | IPV6_ADDR_LOOPBACK))
1979 continue;
1980
1981 Log(("%s: %s: IPv6 addr %RTnaipv6/%u\n",
1982 __FUNCTION__, VBOX_NETDEV_NAME(dev),
1983 &ifa->addr, (unsigned)ifa->prefix_len));
1984
1985 pThis->pSwitchPort->pfnNotifyHostAddress(pThis->pSwitchPort,
1986 /* :fAdded */ true, kIntNetAddrType_IPv6, &ifa->addr);
1987 }
1988 read_unlock_bh(&in6_dev->lock);
1989 }
1990
1991 return NOTIFY_OK;
1992}
1993
1994
1995static int vboxNetFltLinuxNotifierIPv4Callback(struct notifier_block *self, unsigned long ulEventType, void *ptr)
1996{
1997 PVBOXNETFLTINS pThis = RT_FROM_MEMBER(self, VBOXNETFLTINS, u.s.NotifierIPv4);
1998 struct net_device *pDev, *pEventDev;
1999 struct in_ifaddr *ifa = (struct in_ifaddr *)ptr;
2000 bool fMyDev;
2001 int rc = NOTIFY_OK;
2002
2003 pDev = vboxNetFltLinuxRetainNetDev(pThis);
2004 pEventDev = ifa->ifa_dev->dev;
2005 fMyDev = (pDev == pEventDev);
2006 Log(("VBoxNetFlt: %s: IPv4 event %s(0x%lx) %s: addr %RTnaipv4 mask %RTnaipv4\n",
2007 pDev ? VBOX_NETDEV_NAME(pDev) : "<???>",
2008 vboxNetFltLinuxGetNetDevEventName(ulEventType), ulEventType,
2009 pEventDev ? VBOX_NETDEV_NAME(pEventDev) : "<???>",
2010 ifa->ifa_address, ifa->ifa_mask));
2011
2012 if (pDev != NULL)
2013 vboxNetFltLinuxReleaseNetDev(pThis, pDev);
2014
2015 if (VBOX_IPV4_IS_LOOPBACK(ifa->ifa_address))
2016 return NOTIFY_OK;
2017
2018 if ( !fMyDev
2019 && VBOX_IPV4_IS_LINKLOCAL_169(ifa->ifa_address))
2020 return NOTIFY_OK;
2021
2022 if (pThis->pSwitchPort->pfnNotifyHostAddress)
2023 {
2024 bool fAdded;
2025 if (ulEventType == NETDEV_UP)
2026 fAdded = true;
2027 else if (ulEventType == NETDEV_DOWN)
2028 fAdded = false;
2029 else
2030 return NOTIFY_OK;
2031
2032 pThis->pSwitchPort->pfnNotifyHostAddress(pThis->pSwitchPort, fAdded,
2033 kIntNetAddrType_IPv4, &ifa->ifa_local);
2034 }
2035
2036 return rc;
2037}
2038
2039
2040static int vboxNetFltLinuxNotifierIPv6Callback(struct notifier_block *self, unsigned long ulEventType, void *ptr)
2041{
2042 PVBOXNETFLTINS pThis = RT_FROM_MEMBER(self, VBOXNETFLTINS, u.s.NotifierIPv6);
2043 struct net_device *pDev, *pEventDev;
2044 struct inet6_ifaddr *ifa = (struct inet6_ifaddr *)ptr;
2045 bool fMyDev;
2046 int rc = NOTIFY_OK;
2047
2048 pDev = vboxNetFltLinuxRetainNetDev(pThis);
2049 pEventDev = ifa->idev->dev;
2050 fMyDev = (pDev == pEventDev);
2051 Log(("VBoxNetFlt: %s: IPv6 event %s(0x%lx) %s: %RTnaipv6\n",
2052 pDev ? VBOX_NETDEV_NAME(pDev) : "<???>",
2053 vboxNetFltLinuxGetNetDevEventName(ulEventType), ulEventType,
2054 pEventDev ? VBOX_NETDEV_NAME(pEventDev) : "<???>",
2055 &ifa->addr));
2056
2057 if (pDev != NULL)
2058 vboxNetFltLinuxReleaseNetDev(pThis, pDev);
2059
2060 if ( !fMyDev
2061 && ipv6_addr_type(&ifa->addr) & (IPV6_ADDR_LINKLOCAL | IPV6_ADDR_LOOPBACK))
2062 return NOTIFY_OK;
2063
2064 if (pThis->pSwitchPort->pfnNotifyHostAddress)
2065 {
2066 bool fAdded;
2067 if (ulEventType == NETDEV_UP)
2068 fAdded = true;
2069 else if (ulEventType == NETDEV_DOWN)
2070 fAdded = false;
2071 else
2072 return NOTIFY_OK;
2073
2074 pThis->pSwitchPort->pfnNotifyHostAddress(pThis->pSwitchPort, fAdded,
2075 kIntNetAddrType_IPv6, &ifa->addr);
2076 }
2077
2078 return rc;
2079}
2080
2081
2082bool vboxNetFltOsMaybeRediscovered(PVBOXNETFLTINS pThis)
2083{
2084 return !ASMAtomicUoReadBool(&pThis->fDisconnectedFromHost);
2085}
2086
2087int vboxNetFltPortOsXmit(PVBOXNETFLTINS pThis, void *pvIfData, PINTNETSG pSG, uint32_t fDst)
2088{
2089 struct net_device * pDev;
2090 int err;
2091 int rc = VINF_SUCCESS;
2092 IPRT_LINUX_SAVE_EFL_AC();
2093 NOREF(pvIfData);
2094
2095 LogFlow(("vboxNetFltPortOsXmit: pThis=%p (%s)\n", pThis, pThis->szName));
2096
2097 pDev = vboxNetFltLinuxRetainNetDev(pThis);
2098 if (pDev)
2099 {
2100 /*
2101 * Create a sk_buff for the gather list and push it onto the wire.
2102 */
2103 if (fDst & INTNETTRUNKDIR_WIRE)
2104 {
2105 struct sk_buff *pBuf = vboxNetFltLinuxSkBufFromSG(pThis, pSG, true);
2106 if (pBuf)
2107 {
2108 vboxNetFltDumpPacket(pSG, true, "wire", 1);
2109 Log4(("vboxNetFltPortOsXmit: pBuf->cb dump:\n%.*Rhxd\n", sizeof(pBuf->cb), pBuf->cb));
2110 Log4(("vboxNetFltPortOsXmit: dev_queue_xmit(%p)\n", pBuf));
2111 err = dev_queue_xmit(pBuf);
2112 if (err)
2113 rc = RTErrConvertFromErrno(err);
2114 }
2115 else
2116 rc = VERR_NO_MEMORY;
2117 }
2118
2119 /*
2120 * Create a sk_buff for the gather list and push it onto the host stack.
2121 */
2122 if (fDst & INTNETTRUNKDIR_HOST)
2123 {
2124 struct sk_buff *pBuf = vboxNetFltLinuxSkBufFromSG(pThis, pSG, false);
2125 if (pBuf)
2126 {
2127 vboxNetFltDumpPacket(pSG, true, "host", (fDst & INTNETTRUNKDIR_WIRE) ? 0 : 1);
2128 Log4(("vboxNetFltPortOsXmit: pBuf->cb dump:\n%.*Rhxd\n", sizeof(pBuf->cb), pBuf->cb));
2129 Log4(("vboxNetFltPortOsXmit: netif_rx_ni(%p)\n", pBuf));
2130 err = netif_rx_ni(pBuf);
2131 if (err)
2132 rc = RTErrConvertFromErrno(err);
2133 }
2134 else
2135 rc = VERR_NO_MEMORY;
2136 }
2137
2138 vboxNetFltLinuxReleaseNetDev(pThis, pDev);
2139 }
2140
2141 IPRT_LINUX_RESTORE_EFL_AC();
2142 return rc;
2143}
2144
2145
2146void vboxNetFltPortOsSetActive(PVBOXNETFLTINS pThis, bool fActive)
2147{
2148 struct net_device *pDev;
2149 IPRT_LINUX_SAVE_EFL_AC();
2150
2151 LogFlow(("vboxNetFltPortOsSetActive: pThis=%p (%s), fActive=%RTbool, fDisablePromiscuous=%RTbool\n",
2152 pThis, pThis->szName, fActive, pThis->fDisablePromiscuous));
2153
2154 if (pThis->fDisablePromiscuous)
2155 return;
2156
2157 pDev = vboxNetFltLinuxRetainNetDev(pThis);
2158 if (pDev)
2159 {
2160 /*
2161 * This api is a bit weird, the best reference is the code.
2162 *
2163 * Also, we have a bit or race conditions wrt the maintenance of
2164 * host the interface promiscuity for vboxNetFltPortOsIsPromiscuous.
2165 */
2166#ifdef LOG_ENABLED
2167 u_int16_t fIf;
2168 unsigned const cPromiscBefore = pDev->promiscuity;
2169#endif
2170 if (fActive)
2171 {
2172 Assert(!pThis->u.s.fPromiscuousSet);
2173
2174 rtnl_lock();
2175 dev_set_promiscuity(pDev, 1);
2176 rtnl_unlock();
2177 pThis->u.s.fPromiscuousSet = true;
2178 Log(("vboxNetFltPortOsSetActive: enabled promiscuous mode on %s (%d)\n", pThis->szName, pDev->promiscuity));
2179 }
2180 else
2181 {
2182 if (pThis->u.s.fPromiscuousSet)
2183 {
2184 rtnl_lock();
2185 dev_set_promiscuity(pDev, -1);
2186 rtnl_unlock();
2187 Log(("vboxNetFltPortOsSetActive: disabled promiscuous mode on %s (%d)\n", pThis->szName, pDev->promiscuity));
2188 }
2189 pThis->u.s.fPromiscuousSet = false;
2190
2191#ifdef LOG_ENABLED
2192 fIf = dev_get_flags(pDev);
2193 Log(("VBoxNetFlt: fIf=%#x; %d->%d\n", fIf, cPromiscBefore, pDev->promiscuity));
2194#endif
2195 }
2196
2197 vboxNetFltLinuxReleaseNetDev(pThis, pDev);
2198 }
2199 IPRT_LINUX_RESTORE_EFL_AC();
2200}
2201
2202
2203int vboxNetFltOsDisconnectIt(PVBOXNETFLTINS pThis)
2204{
2205 /*
2206 * Remove packet handler when we get disconnected from internal switch as
2207 * we don't want the handler to forward packets to disconnected switch.
2208 */
2209 if (ASMAtomicCmpXchgBool(&pThis->u.s.fPacketHandler, false, true))
2210 {
2211 IPRT_LINUX_SAVE_EFL_AC();
2212 dev_remove_pack(&pThis->u.s.PacketType);
2213 Log(("vboxNetFltOsDisconnectIt: this=%p: Packet handler removed.\n", pThis));
2214 IPRT_LINUX_RESTORE_EFL_AC();
2215 }
2216 return VINF_SUCCESS;
2217}
2218
2219
2220int vboxNetFltOsConnectIt(PVBOXNETFLTINS pThis)
2221{
2222 IPRT_LINUX_SAVE_EFL_AC();
2223
2224 /*
2225 * Report the GSO capabilities of the host and device (if connected).
2226 * Note! No need to mark ourselves busy here.
2227 */
2228 /** @todo duplicate work here now? Attach */
2229#if defined(VBOXNETFLT_WITH_GSO_XMIT_HOST)
2230 Log3(("vboxNetFltOsConnectIt: reporting host tso tso6 ufo\n"));
2231 pThis->pSwitchPort->pfnReportGsoCapabilities(pThis->pSwitchPort,
2232 0
2233 | RT_BIT_32(PDMNETWORKGSOTYPE_IPV4_TCP)
2234 | RT_BIT_32(PDMNETWORKGSOTYPE_IPV6_TCP)
2235 | RT_BIT_32(PDMNETWORKGSOTYPE_IPV4_UDP)
2236# if 0 /** @todo GSO: Test UDP offloading (UFO) on linux. */
2237 | RT_BIT_32(PDMNETWORKGSOTYPE_IPV6_UDP)
2238# endif
2239 , INTNETTRUNKDIR_HOST);
2240
2241#endif
2242 vboxNetFltLinuxReportNicGsoCapabilities(pThis);
2243
2244 IPRT_LINUX_RESTORE_EFL_AC();
2245 return VINF_SUCCESS;
2246}
2247
2248
2249void vboxNetFltOsDeleteInstance(PVBOXNETFLTINS pThis)
2250{
2251 struct net_device *pDev;
2252 bool fRegistered;
2253 IPRT_LINUX_SAVE_EFL_AC();
2254
2255#ifdef VBOXNETFLT_WITH_HOST2WIRE_FILTER
2256 vboxNetFltLinuxUnhookDev(pThis, NULL);
2257#endif
2258
2259 /** @todo This code may race vboxNetFltLinuxUnregisterDevice (very very
2260 * unlikely, but none the less). Since it doesn't actually update the
2261 * state (just reads it), it is likely to panic in some interesting
2262 * ways. */
2263
2264 RTSpinlockAcquire(pThis->hSpinlock);
2265 pDev = ASMAtomicUoReadPtrT(&pThis->u.s.pDev, struct net_device *);
2266 fRegistered = ASMAtomicXchgBool(&pThis->u.s.fRegistered, false);
2267 RTSpinlockRelease(pThis->hSpinlock);
2268
2269 if (fRegistered)
2270 {
2271 vboxNetFltSetLinkState(pThis, pDev, false);
2272
2273#ifndef VBOXNETFLT_LINUX_NO_XMIT_QUEUE
2274 skb_queue_purge(&pThis->u.s.XmitQueue);
2275#endif
2276 Log(("vboxNetFltOsDeleteInstance: this=%p: xmit queue purged.\n", pThis));
2277 Log(("vboxNetFltOsDeleteInstance: Device %p(%s) released. ref=%d\n",
2278 pDev, pDev->name,
2279#if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 37)
2280 netdev_refcnt_read(pDev)
2281#else
2282 atomic_read(&pDev->refcnt)
2283#endif
2284 ));
2285 dev_put(pDev);
2286 }
2287
2288 unregister_inet6addr_notifier(&pThis->u.s.NotifierIPv6);
2289 unregister_inetaddr_notifier(&pThis->u.s.NotifierIPv4);
2290
2291 Log(("vboxNetFltOsDeleteInstance: this=%p: Notifier removed.\n", pThis));
2292 unregister_netdevice_notifier(&pThis->u.s.Notifier);
2293 module_put(THIS_MODULE);
2294
2295 IPRT_LINUX_RESTORE_EFL_AC();
2296}
2297
2298
2299int vboxNetFltOsInitInstance(PVBOXNETFLTINS pThis, void *pvContext)
2300{
2301 int err;
2302 IPRT_LINUX_SAVE_EFL_AC();
2303 NOREF(pvContext);
2304
2305 pThis->u.s.Notifier.notifier_call = vboxNetFltLinuxNotifierCallback;
2306 err = register_netdevice_notifier(&pThis->u.s.Notifier);
2307 if (err)
2308 {
2309 IPRT_LINUX_RESTORE_EFL_AC();
2310 return VERR_INTNET_FLT_IF_FAILED;
2311 }
2312 if (!pThis->u.s.fRegistered)
2313 {
2314 unregister_netdevice_notifier(&pThis->u.s.Notifier);
2315 LogRel(("VBoxNetFlt: failed to find %s.\n", pThis->szName));
2316 IPRT_LINUX_RESTORE_EFL_AC();
2317 return VERR_INTNET_FLT_IF_NOT_FOUND;
2318 }
2319
2320 Log(("vboxNetFltOsInitInstance: this=%p: Notifier installed.\n", pThis));
2321 if ( pThis->fDisconnectedFromHost
2322 || !try_module_get(THIS_MODULE))
2323 {
2324 IPRT_LINUX_RESTORE_EFL_AC();
2325 return VERR_INTNET_FLT_IF_FAILED;
2326 }
2327
2328 if (pThis->pSwitchPort->pfnNotifyHostAddress)
2329 {
2330 VBOXNETFLTNOTIFIER Enumerator;
2331
2332 /*
2333 * register_inetaddr_notifier() and register_inet6addr_notifier()
2334 * do not call the callback for existing devices. Enumerating
2335 * all network devices explicitly is a bit of an ifdef mess,
2336 * so co-opt register_netdevice_notifier() to do that for us.
2337 */
2338 RT_ZERO(Enumerator);
2339 Enumerator.Notifier.notifier_call = vboxNetFltLinuxEnumeratorCallback;
2340 Enumerator.pThis = pThis;
2341
2342 err = register_netdevice_notifier(&Enumerator.Notifier);
2343 if (err)
2344 {
2345 LogRel(("%s: failed to enumerate network devices: error %d\n", __FUNCTION__, err));
2346 IPRT_LINUX_RESTORE_EFL_AC();
2347 return VINF_SUCCESS;
2348 }
2349
2350 unregister_netdevice_notifier(&Enumerator.Notifier);
2351
2352 pThis->u.s.NotifierIPv4.notifier_call = vboxNetFltLinuxNotifierIPv4Callback;
2353 err = register_inetaddr_notifier(&pThis->u.s.NotifierIPv4);
2354 if (err)
2355 LogRel(("%s: failed to register IPv4 notifier: error %d\n", __FUNCTION__, err));
2356
2357 pThis->u.s.NotifierIPv6.notifier_call = vboxNetFltLinuxNotifierIPv6Callback;
2358 err = register_inet6addr_notifier(&pThis->u.s.NotifierIPv6);
2359 if (err)
2360 LogRel(("%s: failed to register IPv6 notifier: error %d\n", __FUNCTION__, err));
2361 }
2362
2363 IPRT_LINUX_RESTORE_EFL_AC();
2364 return VINF_SUCCESS;
2365}
2366
2367int vboxNetFltOsPreInitInstance(PVBOXNETFLTINS pThis)
2368{
2369 IPRT_LINUX_SAVE_EFL_AC();
2370
2371 /*
2372 * Init the linux specific members.
2373 */
2374 ASMAtomicUoWriteNullPtr(&pThis->u.s.pDev);
2375 pThis->u.s.fRegistered = false;
2376 pThis->u.s.fPromiscuousSet = false;
2377 pThis->u.s.fPacketHandler = false;
2378 memset(&pThis->u.s.PacketType, 0, sizeof(pThis->u.s.PacketType));
2379#ifndef VBOXNETFLT_LINUX_NO_XMIT_QUEUE
2380 skb_queue_head_init(&pThis->u.s.XmitQueue);
2381# if LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 20)
2382 INIT_WORK(&pThis->u.s.XmitTask, vboxNetFltLinuxXmitTask);
2383# else
2384 INIT_WORK(&pThis->u.s.XmitTask, vboxNetFltLinuxXmitTask, &pThis->u.s.XmitTask);
2385# endif
2386#endif
2387
2388 IPRT_LINUX_RESTORE_EFL_AC();
2389 return VINF_SUCCESS;
2390}
2391
2392
2393void vboxNetFltPortOsNotifyMacAddress(PVBOXNETFLTINS pThis, void *pvIfData, PCRTMAC pMac)
2394{
2395 NOREF(pThis); NOREF(pvIfData); NOREF(pMac);
2396}
2397
2398
2399int vboxNetFltPortOsConnectInterface(PVBOXNETFLTINS pThis, void *pvIf, void **pvIfData)
2400{
2401 /* Nothing to do */
2402 NOREF(pThis); NOREF(pvIf); NOREF(pvIfData);
2403 return VINF_SUCCESS;
2404}
2405
2406
2407int vboxNetFltPortOsDisconnectInterface(PVBOXNETFLTINS pThis, void *pvIfData)
2408{
2409 /* Nothing to do */
2410 NOREF(pThis); NOREF(pvIfData);
2411 return VINF_SUCCESS;
2412}
2413
Note: See TracBrowser for help on using the repository browser.

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette