]> Git Repo - qemu.git/blame - net/filter.c
block: Disallow snapshots if the overlay doesn't support backing files
[qemu.git] / net / filter.c
CommitLineData
fdccce45
YH
1/*
2 * Copyright (c) 2015 FUJITSU LIMITED
3 * Author: Yang Hongyang <[email protected]>
4 *
5 * This work is licensed under the terms of the GNU GPL, version 2 or
6 * later. See the COPYING file in the top-level directory.
7 */
8
9#include "qemu-common.h"
10#include "qapi/qmp/qerror.h"
11#include "qemu/error-report.h"
12
13#include "net/filter.h"
14#include "net/net.h"
15#include "net/vhost_net.h"
16#include "qom/object_interfaces.h"
7ef7bc85 17#include "qemu/iov.h"
a4960f52 18#include "qapi/string-output-visitor.h"
fdccce45 19
e64c770d
YH
20ssize_t qemu_netfilter_receive(NetFilterState *nf,
21 NetFilterDirection direction,
22 NetClientState *sender,
23 unsigned flags,
24 const struct iovec *iov,
25 int iovcnt,
26 NetPacketSent *sent_cb)
27{
28 if (nf->direction == direction ||
29 nf->direction == NET_FILTER_DIRECTION_ALL) {
30 return NETFILTER_GET_CLASS(OBJECT(nf))->receive_iov(
31 nf, sender, flags, iov, iovcnt, sent_cb);
32 }
33
34 return 0;
35}
36
7ef7bc85
YH
37ssize_t qemu_netfilter_pass_to_next(NetClientState *sender,
38 unsigned flags,
39 const struct iovec *iov,
40 int iovcnt,
41 void *opaque)
42{
43 int ret = 0;
44 int direction;
45 NetFilterState *nf = opaque;
46 NetFilterState *next = QTAILQ_NEXT(nf, next);
47
48 if (!sender || !sender->peer) {
49 /* no receiver, or sender been deleted, no need to pass it further */
50 goto out;
51 }
52
53 if (nf->direction == NET_FILTER_DIRECTION_ALL) {
54 if (sender == nf->netdev) {
55 /* This packet is sent by netdev itself */
56 direction = NET_FILTER_DIRECTION_TX;
57 } else {
58 direction = NET_FILTER_DIRECTION_RX;
59 }
60 } else {
61 direction = nf->direction;
62 }
63
64 while (next) {
65 /*
66 * if qemu_netfilter_pass_to_next been called, means that
67 * the packet has been hold by filter and has already retured size
68 * to the sender, so sent_cb shouldn't be called later, just
69 * pass NULL to next.
70 */
71 ret = qemu_netfilter_receive(next, direction, sender, flags, iov,
72 iovcnt, NULL);
73 if (ret) {
74 return ret;
75 }
76 next = QTAILQ_NEXT(next, next);
77 }
78
79 /*
80 * We have gone through all filters, pass it to receiver.
81 * Do the valid check again incase sender or receiver been
82 * deleted while we go through filters.
83 */
84 if (sender && sender->peer) {
85 qemu_net_queue_send_iov(sender->peer->incoming_queue,
86 sender, flags, iov, iovcnt, NULL);
87 }
88
89out:
90 /* no receiver, or sender been deleted */
91 return iov_size(iov, iovcnt);
92}
93
fdccce45
YH
94static char *netfilter_get_netdev_id(Object *obj, Error **errp)
95{
96 NetFilterState *nf = NETFILTER(obj);
97
98 return g_strdup(nf->netdev_id);
99}
100
101static void netfilter_set_netdev_id(Object *obj, const char *str, Error **errp)
102{
103 NetFilterState *nf = NETFILTER(obj);
104
105 nf->netdev_id = g_strdup(str);
106}
107
108static int netfilter_get_direction(Object *obj, Error **errp G_GNUC_UNUSED)
109{
110 NetFilterState *nf = NETFILTER(obj);
111 return nf->direction;
112}
113
114static void netfilter_set_direction(Object *obj, int direction, Error **errp)
115{
116 NetFilterState *nf = NETFILTER(obj);
117 nf->direction = direction;
118}
119
120static void netfilter_init(Object *obj)
121{
122 object_property_add_str(obj, "netdev",
123 netfilter_get_netdev_id, netfilter_set_netdev_id,
124 NULL);
125 object_property_add_enum(obj, "queue", "NetFilterDirection",
126 NetFilterDirection_lookup,
127 netfilter_get_direction, netfilter_set_direction,
128 NULL);
129}
130
131static void netfilter_complete(UserCreatable *uc, Error **errp)
132{
133 NetFilterState *nf = NETFILTER(uc);
134 NetClientState *ncs[MAX_QUEUE_NUM];
135 NetFilterClass *nfc = NETFILTER_GET_CLASS(uc);
136 int queues;
137 Error *local_err = NULL;
a4960f52
YH
138 char *str, *info;
139 ObjectProperty *prop;
140 StringOutputVisitor *ov;
fdccce45
YH
141
142 if (!nf->netdev_id) {
143 error_setg(errp, "Parameter 'netdev' is required");
144 return;
145 }
146
147 queues = qemu_find_net_clients_except(nf->netdev_id, ncs,
148 NET_CLIENT_OPTIONS_KIND_NIC,
149 MAX_QUEUE_NUM);
150 if (queues < 1) {
151 error_setg(errp, QERR_INVALID_PARAMETER_VALUE, "netdev",
152 "a network backend id");
153 return;
154 } else if (queues > 1) {
155 error_setg(errp, "multiqueue is not supported");
156 return;
157 }
158
159 if (get_vhost_net(ncs[0])) {
160 error_setg(errp, "Vhost is not supported");
161 return;
162 }
163
164 nf->netdev = ncs[0];
165
166 if (nfc->setup) {
167 nfc->setup(nf, &local_err);
168 if (local_err) {
169 error_propagate(errp, local_err);
170 return;
171 }
172 }
173 QTAILQ_INSERT_TAIL(&nf->netdev->filters, nf, next);
a4960f52
YH
174
175 /* generate info str */
176 QTAILQ_FOREACH(prop, &OBJECT(nf)->properties, node) {
177 if (!strcmp(prop->name, "type")) {
178 continue;
179 }
180 ov = string_output_visitor_new(false);
181 object_property_get(OBJECT(nf), string_output_get_visitor(ov),
182 prop->name, errp);
183 str = string_output_get_string(ov);
184 string_output_visitor_cleanup(ov);
185 info = g_strdup_printf(",%s=%s", prop->name, str);
186 g_strlcat(nf->info_str, info, sizeof(nf->info_str));
187 g_free(str);
188 g_free(info);
189 }
fdccce45
YH
190}
191
192static void netfilter_finalize(Object *obj)
193{
194 NetFilterState *nf = NETFILTER(obj);
195 NetFilterClass *nfc = NETFILTER_GET_CLASS(obj);
196
197 if (nfc->cleanup) {
198 nfc->cleanup(nf);
199 }
200
201 if (nf->netdev && !QTAILQ_EMPTY(&nf->netdev->filters)) {
202 QTAILQ_REMOVE(&nf->netdev->filters, nf, next);
203 }
204}
205
206static void netfilter_class_init(ObjectClass *oc, void *data)
207{
208 UserCreatableClass *ucc = USER_CREATABLE_CLASS(oc);
209
210 ucc->complete = netfilter_complete;
211}
212
213static const TypeInfo netfilter_info = {
214 .name = TYPE_NETFILTER,
215 .parent = TYPE_OBJECT,
216 .abstract = true,
217 .class_size = sizeof(NetFilterClass),
218 .class_init = netfilter_class_init,
219 .instance_size = sizeof(NetFilterState),
220 .instance_init = netfilter_init,
221 .instance_finalize = netfilter_finalize,
222 .interfaces = (InterfaceInfo[]) {
223 { TYPE_USER_CREATABLE },
224 { }
225 }
226};
227
228static void register_types(void)
229{
230 type_register_static(&netfilter_info);
231}
232
233type_init(register_types);
This page took 0.050374 seconds and 4 git commands to generate.