]> Git Repo - qemu.git/blame - net/filter-rewriter.c
net: List available netdevs with "-netdev help"
[qemu.git] / net / filter-rewriter.c
CommitLineData
e6eee8ab
ZC
1/*
2 * Copyright (c) 2016 HUAWEI TECHNOLOGIES CO., LTD.
3 * Copyright (c) 2016 FUJITSU LIMITED
4 * Copyright (c) 2016 Intel Corporation
5 *
6 * Author: Zhang Chen <[email protected]>
7 *
8 * This work is licensed under the terms of the GNU GPL, version 2 or
9 * later. See the COPYING file in the top-level directory.
10 */
11
12#include "qemu/osdep.h"
30656b09 13#include "trace.h"
e6eee8ab
ZC
14#include "net/colo.h"
15#include "net/filter.h"
16#include "net/net.h"
17#include "qemu-common.h"
4b39bdce 18#include "qemu/error-report.h"
e6eee8ab
ZC
19#include "qapi-visit.h"
20#include "qom/object.h"
21#include "qemu/main-loop.h"
22#include "qemu/iov.h"
23#include "net/checksum.h"
24
25#define FILTER_COLO_REWRITER(obj) \
26 OBJECT_CHECK(RewriterState, (obj), TYPE_FILTER_REWRITER)
27
28#define TYPE_FILTER_REWRITER "filter-rewriter"
29
30typedef struct RewriterState {
31 NetFilterState parent_obj;
32 NetQueue *incoming_queue;
33 /* hashtable to save connection */
34 GHashTable *connection_track_table;
4b39bdce 35 bool vnet_hdr;
e6eee8ab
ZC
36} RewriterState;
37
38static void filter_rewriter_flush(NetFilterState *nf)
39{
40 RewriterState *s = FILTER_COLO_REWRITER(nf);
41
42 if (!qemu_net_queue_flush(s->incoming_queue)) {
43 /* Unable to empty the queue, purge remaining packets */
44 qemu_net_queue_purge(s->incoming_queue, nf->netdev);
45 }
46}
47
afe46124
ZC
48/*
49 * Return 1 on success, if return 0 means the pkt
50 * is not TCP packet
51 */
52static int is_tcp_packet(Packet *pkt)
53{
54 if (!parse_packet_early(pkt) &&
55 pkt->ip->ip_p == IPPROTO_TCP) {
56 return 1;
57 } else {
58 return 0;
59 }
60}
61
30656b09
ZC
62/* handle tcp packet from primary guest */
63static int handle_primary_tcp_pkt(NetFilterState *nf,
64 Connection *conn,
65 Packet *pkt)
66{
67 struct tcphdr *tcp_pkt;
68
69 tcp_pkt = (struct tcphdr *)pkt->transport_header;
d87aa138 70 if (trace_event_get_state_backends(TRACE_COLO_FILTER_REWRITER_DEBUG)) {
2061c14c
ZC
71 trace_colo_filter_rewriter_pkt_info(__func__,
72 inet_ntoa(pkt->ip->ip_src), inet_ntoa(pkt->ip->ip_dst),
30656b09
ZC
73 ntohl(tcp_pkt->th_seq), ntohl(tcp_pkt->th_ack),
74 tcp_pkt->th_flags);
75 trace_colo_filter_rewriter_conn_offset(conn->offset);
30656b09
ZC
76 }
77
78 if (((tcp_pkt->th_flags & (TH_ACK | TH_SYN)) == TH_SYN)) {
79 /*
80 * we use this flag update offset func
81 * run once in independent tcp connection
82 */
83 conn->syn_flag = 1;
84 }
85
86 if (((tcp_pkt->th_flags & (TH_ACK | TH_SYN)) == TH_ACK)) {
87 if (conn->syn_flag) {
88 /*
89 * offset = secondary_seq - primary seq
90 * ack packet sent by guest from primary node,
91 * so we use th_ack - 1 get primary_seq
92 */
93 conn->offset -= (ntohl(tcp_pkt->th_ack) - 1);
94 conn->syn_flag = 0;
95 }
db0a762e
HZ
96 if (conn->offset) {
97 /* handle packets to the secondary from the primary */
98 tcp_pkt->th_ack = htonl(ntohl(tcp_pkt->th_ack) + conn->offset);
30656b09 99
6ce310b5
ZC
100 net_checksum_calculate((uint8_t *)pkt->data + pkt->vnet_hdr_len,
101 pkt->size - pkt->vnet_hdr_len);
db0a762e 102 }
30656b09
ZC
103 }
104
105 return 0;
106}
107
108/* handle tcp packet from secondary guest */
109static int handle_secondary_tcp_pkt(NetFilterState *nf,
110 Connection *conn,
111 Packet *pkt)
112{
113 struct tcphdr *tcp_pkt;
114
115 tcp_pkt = (struct tcphdr *)pkt->transport_header;
116
d87aa138 117 if (trace_event_get_state_backends(TRACE_COLO_FILTER_REWRITER_DEBUG)) {
2061c14c
ZC
118 trace_colo_filter_rewriter_pkt_info(__func__,
119 inet_ntoa(pkt->ip->ip_src), inet_ntoa(pkt->ip->ip_dst),
30656b09
ZC
120 ntohl(tcp_pkt->th_seq), ntohl(tcp_pkt->th_ack),
121 tcp_pkt->th_flags);
122 trace_colo_filter_rewriter_conn_offset(conn->offset);
30656b09
ZC
123 }
124
125 if (((tcp_pkt->th_flags & (TH_ACK | TH_SYN)) == (TH_ACK | TH_SYN))) {
126 /*
127 * save offset = secondary_seq and then
128 * in handle_primary_tcp_pkt make offset
129 * = secondary_seq - primary_seq
130 */
131 conn->offset = ntohl(tcp_pkt->th_seq);
132 }
133
134 if ((tcp_pkt->th_flags & (TH_ACK | TH_SYN)) == TH_ACK) {
db0a762e
HZ
135 /* Only need to adjust seq while offset is Non-zero */
136 if (conn->offset) {
137 /* handle packets to the primary from the secondary*/
138 tcp_pkt->th_seq = htonl(ntohl(tcp_pkt->th_seq) - conn->offset);
30656b09 139
6ce310b5
ZC
140 net_checksum_calculate((uint8_t *)pkt->data + pkt->vnet_hdr_len,
141 pkt->size - pkt->vnet_hdr_len);
db0a762e 142 }
30656b09
ZC
143 }
144
145 return 0;
146}
147
e6eee8ab
ZC
148static ssize_t colo_rewriter_receive_iov(NetFilterState *nf,
149 NetClientState *sender,
150 unsigned flags,
151 const struct iovec *iov,
152 int iovcnt,
153 NetPacketSent *sent_cb)
154{
afe46124
ZC
155 RewriterState *s = FILTER_COLO_REWRITER(nf);
156 Connection *conn;
157 ConnectionKey key;
158 Packet *pkt;
159 ssize_t size = iov_size(iov, iovcnt);
4b39bdce 160 ssize_t vnet_hdr_len = 0;
afe46124
ZC
161 char *buf = g_malloc0(size);
162
163 iov_to_buf(iov, iovcnt, 0, buf, size);
4b39bdce
ZC
164
165 if (s->vnet_hdr) {
166 vnet_hdr_len = nf->netdev->vnet_hdr_len;
167 }
168
169 pkt = packet_new(buf, size, vnet_hdr_len);
2061c14c 170 g_free(buf);
afe46124 171
e6eee8ab
ZC
172 /*
173 * if we get tcp packet
174 * we will rewrite it to make secondary guest's
175 * connection established successfully
176 */
afe46124
ZC
177 if (pkt && is_tcp_packet(pkt)) {
178
179 fill_connection_key(pkt, &key);
180
181 if (sender == nf->netdev) {
182 /*
183 * We need make tcp TX and RX packet
184 * into one connection.
185 */
186 reverse_connection_key(&key);
187 }
188 conn = connection_get(s->connection_track_table,
189 &key,
190 NULL);
191
192 if (sender == nf->netdev) {
193 /* NET_FILTER_DIRECTION_TX */
30656b09
ZC
194 if (!handle_primary_tcp_pkt(nf, conn, pkt)) {
195 qemu_net_queue_send(s->incoming_queue, sender, 0,
196 (const uint8_t *)pkt->data, pkt->size, NULL);
197 packet_destroy(pkt, NULL);
198 pkt = NULL;
199 /*
200 * We block the packet here,after rewrite pkt
201 * and will send it
202 */
203 return 1;
204 }
afe46124
ZC
205 } else {
206 /* NET_FILTER_DIRECTION_RX */
30656b09
ZC
207 if (!handle_secondary_tcp_pkt(nf, conn, pkt)) {
208 qemu_net_queue_send(s->incoming_queue, sender, 0,
209 (const uint8_t *)pkt->data, pkt->size, NULL);
210 packet_destroy(pkt, NULL);
211 pkt = NULL;
212 /*
213 * We block the packet here,after rewrite pkt
214 * and will send it
215 */
216 return 1;
217 }
afe46124
ZC
218 }
219 }
220
221 packet_destroy(pkt, NULL);
222 pkt = NULL;
e6eee8ab
ZC
223 return 0;
224}
225
226static void colo_rewriter_cleanup(NetFilterState *nf)
227{
228 RewriterState *s = FILTER_COLO_REWRITER(nf);
229
230 /* flush packets */
231 if (s->incoming_queue) {
232 filter_rewriter_flush(nf);
233 g_free(s->incoming_queue);
234 }
235}
236
237static void colo_rewriter_setup(NetFilterState *nf, Error **errp)
238{
239 RewriterState *s = FILTER_COLO_REWRITER(nf);
240
241 s->connection_track_table = g_hash_table_new_full(connection_key_hash,
242 connection_key_equal,
243 g_free,
244 connection_destroy);
245 s->incoming_queue = qemu_new_net_queue(qemu_netfilter_pass_to_next, nf);
246}
247
4b39bdce
ZC
248static bool filter_rewriter_get_vnet_hdr(Object *obj, Error **errp)
249{
250 RewriterState *s = FILTER_COLO_REWRITER(obj);
251
252 return s->vnet_hdr;
253}
254
255static void filter_rewriter_set_vnet_hdr(Object *obj,
256 bool value,
257 Error **errp)
258{
259 RewriterState *s = FILTER_COLO_REWRITER(obj);
260
261 s->vnet_hdr = value;
262}
263
264static void filter_rewriter_init(Object *obj)
265{
266 RewriterState *s = FILTER_COLO_REWRITER(obj);
267
268 s->vnet_hdr = false;
269 object_property_add_bool(obj, "vnet_hdr_support",
270 filter_rewriter_get_vnet_hdr,
271 filter_rewriter_set_vnet_hdr, NULL);
272}
273
e6eee8ab
ZC
274static void colo_rewriter_class_init(ObjectClass *oc, void *data)
275{
276 NetFilterClass *nfc = NETFILTER_CLASS(oc);
277
278 nfc->setup = colo_rewriter_setup;
279 nfc->cleanup = colo_rewriter_cleanup;
280 nfc->receive_iov = colo_rewriter_receive_iov;
281}
282
283static const TypeInfo colo_rewriter_info = {
284 .name = TYPE_FILTER_REWRITER,
285 .parent = TYPE_NETFILTER,
286 .class_init = colo_rewriter_class_init,
4b39bdce 287 .instance_init = filter_rewriter_init,
e6eee8ab
ZC
288 .instance_size = sizeof(RewriterState),
289};
290
291static void register_types(void)
292{
293 type_register_static(&colo_rewriter_info);
294}
295
296type_init(register_types);
This page took 0.154706 seconds and 4 git commands to generate.