97d32cf944
Introduces a new nfnetlink type that applies a given verdict to all queued packets with an id <= the id in the verdict message. If a mark is provided it is applied to all matched packets. This reduces the number of verdicts that have to be sent. Applications that make use of this feature need to maintain a timeout to send a batchverdict periodically to avoid starvation. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Patrick McHardy <kaber@trash.net>
92 lines
2 KiB
C
92 lines
2 KiB
C
#ifndef _NFNETLINK_QUEUE_H
|
|
#define _NFNETLINK_QUEUE_H
|
|
|
|
#include <linux/types.h>
|
|
#include <linux/netfilter/nfnetlink.h>
|
|
|
|
enum nfqnl_msg_types {
|
|
NFQNL_MSG_PACKET, /* packet from kernel to userspace */
|
|
NFQNL_MSG_VERDICT, /* verdict from userspace to kernel */
|
|
NFQNL_MSG_CONFIG, /* connect to a particular queue */
|
|
NFQNL_MSG_VERDICT_BATCH, /* batchv from userspace to kernel */
|
|
|
|
NFQNL_MSG_MAX
|
|
};
|
|
|
|
struct nfqnl_msg_packet_hdr {
|
|
__be32 packet_id; /* unique ID of packet in queue */
|
|
__be16 hw_protocol; /* hw protocol (network order) */
|
|
__u8 hook; /* netfilter hook */
|
|
} __attribute__ ((packed));
|
|
|
|
struct nfqnl_msg_packet_hw {
|
|
__be16 hw_addrlen;
|
|
__u16 _pad;
|
|
__u8 hw_addr[8];
|
|
};
|
|
|
|
struct nfqnl_msg_packet_timestamp {
|
|
__aligned_be64 sec;
|
|
__aligned_be64 usec;
|
|
};
|
|
|
|
enum nfqnl_attr_type {
|
|
NFQA_UNSPEC,
|
|
NFQA_PACKET_HDR,
|
|
NFQA_VERDICT_HDR, /* nfqnl_msg_verdict_hrd */
|
|
NFQA_MARK, /* __u32 nfmark */
|
|
NFQA_TIMESTAMP, /* nfqnl_msg_packet_timestamp */
|
|
NFQA_IFINDEX_INDEV, /* __u32 ifindex */
|
|
NFQA_IFINDEX_OUTDEV, /* __u32 ifindex */
|
|
NFQA_IFINDEX_PHYSINDEV, /* __u32 ifindex */
|
|
NFQA_IFINDEX_PHYSOUTDEV, /* __u32 ifindex */
|
|
NFQA_HWADDR, /* nfqnl_msg_packet_hw */
|
|
NFQA_PAYLOAD, /* opaque data payload */
|
|
|
|
__NFQA_MAX
|
|
};
|
|
#define NFQA_MAX (__NFQA_MAX - 1)
|
|
|
|
struct nfqnl_msg_verdict_hdr {
|
|
__be32 verdict;
|
|
__be32 id;
|
|
};
|
|
|
|
|
|
enum nfqnl_msg_config_cmds {
|
|
NFQNL_CFG_CMD_NONE,
|
|
NFQNL_CFG_CMD_BIND,
|
|
NFQNL_CFG_CMD_UNBIND,
|
|
NFQNL_CFG_CMD_PF_BIND,
|
|
NFQNL_CFG_CMD_PF_UNBIND,
|
|
};
|
|
|
|
struct nfqnl_msg_config_cmd {
|
|
__u8 command; /* nfqnl_msg_config_cmds */
|
|
__u8 _pad;
|
|
__be16 pf; /* AF_xxx for PF_[UN]BIND */
|
|
};
|
|
|
|
enum nfqnl_config_mode {
|
|
NFQNL_COPY_NONE,
|
|
NFQNL_COPY_META,
|
|
NFQNL_COPY_PACKET,
|
|
};
|
|
|
|
struct nfqnl_msg_config_params {
|
|
__be32 copy_range;
|
|
__u8 copy_mode; /* enum nfqnl_config_mode */
|
|
} __attribute__ ((packed));
|
|
|
|
|
|
enum nfqnl_attr_config {
|
|
NFQA_CFG_UNSPEC,
|
|
NFQA_CFG_CMD, /* nfqnl_msg_config_cmd */
|
|
NFQA_CFG_PARAMS, /* nfqnl_msg_config_params */
|
|
NFQA_CFG_QUEUE_MAXLEN, /* __u32 */
|
|
__NFQA_CFG_MAX
|
|
};
|
|
#define NFQA_CFG_MAX (__NFQA_CFG_MAX-1)
|
|
|
|
#endif /* _NFNETLINK_QUEUE_H */
|