From patchwork Fri Feb 10 21:43:13 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Xin Long X-Patchwork-Id: 13136483 X-Patchwork-Delegate: dsahern@gmail.com Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id F3457C636D4 for ; Fri, 10 Feb 2023 21:43:18 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S233463AbjBJVnR (ORCPT ); Fri, 10 Feb 2023 16:43:17 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:59112 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S233051AbjBJVnQ (ORCPT ); Fri, 10 Feb 2023 16:43:16 -0500 Received: from mail-qt1-x835.google.com (mail-qt1-x835.google.com [IPv6:2607:f8b0:4864:20::835]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id C3B2732CC1 for ; Fri, 10 Feb 2023 13:43:15 -0800 (PST) Received: by mail-qt1-x835.google.com with SMTP id ch10so6306680qtb.11 for ; Fri, 10 Feb 2023 13:43:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=wRX3BBCUfms0C2r6ElTcwqRxLREbWlQwG44Hl+lb1Pg=; b=ArQeSNXeL4EAAbUryVm4QYdv3eCcO08BxvugLnMm3tpbPA6J13JsCIXNPteHht197O WSNy138+jQM3fp7xRiLJNHXXOCrjx/gYd2GmVOHXCc1pX+MMbblJCKm+/CO1DCfO9foN 5sIhCQ8bWSlJTPgrXLzr+TBKVULzA2CiHzjSJsDHij4kPNPICIu6Ps38+Dz0cE3DNlys kzzeyKsVbefMs+XfSfDkQy2lCTsZosLvc7G9SndeoabKCVevsFEEmaCPB7pRGxfrGtZ6 Zn8HSouEBndQO35MtMVuc+pVtsy2kQ2SGUA4JLUK38hHpevz+n4YEwx24tX1bPzrsgMK S8Pw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=wRX3BBCUfms0C2r6ElTcwqRxLREbWlQwG44Hl+lb1Pg=; b=GlPaZtpSNBWWmWSOR49zZkSTYZj1Vh9CKVpT0TPR8BnAEYdaLAbUUjVgtcsodnFPE2 j/34XC/U/wemeojRcr1HdM8OqJytJ5IqdlB1RDy2s4bNOr0/agq+jCWOZJrvbG9tmg2G VqrxQKl3pDif9rejzVL/PyNqhnFTLlLoouTYg5EEr+XfVJ4tbiVj62eJdcJl6uWeW65J tHRond5F7KE4nlUtS0Ly88HXExEKJIaS42iGrg62DQENmkjCi3Jm1jIwhfno6OoQn1Me FnoQRYEbtmHe3f0IDOyaFSq3cBsXSFuM0j1XIGOpf3XE3pJFkOhrq5X7pMnF6P6Nr/Ra sSGw== X-Gm-Message-State: AO0yUKVVkQ5IXJvuFIkh4xxKnA1i5UAgebMAp5H2UgB9kRG8X0AUxvLu BpSa9+3spwZoiGgLCDoaMPq+SSy1dNtp/Q== X-Google-Smtp-Source: AK7set/KEBehea0P5/0xerlv4duVQGGYXNHZ/5jup+gh22pnP98xiVJO25ATXPIR/UuAZRWVMu+oWg== X-Received: by 2002:a05:622a:1c1:b0:3b6:323d:bcac with SMTP id t1-20020a05622a01c100b003b6323dbcacmr29942429qtw.32.1676065394718; Fri, 10 Feb 2023 13:43:14 -0800 (PST) Received: from wsfd-netdev15.ntdv.lab.eng.bos.redhat.com (nat-pool-bos-t.redhat.com. [66.187.233.206]) by smtp.gmail.com with ESMTPSA id f18-20020ac80692000000b003b9e1d3a502sm4130116qth.54.2023.02.10.13.43.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 10 Feb 2023 13:43:14 -0800 (PST) From: Xin Long To: network dev , David Ahern , stephen@networkplumber.org Cc: Jamal Hadi Salim , Cong Wang , Jiri Pirko , Marcelo Ricardo Leitner , Davide Caratti Subject: [PATCH iproute2-next] tc: m_ct: add support for helper Date: Fri, 10 Feb 2023 16:43:13 -0500 Message-Id: X-Mailer: git-send-email 2.31.1 MIME-Version: 1.0 Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org X-Patchwork-Delegate: dsahern@gmail.com This patch is to add the setup and dump for helper in tc ct action in userspace, and the support in kernel was added in: https://lore.kernel.org/netdev/cover.1667766782.git.lucien.xin@gmail.com/ here is an example for usage: # ip link add dummy0 type dummy # tc qdisc add dev dummy0 ingress # tc filter add dev dummy0 ingress proto ip flower ip_proto \ tcp ct_state -trk action ct helper ipv4-tcp-ftp # tc filter show dev dummy0 ingress filter protocol ip pref 49152 flower chain 0 handle 0x1 eth_type ipv4 ip_proto tcp ct_state -trk not_in_hw action order 1: ct zone 0 helper ipv4-tcp-ftp pipe index 1 ref 1 bind Signed-off-by: Xin Long Reviewed-by: Marcelo Ricardo Leitner --- tc/m_ct.c | 53 ++++++++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 52 insertions(+), 1 deletion(-) diff --git a/tc/m_ct.c b/tc/m_ct.c index 54d64867..6556e41c 100644 --- a/tc/m_ct.c +++ b/tc/m_ct.c @@ -13,6 +13,7 @@ #include #include "utils.h" #include "tc_util.h" +#include "rt_names.h" #include static void @@ -20,10 +21,11 @@ usage(void) { fprintf(stderr, "Usage: ct clear\n" - " ct commit [force] [zone ZONE] [mark MASKED_MARK] [label MASKED_LABEL] [nat NAT_SPEC]\n" + " ct commit [force] [zone ZONE] [mark MASKED_MARK] [label MASKED_LABEL] [nat NAT_SPEC] [helper HELPER]\n" " ct [nat] [zone ZONE]\n" "Where: ZONE is the conntrack zone table number\n" " NAT_SPEC is {src|dst} addr addr1[-addr2] [port port1[-port2]]\n" + " HELPER is family-proto-name such as ipv4-tcp-ftp\n" "\n"); exit(-1); } @@ -156,6 +158,30 @@ static int ct_parse_mark(char *str, struct nlmsghdr *n) return ct_parse_u32(str, TCA_CT_MARK, TCA_CT_MARK_MASK, n); } +static int ct_parse_helper(char *str, struct nlmsghdr *n) +{ + char f[32], p[32], name[32]; + __u8 family, proto; + + if (strlen(str) >= 32 || + sscanf(str, "%[^-]-%[^-]-%[^-]", f, p, name) != 3) + return -1; + if (!strcmp(f, "ipv4")) + family = AF_INET; + else if (!strcmp(f, "ipv6")) + family = AF_INET6; + else + return -1; + proto = inet_proto_a2n(p); + if (proto < 0) + return -1; + + addattr8(n, MAX_MSG, TCA_CT_HELPER_FAMILY, family); + addattr8(n, MAX_MSG, TCA_CT_HELPER_PROTO, proto); + addattrstrz(n, MAX_MSG, TCA_CT_HELPER_NAME, name); + return 0; +} + static int ct_parse_labels(char *str, struct nlmsghdr *n) { #define LABELS_SIZE 16 @@ -283,6 +309,14 @@ parse_ct(struct action_util *a, int *argc_p, char ***argv_p, int tca_id, } } else if (matches(*argv, "help") == 0) { usage(); + } else if (matches(*argv, "helper") == 0) { + NEXT_ARG(); + + ret = ct_parse_helper(*argv, n); + if (ret) { + fprintf(stderr, "ct: Illegal \"helper\"\n"); + return -1; + } } else { break; } @@ -436,6 +470,22 @@ static void ct_print_labels(struct rtattr *attr, print_string(PRINT_ANY, "label", " label %s", out); } +static void ct_print_helper(struct rtattr *family, struct rtattr *proto, struct rtattr *name) +{ + char helper[32], buf[32], *n; + int *f, *p; + + if (!family || !proto || !name) + return; + + f = RTA_DATA(family); + p = RTA_DATA(proto); + n = RTA_DATA(name); + sprintf(helper, "%s-%s-%s", (*f == AF_INET) ? "ipv4" : "ipv6", + inet_proto_n2a(*p, buf, sizeof(buf)), n); + print_string(PRINT_ANY, "helper", " helper %s", helper); +} + static int print_ct(struct action_util *au, FILE *f, struct rtattr *arg) { struct rtattr *tb[TCA_CT_MAX + 1]; @@ -468,6 +518,7 @@ static int print_ct(struct action_util *au, FILE *f, struct rtattr *arg) print_masked_u32("mark", tb[TCA_CT_MARK], tb[TCA_CT_MARK_MASK], false); print_masked_u16("zone", tb[TCA_CT_ZONE], NULL, false); ct_print_labels(tb[TCA_CT_LABELS], tb[TCA_CT_LABELS_MASK]); + ct_print_helper(tb[TCA_CT_HELPER_FAMILY], tb[TCA_CT_HELPER_PROTO], tb[TCA_CT_HELPER_NAME]); ct_print_nat(ct_action, tb); print_action_control(f, " ", p->action, "");