^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) /* Copyright (c) 2016 PLUMgrid
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * This program is free software; you can redistribute it and/or
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) * modify it under the terms of version 2 of the GNU General Public
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * License as published by the Free Software Foundation.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) #define KBUILD_MODNAME "foo"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) #include <uapi/linux/bpf.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) #include <linux/in.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) #include <linux/if_ether.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) #include <linux/if_packet.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) #include <linux/if_vlan.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) #include <linux/ip.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) #include <linux/ipv6.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) #include <bpf/bpf_helpers.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) struct {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) __uint(type, BPF_MAP_TYPE_PERCPU_ARRAY);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) __type(key, u32);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) __type(value, long);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) __uint(max_entries, 256);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) } rxcnt SEC(".maps");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) static int parse_ipv4(void *data, u64 nh_off, void *data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) struct iphdr *iph = data + nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) if (iph + 1 > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) return iph->protocol;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) static int parse_ipv6(void *data, u64 nh_off, void *data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) struct ipv6hdr *ip6h = data + nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) if (ip6h + 1 > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) return ip6h->nexthdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) SEC("xdp1")
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) int xdp_prog1(struct xdp_md *ctx)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) void *data_end = (void *)(long)ctx->data_end;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) void *data = (void *)(long)ctx->data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) struct ethhdr *eth = data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) int rc = XDP_DROP;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) long *value;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) u16 h_proto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) u64 nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) u32 ipproto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) nh_off = sizeof(*eth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) if (data + nh_off > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) h_proto = eth->h_proto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) if (h_proto == htons(ETH_P_8021Q) || h_proto == htons(ETH_P_8021AD)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) struct vlan_hdr *vhdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) vhdr = data + nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) nh_off += sizeof(struct vlan_hdr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) if (data + nh_off > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) h_proto = vhdr->h_vlan_encapsulated_proto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69) if (h_proto == htons(ETH_P_8021Q) || h_proto == htons(ETH_P_8021AD)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) struct vlan_hdr *vhdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) vhdr = data + nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) nh_off += sizeof(struct vlan_hdr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) if (data + nh_off > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) h_proto = vhdr->h_vlan_encapsulated_proto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) if (h_proto == htons(ETH_P_IP))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) ipproto = parse_ipv4(data, nh_off, data_end);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) else if (h_proto == htons(ETH_P_IPV6))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82) ipproto = parse_ipv6(data, nh_off, data_end);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) ipproto = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) value = bpf_map_lookup_elem(&rxcnt, &ipproto);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87) if (value)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) *value += 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) char _license[] SEC("license") = "GPL";