^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) /* Copyright (c) 2016 PLUMgrid
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) * This program is free software; you can redistribute it and/or
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) * modify it under the terms of version 2 of the GNU General Public
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * License as published by the Free Software Foundation.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) #define KBUILD_MODNAME "foo"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) #include <uapi/linux/bpf.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) #include <linux/in.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) #include <linux/if_ether.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) #include <linux/if_packet.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) #include <linux/if_vlan.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) #include <linux/ip.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) #include <linux/ipv6.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) #include <bpf/bpf_helpers.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) struct {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) __uint(type, BPF_MAP_TYPE_PERCPU_ARRAY);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) __type(key, u32);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) __type(value, long);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) __uint(max_entries, 256);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) } rxcnt SEC(".maps");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) static void swap_src_dst_mac(void *data)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) unsigned short *p = data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) unsigned short dst[3];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) dst[0] = p[0];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) dst[1] = p[1];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) dst[2] = p[2];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) p[0] = p[3];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33) p[1] = p[4];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) p[2] = p[5];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) p[3] = dst[0];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36) p[4] = dst[1];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) p[5] = dst[2];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) static int parse_ipv4(void *data, u64 nh_off, void *data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) struct iphdr *iph = data + nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) if (iph + 1 > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) return iph->protocol;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) static int parse_ipv6(void *data, u64 nh_off, void *data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) struct ipv6hdr *ip6h = data + nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53) if (ip6h + 1 > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) return ip6h->nexthdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) SEC("xdp1")
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) int xdp_prog1(struct xdp_md *ctx)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) void *data_end = (void *)(long)ctx->data_end;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) void *data = (void *)(long)ctx->data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) struct ethhdr *eth = data;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) int rc = XDP_DROP;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65) long *value;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) u16 h_proto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) u64 nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) u32 ipproto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) nh_off = sizeof(*eth);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) if (data + nh_off > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) h_proto = eth->h_proto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) if (h_proto == htons(ETH_P_8021Q) || h_proto == htons(ETH_P_8021AD)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) struct vlan_hdr *vhdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) vhdr = data + nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) nh_off += sizeof(struct vlan_hdr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) if (data + nh_off > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) h_proto = vhdr->h_vlan_encapsulated_proto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) if (h_proto == htons(ETH_P_8021Q) || h_proto == htons(ETH_P_8021AD)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) struct vlan_hdr *vhdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) vhdr = data + nh_off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) nh_off += sizeof(struct vlan_hdr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) if (data + nh_off > data_end)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92) h_proto = vhdr->h_vlan_encapsulated_proto;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) if (h_proto == htons(ETH_P_IP))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96) ipproto = parse_ipv4(data, nh_off, data_end);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97) else if (h_proto == htons(ETH_P_IPV6))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98) ipproto = parse_ipv6(data, nh_off, data_end);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) ipproto = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) value = bpf_map_lookup_elem(&rxcnt, &ipproto);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) if (value)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) *value += 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) if (ipproto == IPPROTO_UDP) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) swap_src_dst_mac(data);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) rc = XDP_TX;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) char _license[] SEC("license") = "GPL";
Orange Pi5 kernel
Deprecated Linux kernel 5.10.110 for OrangePi 5/5B/5+ boards
3 Commits
0 Branches
0 Tags