1 /*
2 * ng_bridge.c
3 */
4
5 /*-
6 * Copyright (c) 2000 Whistle Communications, Inc.
7 * All rights reserved.
8 *
9 * Subject to the following obligations and disclaimer of warranty, use and
10 * redistribution of this software, in source or object code forms, with or
11 * without modifications are expressly permitted by Whistle Communications;
12 * provided, however, that:
13 * 1. Any and all reproductions of the source or object code must include the
14 * copyright notice above and the following disclaimer of warranties; and
15 * 2. No rights are granted, in any manner or form, to use Whistle
16 * Communications, Inc. trademarks, including the mark "WHISTLE
17 * COMMUNICATIONS" on advertising, endorsements, or otherwise except as
18 * such appears in the above copyright notice or in the software.
19 *
20 * THIS SOFTWARE IS BEING PROVIDED BY WHISTLE COMMUNICATIONS "AS IS", AND
21 * TO THE MAXIMUM EXTENT PERMITTED BY LAW, WHISTLE COMMUNICATIONS MAKES NO
22 * REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, REGARDING THIS SOFTWARE,
23 * INCLUDING WITHOUT LIMITATION, ANY AND ALL IMPLIED WARRANTIES OF
24 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.
25 * WHISTLE COMMUNICATIONS DOES NOT WARRANT, GUARANTEE, OR MAKE ANY
26 * REPRESENTATIONS REGARDING THE USE OF, OR THE RESULTS OF THE USE OF THIS
27 * SOFTWARE IN TERMS OF ITS CORRECTNESS, ACCURACY, RELIABILITY OR OTHERWISE.
28 * IN NO EVENT SHALL WHISTLE COMMUNICATIONS BE LIABLE FOR ANY DAMAGES
29 * RESULTING FROM OR ARISING OUT OF ANY USE OF THIS SOFTWARE, INCLUDING
30 * WITHOUT LIMITATION, ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
31 * PUNITIVE, OR CONSEQUENTIAL DAMAGES, PROCUREMENT OF SUBSTITUTE GOODS OR
32 * SERVICES, LOSS OF USE, DATA OR PROFITS, HOWEVER CAUSED AND UNDER ANY
33 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
34 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35 * THIS SOFTWARE, EVEN IF WHISTLE COMMUNICATIONS IS ADVISED OF THE POSSIBILITY
36 * OF SUCH DAMAGE.
37 *
38 * Author: Archie Cobbs <archie@freebsd.org>
39 *
40 * $FreeBSD: releng/8.0/sys/netgraph/ng_bridge.c 196019 2009-08-01 19:26:27Z rwatson $
41 */
42
43 /*
44 * ng_bridge(4) netgraph node type
45 *
46 * The node performs standard intelligent Ethernet bridging over
47 * each of its connected hooks, or links. A simple loop detection
48 * algorithm is included which disables a link for priv->conf.loopTimeout
49 * seconds when a host is seen to have jumped from one link to
50 * another within priv->conf.minStableAge seconds.
51 *
52 * We keep a hashtable that maps Ethernet addresses to host info,
53 * which is contained in struct ng_bridge_host's. These structures
54 * tell us on which link the host may be found. A host's entry will
55 * expire after priv->conf.maxStaleness seconds.
56 *
57 * This node is optimzed for stable networks, where machines jump
58 * from one port to the other only rarely.
59 */
60
61 #include <sys/param.h>
62 #include <sys/systm.h>
63 #include <sys/kernel.h>
64 #include <sys/lock.h>
65 #include <sys/malloc.h>
66 #include <sys/mbuf.h>
67 #include <sys/errno.h>
68 #include <sys/rwlock.h>
69 #include <sys/syslog.h>
70 #include <sys/socket.h>
71 #include <sys/ctype.h>
72
73 #include <net/if.h>
74 #include <net/ethernet.h>
75 #include <net/vnet.h>
76
77 #include <netinet/in.h>
78 #include <netinet/ip_fw.h>
79
80 #include <netgraph/ng_message.h>
81 #include <netgraph/netgraph.h>
82 #include <netgraph/ng_parse.h>
83 #include <netgraph/ng_bridge.h>
84
85 #ifdef NG_SEPARATE_MALLOC
86 MALLOC_DEFINE(M_NETGRAPH_BRIDGE, "netgraph_bridge", "netgraph bridge node ");
87 #else
88 #define M_NETGRAPH_BRIDGE M_NETGRAPH
89 #endif
90
91 /* Per-link private data */
92 struct ng_bridge_link {
93 hook_p hook; /* netgraph hook */
94 u_int16_t loopCount; /* loop ignore timer */
95 struct ng_bridge_link_stats stats; /* link stats */
96 };
97
98 /* Per-node private data */
99 struct ng_bridge_private {
100 struct ng_bridge_bucket *tab; /* hash table bucket array */
101 struct ng_bridge_link *links[NG_BRIDGE_MAX_LINKS];
102 struct ng_bridge_config conf; /* node configuration */
103 node_p node; /* netgraph node */
104 u_int numHosts; /* num entries in table */
105 u_int numBuckets; /* num buckets in table */
106 u_int hashMask; /* numBuckets - 1 */
107 int numLinks; /* num connected links */
108 struct callout timer; /* one second periodic timer */
109 };
110 typedef struct ng_bridge_private *priv_p;
111
112 /* Information about a host, stored in a hash table entry */
113 struct ng_bridge_hent {
114 struct ng_bridge_host host; /* actual host info */
115 SLIST_ENTRY(ng_bridge_hent) next; /* next entry in bucket */
116 };
117
118 /* Hash table bucket declaration */
119 SLIST_HEAD(ng_bridge_bucket, ng_bridge_hent);
120
121 /* Netgraph node methods */
122 static ng_constructor_t ng_bridge_constructor;
123 static ng_rcvmsg_t ng_bridge_rcvmsg;
124 static ng_shutdown_t ng_bridge_shutdown;
125 static ng_newhook_t ng_bridge_newhook;
126 static ng_rcvdata_t ng_bridge_rcvdata;
127 static ng_disconnect_t ng_bridge_disconnect;
128
129 /* Other internal functions */
130 static struct ng_bridge_host *ng_bridge_get(priv_p priv, const u_char *addr);
131 static int ng_bridge_put(priv_p priv, const u_char *addr, int linkNum);
132 static void ng_bridge_rehash(priv_p priv);
133 static void ng_bridge_remove_hosts(priv_p priv, int linkNum);
134 static void ng_bridge_timeout(node_p node, hook_p hook, void *arg1, int arg2);
135 static const char *ng_bridge_nodename(node_p node);
136
137 /* Ethernet broadcast */
138 static const u_char ng_bridge_bcast_addr[ETHER_ADDR_LEN] =
139 { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
140
141 /* Store each hook's link number in the private field */
142 #define LINK_NUM(hook) (*(u_int16_t *)(&(hook)->private))
143
144 /* Compare Ethernet addresses using 32 and 16 bit words instead of bytewise */
145 #define ETHER_EQUAL(a,b) (((const u_int32_t *)(a))[0] \
146 == ((const u_int32_t *)(b))[0] \
147 && ((const u_int16_t *)(a))[2] \
148 == ((const u_int16_t *)(b))[2])
149
150 /* Minimum and maximum number of hash buckets. Must be a power of two. */
151 #define MIN_BUCKETS (1 << 5) /* 32 */
152 #define MAX_BUCKETS (1 << 14) /* 16384 */
153
154 /* Configuration default values */
155 #define DEFAULT_LOOP_TIMEOUT 60
156 #define DEFAULT_MAX_STALENESS (15 * 60) /* same as ARP timeout */
157 #define DEFAULT_MIN_STABLE_AGE 1
158
159 /******************************************************************
160 NETGRAPH PARSE TYPES
161 ******************************************************************/
162
163 /*
164 * How to determine the length of the table returned by NGM_BRIDGE_GET_TABLE
165 */
166 static int
167 ng_bridge_getTableLength(const struct ng_parse_type *type,
168 const u_char *start, const u_char *buf)
169 {
170 const struct ng_bridge_host_ary *const hary
171 = (const struct ng_bridge_host_ary *)(buf - sizeof(u_int32_t));
172
173 return hary->numHosts;
174 }
175
176 /* Parse type for struct ng_bridge_host_ary */
177 static const struct ng_parse_struct_field ng_bridge_host_type_fields[]
178 = NG_BRIDGE_HOST_TYPE_INFO(&ng_parse_enaddr_type);
179 static const struct ng_parse_type ng_bridge_host_type = {
180 &ng_parse_struct_type,
181 &ng_bridge_host_type_fields
182 };
183 static const struct ng_parse_array_info ng_bridge_hary_type_info = {
184 &ng_bridge_host_type,
185 ng_bridge_getTableLength
186 };
187 static const struct ng_parse_type ng_bridge_hary_type = {
188 &ng_parse_array_type,
189 &ng_bridge_hary_type_info
190 };
191 static const struct ng_parse_struct_field ng_bridge_host_ary_type_fields[]
192 = NG_BRIDGE_HOST_ARY_TYPE_INFO(&ng_bridge_hary_type);
193 static const struct ng_parse_type ng_bridge_host_ary_type = {
194 &ng_parse_struct_type,
195 &ng_bridge_host_ary_type_fields
196 };
197
198 /* Parse type for struct ng_bridge_config */
199 static const struct ng_parse_fixedarray_info ng_bridge_ipfwary_type_info = {
200 &ng_parse_uint8_type,
201 NG_BRIDGE_MAX_LINKS
202 };
203 static const struct ng_parse_type ng_bridge_ipfwary_type = {
204 &ng_parse_fixedarray_type,
205 &ng_bridge_ipfwary_type_info
206 };
207 static const struct ng_parse_struct_field ng_bridge_config_type_fields[]
208 = NG_BRIDGE_CONFIG_TYPE_INFO(&ng_bridge_ipfwary_type);
209 static const struct ng_parse_type ng_bridge_config_type = {
210 &ng_parse_struct_type,
211 &ng_bridge_config_type_fields
212 };
213
214 /* Parse type for struct ng_bridge_link_stat */
215 static const struct ng_parse_struct_field ng_bridge_stats_type_fields[]
216 = NG_BRIDGE_STATS_TYPE_INFO;
217 static const struct ng_parse_type ng_bridge_stats_type = {
218 &ng_parse_struct_type,
219 &ng_bridge_stats_type_fields
220 };
221
222 /* List of commands and how to convert arguments to/from ASCII */
223 static const struct ng_cmdlist ng_bridge_cmdlist[] = {
224 {
225 NGM_BRIDGE_COOKIE,
226 NGM_BRIDGE_SET_CONFIG,
227 "setconfig",
228 &ng_bridge_config_type,
229 NULL
230 },
231 {
232 NGM_BRIDGE_COOKIE,
233 NGM_BRIDGE_GET_CONFIG,
234 "getconfig",
235 NULL,
236 &ng_bridge_config_type
237 },
238 {
239 NGM_BRIDGE_COOKIE,
240 NGM_BRIDGE_RESET,
241 "reset",
242 NULL,
243 NULL
244 },
245 {
246 NGM_BRIDGE_COOKIE,
247 NGM_BRIDGE_GET_STATS,
248 "getstats",
249 &ng_parse_uint32_type,
250 &ng_bridge_stats_type
251 },
252 {
253 NGM_BRIDGE_COOKIE,
254 NGM_BRIDGE_CLR_STATS,
255 "clrstats",
256 &ng_parse_uint32_type,
257 NULL
258 },
259 {
260 NGM_BRIDGE_COOKIE,
261 NGM_BRIDGE_GETCLR_STATS,
262 "getclrstats",
263 &ng_parse_uint32_type,
264 &ng_bridge_stats_type
265 },
266 {
267 NGM_BRIDGE_COOKIE,
268 NGM_BRIDGE_GET_TABLE,
269 "gettable",
270 NULL,
271 &ng_bridge_host_ary_type
272 },
273 { 0 }
274 };
275
276 /* Node type descriptor */
277 static struct ng_type ng_bridge_typestruct = {
278 .version = NG_ABI_VERSION,
279 .name = NG_BRIDGE_NODE_TYPE,
280 .constructor = ng_bridge_constructor,
281 .rcvmsg = ng_bridge_rcvmsg,
282 .shutdown = ng_bridge_shutdown,
283 .newhook = ng_bridge_newhook,
284 .rcvdata = ng_bridge_rcvdata,
285 .disconnect = ng_bridge_disconnect,
286 .cmdlist = ng_bridge_cmdlist,
287 };
288 NETGRAPH_INIT(bridge, &ng_bridge_typestruct);
289
290 /******************************************************************
291 NETGRAPH NODE METHODS
292 ******************************************************************/
293
294 /*
295 * Node constructor
296 */
297 static int
298 ng_bridge_constructor(node_p node)
299 {
300 priv_p priv;
301
302 /* Allocate and initialize private info */
303 priv = malloc(sizeof(*priv), M_NETGRAPH_BRIDGE, M_NOWAIT | M_ZERO);
304 if (priv == NULL)
305 return (ENOMEM);
306 ng_callout_init(&priv->timer);
307
308 /* Allocate and initialize hash table, etc. */
309 priv->tab = malloc(MIN_BUCKETS * sizeof(*priv->tab),
310 M_NETGRAPH_BRIDGE, M_NOWAIT | M_ZERO);
311 if (priv->tab == NULL) {
312 free(priv, M_NETGRAPH_BRIDGE);
313 return (ENOMEM);
314 }
315 priv->numBuckets = MIN_BUCKETS;
316 priv->hashMask = MIN_BUCKETS - 1;
317 priv->conf.debugLevel = 1;
318 priv->conf.loopTimeout = DEFAULT_LOOP_TIMEOUT;
319 priv->conf.maxStaleness = DEFAULT_MAX_STALENESS;
320 priv->conf.minStableAge = DEFAULT_MIN_STABLE_AGE;
321
322 /*
323 * This node has all kinds of stuff that could be screwed by SMP.
324 * Until it gets it's own internal protection, we go through in
325 * single file. This could hurt a machine bridging beteen two
326 * GB ethernets so it should be fixed.
327 * When it's fixed the process SHOULD NOT SLEEP, spinlocks please!
328 * (and atomic ops )
329 */
330 NG_NODE_FORCE_WRITER(node);
331 NG_NODE_SET_PRIVATE(node, priv);
332 priv->node = node;
333
334 /* Start timer; timer is always running while node is alive */
335 ng_callout(&priv->timer, node, NULL, hz, ng_bridge_timeout, NULL, 0);
336
337 /* Done */
338 return (0);
339 }
340
341 /*
342 * Method for attaching a new hook
343 */
344 static int
345 ng_bridge_newhook(node_p node, hook_p hook, const char *name)
346 {
347 const priv_p priv = NG_NODE_PRIVATE(node);
348
349 /* Check for a link hook */
350 if (strncmp(name, NG_BRIDGE_HOOK_LINK_PREFIX,
351 strlen(NG_BRIDGE_HOOK_LINK_PREFIX)) == 0) {
352 const char *cp;
353 char *eptr;
354 u_long linkNum;
355
356 cp = name + strlen(NG_BRIDGE_HOOK_LINK_PREFIX);
357 if (!isdigit(*cp) || (cp[0] == '' && cp[1] != '\0'))
358 return (EINVAL);
359 linkNum = strtoul(cp, &eptr, 10);
360 if (*eptr != '\0' || linkNum >= NG_BRIDGE_MAX_LINKS)
361 return (EINVAL);
362 if (priv->links[linkNum] != NULL)
363 return (EISCONN);
364 priv->links[linkNum] = malloc(sizeof(*priv->links[linkNum]),
365 M_NETGRAPH_BRIDGE, M_NOWAIT|M_ZERO);
366 if (priv->links[linkNum] == NULL)
367 return (ENOMEM);
368 priv->links[linkNum]->hook = hook;
369 NG_HOOK_SET_PRIVATE(hook, (void *)linkNum);
370 priv->numLinks++;
371 return (0);
372 }
373
374 /* Unknown hook name */
375 return (EINVAL);
376 }
377
378 /*
379 * Receive a control message
380 */
381 static int
382 ng_bridge_rcvmsg(node_p node, item_p item, hook_p lasthook)
383 {
384 const priv_p priv = NG_NODE_PRIVATE(node);
385 struct ng_mesg *resp = NULL;
386 int error = 0;
387 struct ng_mesg *msg;
388
389 NGI_GET_MSG(item, msg);
390 switch (msg->header.typecookie) {
391 case NGM_BRIDGE_COOKIE:
392 switch (msg->header.cmd) {
393 case NGM_BRIDGE_GET_CONFIG:
394 {
395 struct ng_bridge_config *conf;
396
397 NG_MKRESPONSE(resp, msg,
398 sizeof(struct ng_bridge_config), M_NOWAIT);
399 if (resp == NULL) {
400 error = ENOMEM;
401 break;
402 }
403 conf = (struct ng_bridge_config *)resp->data;
404 *conf = priv->conf; /* no sanity checking needed */
405 break;
406 }
407 case NGM_BRIDGE_SET_CONFIG:
408 {
409 struct ng_bridge_config *conf;
410 int i;
411
412 if (msg->header.arglen
413 != sizeof(struct ng_bridge_config)) {
414 error = EINVAL;
415 break;
416 }
417 conf = (struct ng_bridge_config *)msg->data;
418 priv->conf = *conf;
419 for (i = 0; i < NG_BRIDGE_MAX_LINKS; i++)
420 priv->conf.ipfw[i] = !!priv->conf.ipfw[i];
421 break;
422 }
423 case NGM_BRIDGE_RESET:
424 {
425 int i;
426
427 /* Flush all entries in the hash table */
428 ng_bridge_remove_hosts(priv, -1);
429
430 /* Reset all loop detection counters and stats */
431 for (i = 0; i < NG_BRIDGE_MAX_LINKS; i++) {
432 if (priv->links[i] == NULL)
433 continue;
434 priv->links[i]->loopCount = 0;
435 bzero(&priv->links[i]->stats,
436 sizeof(priv->links[i]->stats));
437 }
438 break;
439 }
440 case NGM_BRIDGE_GET_STATS:
441 case NGM_BRIDGE_CLR_STATS:
442 case NGM_BRIDGE_GETCLR_STATS:
443 {
444 struct ng_bridge_link *link;
445 int linkNum;
446
447 /* Get link number */
448 if (msg->header.arglen != sizeof(u_int32_t)) {
449 error = EINVAL;
450 break;
451 }
452 linkNum = *((u_int32_t *)msg->data);
453 if (linkNum < 0 || linkNum >= NG_BRIDGE_MAX_LINKS) {
454 error = EINVAL;
455 break;
456 }
457 if ((link = priv->links[linkNum]) == NULL) {
458 error = ENOTCONN;
459 break;
460 }
461
462 /* Get/clear stats */
463 if (msg->header.cmd != NGM_BRIDGE_CLR_STATS) {
464 NG_MKRESPONSE(resp, msg,
465 sizeof(link->stats), M_NOWAIT);
466 if (resp == NULL) {
467 error = ENOMEM;
468 break;
469 }
470 bcopy(&link->stats,
471 resp->data, sizeof(link->stats));
472 }
473 if (msg->header.cmd != NGM_BRIDGE_GET_STATS)
474 bzero(&link->stats, sizeof(link->stats));
475 break;
476 }
477 case NGM_BRIDGE_GET_TABLE:
478 {
479 struct ng_bridge_host_ary *ary;
480 struct ng_bridge_hent *hent;
481 int i = 0, bucket;
482
483 NG_MKRESPONSE(resp, msg, sizeof(*ary)
484 + (priv->numHosts * sizeof(*ary->hosts)), M_NOWAIT);
485 if (resp == NULL) {
486 error = ENOMEM;
487 break;
488 }
489 ary = (struct ng_bridge_host_ary *)resp->data;
490 ary->numHosts = priv->numHosts;
491 for (bucket = 0; bucket < priv->numBuckets; bucket++) {
492 SLIST_FOREACH(hent, &priv->tab[bucket], next)
493 ary->hosts[i++] = hent->host;
494 }
495 break;
496 }
497 default:
498 error = EINVAL;
499 break;
500 }
501 break;
502 default:
503 error = EINVAL;
504 break;
505 }
506
507 /* Done */
508 NG_RESPOND_MSG(error, node, item, resp);
509 NG_FREE_MSG(msg);
510 return (error);
511 }
512
513 /*
514 * Receive data on a hook
515 */
516 static int
517 ng_bridge_rcvdata(hook_p hook, item_p item)
518 {
519 const node_p node = NG_HOOK_NODE(hook);
520 const priv_p priv = NG_NODE_PRIVATE(node);
521 struct ng_bridge_host *host;
522 struct ng_bridge_link *link;
523 struct ether_header *eh;
524 int error = 0, linkNum, linksSeen;
525 int manycast;
526 struct mbuf *m;
527 struct ng_bridge_link *firstLink;
528
529 NGI_GET_M(item, m);
530 /* Get link number */
531 linkNum = (intptr_t)NG_HOOK_PRIVATE(hook);
532 KASSERT(linkNum >= 0 && linkNum < NG_BRIDGE_MAX_LINKS,
533 ("%s: linkNum=%u", __func__, linkNum));
534 link = priv->links[linkNum];
535 KASSERT(link != NULL, ("%s: link%d null", __func__, linkNum));
536
537 /* Sanity check packet and pull up header */
538 if (m->m_pkthdr.len < ETHER_HDR_LEN) {
539 link->stats.recvRunts++;
540 NG_FREE_ITEM(item);
541 NG_FREE_M(m);
542 return (EINVAL);
543 }
544 if (m->m_len < ETHER_HDR_LEN && !(m = m_pullup(m, ETHER_HDR_LEN))) {
545 link->stats.memoryFailures++;
546 NG_FREE_ITEM(item);
547 return (ENOBUFS);
548 }
549 eh = mtod(m, struct ether_header *);
550 if ((eh->ether_shost[0] & 1) != 0) {
551 link->stats.recvInvalid++;
552 NG_FREE_ITEM(item);
553 NG_FREE_M(m);
554 return (EINVAL);
555 }
556
557 /* Is link disabled due to a loopback condition? */
558 if (link->loopCount != 0) {
559 link->stats.loopDrops++;
560 NG_FREE_ITEM(item);
561 NG_FREE_M(m);
562 return (ELOOP); /* XXX is this an appropriate error? */
563 }
564
565 /* Update stats */
566 link->stats.recvPackets++;
567 link->stats.recvOctets += m->m_pkthdr.len;
568 if ((manycast = (eh->ether_dhost[0] & 1)) != 0) {
569 if (ETHER_EQUAL(eh->ether_dhost, ng_bridge_bcast_addr)) {
570 link->stats.recvBroadcasts++;
571 manycast = 2;
572 } else
573 link->stats.recvMulticasts++;
574 }
575
576 /* Look up packet's source Ethernet address in hashtable */
577 if ((host = ng_bridge_get(priv, eh->ether_shost)) != NULL) {
578
579 /* Update time since last heard from this host */
580 host->staleness = 0;
581
582 /* Did host jump to a different link? */
583 if (host->linkNum != linkNum) {
584
585 /*
586 * If the host's old link was recently established
587 * on the old link and it's already jumped to a new
588 * link, declare a loopback condition.
589 */
590 if (host->age < priv->conf.minStableAge) {
591
592 /* Log the problem */
593 if (priv->conf.debugLevel >= 2) {
594 struct ifnet *ifp = m->m_pkthdr.rcvif;
595 char suffix[32];
596
597 if (ifp != NULL)
598 snprintf(suffix, sizeof(suffix),
599 " (%s)", ifp->if_xname);
600 else
601 *suffix = '\0';
602 log(LOG_WARNING, "ng_bridge: %s:"
603 " loopback detected on %s%s\n",
604 ng_bridge_nodename(node),
605 NG_HOOK_NAME(hook), suffix);
606 }
607
608 /* Mark link as linka non grata */
609 link->loopCount = priv->conf.loopTimeout;
610 link->stats.loopDetects++;
611
612 /* Forget all hosts on this link */
613 ng_bridge_remove_hosts(priv, linkNum);
614
615 /* Drop packet */
616 link->stats.loopDrops++;
617 NG_FREE_ITEM(item);
618 NG_FREE_M(m);
619 return (ELOOP); /* XXX appropriate? */
620 }
621
622 /* Move host over to new link */
623 host->linkNum = linkNum;
624 host->age = 0;
625 }
626 } else {
627 if (!ng_bridge_put(priv, eh->ether_shost, linkNum)) {
628 link->stats.memoryFailures++;
629 NG_FREE_ITEM(item);
630 NG_FREE_M(m);
631 return (ENOMEM);
632 }
633 }
634
635 /* Run packet through ipfw processing, if enabled */
636 #if 0
637 if (priv->conf.ipfw[linkNum] && V_fw_enable && ip_fw_chk_ptr != NULL) {
638 /* XXX not implemented yet */
639 }
640 #endif
641
642 /*
643 * If unicast and destination host known, deliver to host's link,
644 * unless it is the same link as the packet came in on.
645 */
646 if (!manycast) {
647
648 /* Determine packet destination link */
649 if ((host = ng_bridge_get(priv, eh->ether_dhost)) != NULL) {
650 struct ng_bridge_link *const destLink
651 = priv->links[host->linkNum];
652
653 /* If destination same as incoming link, do nothing */
654 KASSERT(destLink != NULL,
655 ("%s: link%d null", __func__, host->linkNum));
656 if (destLink == link) {
657 NG_FREE_ITEM(item);
658 NG_FREE_M(m);
659 return (0);
660 }
661
662 /* Deliver packet out the destination link */
663 destLink->stats.xmitPackets++;
664 destLink->stats.xmitOctets += m->m_pkthdr.len;
665 NG_FWD_NEW_DATA(error, item, destLink->hook, m);
666 return (error);
667 }
668
669 /* Destination host is not known */
670 link->stats.recvUnknown++;
671 }
672
673 /* Distribute unknown, multicast, broadcast pkts to all other links */
674 firstLink = NULL;
675 for (linkNum = linksSeen = 0; linksSeen <= priv->numLinks; linkNum++) {
676 struct ng_bridge_link *destLink;
677 struct mbuf *m2 = NULL;
678
679 /*
680 * If we have checked all the links then now
681 * send the original on its reserved link
682 */
683 if (linksSeen == priv->numLinks) {
684 /* If we never saw a good link, leave. */
685 if (firstLink == NULL) {
686 NG_FREE_ITEM(item);
687 NG_FREE_M(m);
688 return (0);
689 }
690 destLink = firstLink;
691 } else {
692 destLink = priv->links[linkNum];
693 if (destLink != NULL)
694 linksSeen++;
695 /* Skip incoming link and disconnected links */
696 if (destLink == NULL || destLink == link) {
697 continue;
698 }
699 if (firstLink == NULL) {
700 /*
701 * This is the first usable link we have found.
702 * Reserve it for the originals.
703 * If we never find another we save a copy.
704 */
705 firstLink = destLink;
706 continue;
707 }
708
709 /*
710 * It's usable link but not the reserved (first) one.
711 * Copy mbuf info for sending.
712 */
713 m2 = m_dup(m, M_DONTWAIT); /* XXX m_copypacket() */
714 if (m2 == NULL) {
715 link->stats.memoryFailures++;
716 NG_FREE_ITEM(item);
717 NG_FREE_M(m);
718 return (ENOBUFS);
719 }
720 }
721
722 /* Update stats */
723 destLink->stats.xmitPackets++;
724 destLink->stats.xmitOctets += m->m_pkthdr.len;
725 switch (manycast) {
726 case 0: /* unicast */
727 break;
728 case 1: /* multicast */
729 destLink->stats.xmitMulticasts++;
730 break;
731 case 2: /* broadcast */
732 destLink->stats.xmitBroadcasts++;
733 break;
734 }
735
736 /* Send packet */
737 if (destLink == firstLink) {
738 /*
739 * If we've sent all the others, send the original
740 * on the first link we found.
741 */
742 NG_FWD_NEW_DATA(error, item, destLink->hook, m);
743 break; /* always done last - not really needed. */
744 } else {
745 NG_SEND_DATA_ONLY(error, destLink->hook, m2);
746 }
747 }
748 return (error);
749 }
750
751 /*
752 * Shutdown node
753 */
754 static int
755 ng_bridge_shutdown(node_p node)
756 {
757 const priv_p priv = NG_NODE_PRIVATE(node);
758
759 /*
760 * Shut down everything including the timer. Even if the
761 * callout has already been dequeued and is about to be
762 * run, ng_bridge_timeout() won't be fired as the node
763 * is already marked NGF_INVALID, so we're safe to free
764 * the node now.
765 */
766 KASSERT(priv->numLinks == 0 && priv->numHosts == 0,
767 ("%s: numLinks=%d numHosts=%d",
768 __func__, priv->numLinks, priv->numHosts));
769 ng_uncallout(&priv->timer, node);
770 NG_NODE_SET_PRIVATE(node, NULL);
771 NG_NODE_UNREF(node);
772 free(priv->tab, M_NETGRAPH_BRIDGE);
773 free(priv, M_NETGRAPH_BRIDGE);
774 return (0);
775 }
776
777 /*
778 * Hook disconnection.
779 */
780 static int
781 ng_bridge_disconnect(hook_p hook)
782 {
783 const priv_p priv = NG_NODE_PRIVATE(NG_HOOK_NODE(hook));
784 int linkNum;
785
786 /* Get link number */
787 linkNum = (intptr_t)NG_HOOK_PRIVATE(hook);
788 KASSERT(linkNum >= 0 && linkNum < NG_BRIDGE_MAX_LINKS,
789 ("%s: linkNum=%u", __func__, linkNum));
790
791 /* Remove all hosts associated with this link */
792 ng_bridge_remove_hosts(priv, linkNum);
793
794 /* Free associated link information */
795 KASSERT(priv->links[linkNum] != NULL, ("%s: no link", __func__));
796 free(priv->links[linkNum], M_NETGRAPH_BRIDGE);
797 priv->links[linkNum] = NULL;
798 priv->numLinks--;
799
800 /* If no more hooks, go away */
801 if ((NG_NODE_NUMHOOKS(NG_HOOK_NODE(hook)) == 0)
802 && (NG_NODE_IS_VALID(NG_HOOK_NODE(hook)))) {
803 ng_rmnode_self(NG_HOOK_NODE(hook));
804 }
805 return (0);
806 }
807
808 /******************************************************************
809 HASH TABLE FUNCTIONS
810 ******************************************************************/
811
812 /*
813 * Hash algorithm
814 */
815 #define HASH(addr,mask) ( (((const u_int16_t *)(addr))[0] \
816 ^ ((const u_int16_t *)(addr))[1] \
817 ^ ((const u_int16_t *)(addr))[2]) & (mask) )
818
819 /*
820 * Find a host entry in the table.
821 */
822 static struct ng_bridge_host *
823 ng_bridge_get(priv_p priv, const u_char *addr)
824 {
825 const int bucket = HASH(addr, priv->hashMask);
826 struct ng_bridge_hent *hent;
827
828 SLIST_FOREACH(hent, &priv->tab[bucket], next) {
829 if (ETHER_EQUAL(hent->host.addr, addr))
830 return (&hent->host);
831 }
832 return (NULL);
833 }
834
835 /*
836 * Add a new host entry to the table. This assumes the host doesn't
837 * already exist in the table. Returns 1 on success, 0 if there
838 * was a memory allocation failure.
839 */
840 static int
841 ng_bridge_put(priv_p priv, const u_char *addr, int linkNum)
842 {
843 const int bucket = HASH(addr, priv->hashMask);
844 struct ng_bridge_hent *hent;
845
846 #ifdef INVARIANTS
847 /* Assert that entry does not already exist in hashtable */
848 SLIST_FOREACH(hent, &priv->tab[bucket], next) {
849 KASSERT(!ETHER_EQUAL(hent->host.addr, addr),
850 ("%s: entry %6D exists in table", __func__, addr, ":"));
851 }
852 #endif
853
854 /* Allocate and initialize new hashtable entry */
855 hent = malloc(sizeof(*hent), M_NETGRAPH_BRIDGE, M_NOWAIT);
856 if (hent == NULL)
857 return (0);
858 bcopy(addr, hent->host.addr, ETHER_ADDR_LEN);
859 hent->host.linkNum = linkNum;
860 hent->host.staleness = 0;
861 hent->host.age = 0;
862
863 /* Add new element to hash bucket */
864 SLIST_INSERT_HEAD(&priv->tab[bucket], hent, next);
865 priv->numHosts++;
866
867 /* Resize table if necessary */
868 ng_bridge_rehash(priv);
869 return (1);
870 }
871
872 /*
873 * Resize the hash table. We try to maintain the number of buckets
874 * such that the load factor is in the range 0.25 to 1.0.
875 *
876 * If we can't get the new memory then we silently fail. This is OK
877 * because things will still work and we'll try again soon anyway.
878 */
879 static void
880 ng_bridge_rehash(priv_p priv)
881 {
882 struct ng_bridge_bucket *newTab;
883 int oldBucket, newBucket;
884 int newNumBuckets;
885 u_int newMask;
886
887 /* Is table too full or too empty? */
888 if (priv->numHosts > priv->numBuckets
889 && (priv->numBuckets << 1) <= MAX_BUCKETS)
890 newNumBuckets = priv->numBuckets << 1;
891 else if (priv->numHosts < (priv->numBuckets >> 2)
892 && (priv->numBuckets >> 2) >= MIN_BUCKETS)
893 newNumBuckets = priv->numBuckets >> 2;
894 else
895 return;
896 newMask = newNumBuckets - 1;
897
898 /* Allocate and initialize new table */
899 newTab = malloc(newNumBuckets * sizeof(*newTab),
900 M_NETGRAPH_BRIDGE, M_NOWAIT | M_ZERO);
901 if (newTab == NULL)
902 return;
903
904 /* Move all entries from old table to new table */
905 for (oldBucket = 0; oldBucket < priv->numBuckets; oldBucket++) {
906 struct ng_bridge_bucket *const oldList = &priv->tab[oldBucket];
907
908 while (!SLIST_EMPTY(oldList)) {
909 struct ng_bridge_hent *const hent
910 = SLIST_FIRST(oldList);
911
912 SLIST_REMOVE_HEAD(oldList, next);
913 newBucket = HASH(hent->host.addr, newMask);
914 SLIST_INSERT_HEAD(&newTab[newBucket], hent, next);
915 }
916 }
917
918 /* Replace old table with new one */
919 if (priv->conf.debugLevel >= 3) {
920 log(LOG_INFO, "ng_bridge: %s: table size %d -> %d\n",
921 ng_bridge_nodename(priv->node),
922 priv->numBuckets, newNumBuckets);
923 }
924 free(priv->tab, M_NETGRAPH_BRIDGE);
925 priv->numBuckets = newNumBuckets;
926 priv->hashMask = newMask;
927 priv->tab = newTab;
928 return;
929 }
930
931 /******************************************************************
932 MISC FUNCTIONS
933 ******************************************************************/
934
935 /*
936 * Remove all hosts associated with a specific link from the hashtable.
937 * If linkNum == -1, then remove all hosts in the table.
938 */
939 static void
940 ng_bridge_remove_hosts(priv_p priv, int linkNum)
941 {
942 int bucket;
943
944 for (bucket = 0; bucket < priv->numBuckets; bucket++) {
945 struct ng_bridge_hent **hptr = &SLIST_FIRST(&priv->tab[bucket]);
946
947 while (*hptr != NULL) {
948 struct ng_bridge_hent *const hent = *hptr;
949
950 if (linkNum == -1 || hent->host.linkNum == linkNum) {
951 *hptr = SLIST_NEXT(hent, next);
952 free(hent, M_NETGRAPH_BRIDGE);
953 priv->numHosts--;
954 } else
955 hptr = &SLIST_NEXT(hent, next);
956 }
957 }
958 }
959
960 /*
961 * Handle our once-per-second timeout event. We do two things:
962 * we decrement link->loopCount for those links being muted due to
963 * a detected loopback condition, and we remove any hosts from
964 * the hashtable whom we haven't heard from in a long while.
965 */
966 static void
967 ng_bridge_timeout(node_p node, hook_p hook, void *arg1, int arg2)
968 {
969 const priv_p priv = NG_NODE_PRIVATE(node);
970 int bucket;
971 int counter = 0;
972 int linkNum;
973
974 /* Update host time counters and remove stale entries */
975 for (bucket = 0; bucket < priv->numBuckets; bucket++) {
976 struct ng_bridge_hent **hptr = &SLIST_FIRST(&priv->tab[bucket]);
977
978 while (*hptr != NULL) {
979 struct ng_bridge_hent *const hent = *hptr;
980
981 /* Make sure host's link really exists */
982 KASSERT(priv->links[hent->host.linkNum] != NULL,
983 ("%s: host %6D on nonexistent link %d\n",
984 __func__, hent->host.addr, ":",
985 hent->host.linkNum));
986
987 /* Remove hosts we haven't heard from in a while */
988 if (++hent->host.staleness >= priv->conf.maxStaleness) {
989 *hptr = SLIST_NEXT(hent, next);
990 free(hent, M_NETGRAPH_BRIDGE);
991 priv->numHosts--;
992 } else {
993 if (hent->host.age < 0xffff)
994 hent->host.age++;
995 hptr = &SLIST_NEXT(hent, next);
996 counter++;
997 }
998 }
999 }
1000 KASSERT(priv->numHosts == counter,
1001 ("%s: hosts: %d != %d", __func__, priv->numHosts, counter));
1002
1003 /* Decrease table size if necessary */
1004 ng_bridge_rehash(priv);
1005
1006 /* Decrease loop counter on muted looped back links */
1007 for (counter = linkNum = 0; linkNum < NG_BRIDGE_MAX_LINKS; linkNum++) {
1008 struct ng_bridge_link *const link = priv->links[linkNum];
1009
1010 if (link != NULL) {
1011 if (link->loopCount != 0) {
1012 link->loopCount--;
1013 if (link->loopCount == 0
1014 && priv->conf.debugLevel >= 2) {
1015 log(LOG_INFO, "ng_bridge: %s:"
1016 " restoring looped back link%d\n",
1017 ng_bridge_nodename(node), linkNum);
1018 }
1019 }
1020 counter++;
1021 }
1022 }
1023 KASSERT(priv->numLinks == counter,
1024 ("%s: links: %d != %d", __func__, priv->numLinks, counter));
1025
1026 /* Register a new timeout, keeping the existing node reference */
1027 ng_callout(&priv->timer, node, NULL, hz, ng_bridge_timeout, NULL, 0);
1028 }
1029
1030 /*
1031 * Return node's "name", even if it doesn't have one.
1032 */
1033 static const char *
1034 ng_bridge_nodename(node_p node)
1035 {
1036 static char name[NG_NODESIZ];
1037
1038 if (NG_NODE_NAME(node) != NULL)
1039 snprintf(name, sizeof(name), "%s", NG_NODE_NAME(node));
1040 else
1041 snprintf(name, sizeof(name), "[%x]", ng_node2ID(node));
1042 return name;
1043 }
1044
Cache object: 215c1090fb68c3117949db616cd39692
|