1 /* SPDX-License-Identifier: GPL-2.0-or-later */
3 * Linux ethernet bridge
6 * Lennert Buytenhek <buytenh@gnu.org>
12 #include <linux/netdevice.h>
13 #include <linux/if_bridge.h>
14 #include <linux/netpoll.h>
15 #include <linux/u64_stats_sync.h>
16 #include <net/route.h>
17 #include <net/ip6_fib.h>
18 #include <linux/if_vlan.h>
19 #include <linux/rhashtable.h>
20 #include <linux/refcount.h>
22 #define BR_HASH_BITS 8
23 #define BR_HASH_SIZE (1 << BR_HASH_BITS)
25 #define BR_HOLD_TIME (1*HZ)
27 #define BR_PORT_BITS 10
28 #define BR_MAX_PORTS (1<<BR_PORT_BITS)
30 #define BR_MULTICAST_DEFAULT_HASH_MAX 4096
31 #define BR_MULTICAST_QUERY_INTVL_MIN msecs_to_jiffies(1000)
32 #define BR_MULTICAST_STARTUP_QUERY_INTVL_MIN BR_MULTICAST_QUERY_INTVL_MIN
34 #define BR_HWDOM_MAX BITS_PER_LONG
36 #define BR_VERSION "2.3"
38 /* Control of forwarding link local multicast */
39 #define BR_GROUPFWD_DEFAULT 0
40 /* Don't allow forwarding of control protocols like STP, MAC PAUSE and LACP */
42 BR_GROUPFWD_STP = BIT(0),
43 BR_GROUPFWD_MACPAUSE = BIT(1),
44 BR_GROUPFWD_LACP = BIT(2),
47 #define BR_GROUPFWD_RESTRICTED (BR_GROUPFWD_STP | BR_GROUPFWD_MACPAUSE | \
49 /* The Nearest Customer Bridge Group Address, 01-80-C2-00-00-[00,0B,0C,0D,0F] */
50 #define BR_GROUPFWD_8021AD 0xB801u
52 /* Path to usermode spanning tree program */
53 #define BR_STP_PROG "/sbin/bridge-stp"
55 #define BR_FDB_NOTIFY_SETTABLE_BITS (FDB_NOTIFY_BIT | FDB_NOTIFY_INACTIVE_BIT)
57 typedef struct bridge_id bridge_id;
58 typedef struct mac_addr mac_addr;
59 typedef __u16 port_id;
62 unsigned char prio[2];
63 unsigned char addr[ETH_ALEN];
67 unsigned char addr[ETH_ALEN];
70 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
72 struct bridge_mcast_own_query {
73 struct timer_list timer;
78 struct bridge_mcast_other_query {
79 struct timer_list timer;
80 unsigned long delay_time;
83 /* selected querier */
84 struct bridge_mcast_querier {
87 seqcount_spinlock_t seq;
90 /* IGMP/MLD statistics */
91 struct bridge_mcast_stats {
92 struct br_mcast_stats mstats;
93 struct u64_stats_sync syncp;
97 /* net_bridge_mcast_port must be always defined due to forwarding stubs */
98 struct net_bridge_mcast_port {
99 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
100 struct net_bridge_port *port;
101 struct net_bridge_vlan *vlan;
103 struct bridge_mcast_own_query ip4_own_query;
104 struct timer_list ip4_mc_router_timer;
105 struct hlist_node ip4_rlist;
106 #if IS_ENABLED(CONFIG_IPV6)
107 struct bridge_mcast_own_query ip6_own_query;
108 struct timer_list ip6_mc_router_timer;
109 struct hlist_node ip6_rlist;
110 #endif /* IS_ENABLED(CONFIG_IPV6) */
111 unsigned char multicast_router;
112 #endif /* CONFIG_BRIDGE_IGMP_SNOOPING */
115 /* net_bridge_mcast must be always defined due to forwarding stubs */
116 struct net_bridge_mcast {
117 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
118 struct net_bridge *br;
119 struct net_bridge_vlan *vlan;
121 u32 multicast_last_member_count;
122 u32 multicast_startup_query_count;
124 u8 multicast_querier;
125 u8 multicast_igmp_version;
127 #if IS_ENABLED(CONFIG_IPV6)
128 u8 multicast_mld_version;
130 unsigned long multicast_last_member_interval;
131 unsigned long multicast_membership_interval;
132 unsigned long multicast_querier_interval;
133 unsigned long multicast_query_interval;
134 unsigned long multicast_query_response_interval;
135 unsigned long multicast_startup_query_interval;
136 struct hlist_head ip4_mc_router_list;
137 struct timer_list ip4_mc_router_timer;
138 struct bridge_mcast_other_query ip4_other_query;
139 struct bridge_mcast_own_query ip4_own_query;
140 struct bridge_mcast_querier ip4_querier;
141 #if IS_ENABLED(CONFIG_IPV6)
142 struct hlist_head ip6_mc_router_list;
143 struct timer_list ip6_mc_router_timer;
144 struct bridge_mcast_other_query ip6_other_query;
145 struct bridge_mcast_own_query ip6_own_query;
146 struct bridge_mcast_querier ip6_querier;
147 #endif /* IS_ENABLED(CONFIG_IPV6) */
148 #endif /* CONFIG_BRIDGE_IGMP_SNOOPING */
151 struct br_tunnel_info {
153 struct metadata_dst __rcu *tunnel_dst;
156 /* private vlan flags */
158 BR_VLFLAG_PER_PORT_STATS = BIT(0),
159 BR_VLFLAG_ADDED_BY_SWITCHDEV = BIT(1),
160 BR_VLFLAG_MCAST_ENABLED = BIT(2),
161 BR_VLFLAG_GLOBAL_MCAST_ENABLED = BIT(3),
165 * struct net_bridge_vlan - per-vlan entry
167 * @vnode: rhashtable member
169 * @flags: bridge vlan flags
170 * @priv_flags: private (in-kernel) bridge vlan flags
171 * @state: STP state (e.g. blocking, learning, forwarding)
172 * @stats: per-cpu VLAN statistics
173 * @br: if MASTER flag set, this points to a bridge struct
174 * @port: if MASTER flag unset, this points to a port struct
175 * @refcnt: if MASTER flag set, this is bumped for each port referencing it
176 * @brvlan: if MASTER flag unset, this points to the global per-VLAN context
177 * for this VLAN entry
178 * @br_mcast_ctx: if MASTER flag set, this is the global vlan multicast context
179 * @port_mcast_ctx: if MASTER flag unset, this is the per-port/vlan multicast
181 * @msti: if MASTER flag set, this holds the VLANs MST instance
182 * @vlist: sorted list of VLAN entries
183 * @rcu: used for entry destruction
185 * This structure is shared between the global per-VLAN entries contained in
186 * the bridge rhashtable and the local per-port per-VLAN entries contained in
187 * the port's rhashtable. The union entries should be interpreted depending on
188 * the entry flags that are set.
190 struct net_bridge_vlan {
191 struct rhash_head vnode;
192 struct rhash_head tnode;
197 struct pcpu_sw_netstats __percpu *stats;
199 struct net_bridge *br;
200 struct net_bridge_port *port;
204 struct net_bridge_vlan *brvlan;
207 struct br_tunnel_info tinfo;
210 struct net_bridge_mcast br_mcast_ctx;
211 struct net_bridge_mcast_port port_mcast_ctx;
216 struct list_head vlist;
222 * struct net_bridge_vlan_group
224 * @vlan_hash: VLAN entry rhashtable
225 * @vlan_list: sorted VLAN entry list
226 * @num_vlans: number of total VLAN entries
227 * @pvid: PVID VLAN id
228 * @pvid_state: PVID's STP state (e.g. forwarding, learning, blocking)
230 * IMPORTANT: Be careful when checking if there're VLAN entries using list
231 * primitives because the bridge can have entries in its list which
232 * are just for global context but not for filtering, i.e. they have
233 * the master flag set but not the brentry flag. If you have to check
234 * if there're "real" entries in the bridge please test @num_vlans
236 struct net_bridge_vlan_group {
237 struct rhashtable vlan_hash;
238 struct rhashtable tunnel_hash;
239 struct list_head vlan_list;
245 /* bridge fdb flags */
250 BR_FDB_ADDED_BY_USER,
251 BR_FDB_ADDED_BY_EXT_LEARN,
254 BR_FDB_NOTIFY_INACTIVE
257 struct net_bridge_fdb_key {
262 struct net_bridge_fdb_entry {
263 struct rhash_head rhnode;
264 struct net_bridge_port *dst;
266 struct net_bridge_fdb_key key;
267 struct hlist_node fdb_node;
270 /* write-heavy members should not affect lookups */
271 unsigned long updated ____cacheline_aligned_in_smp;
277 struct net_bridge_fdb_flush_desc {
279 unsigned long flags_mask;
284 #define MDB_PG_FLAGS_PERMANENT BIT(0)
285 #define MDB_PG_FLAGS_OFFLOAD BIT(1)
286 #define MDB_PG_FLAGS_FAST_LEAVE BIT(2)
287 #define MDB_PG_FLAGS_STAR_EXCL BIT(3)
288 #define MDB_PG_FLAGS_BLOCKED BIT(4)
290 #define PG_SRC_ENT_LIMIT 32
292 #define BR_SGRP_F_DELETE BIT(0)
293 #define BR_SGRP_F_SEND BIT(1)
294 #define BR_SGRP_F_INSTALLED BIT(2)
296 struct net_bridge_mcast_gc {
297 struct hlist_node gc_node;
298 void (*destroy)(struct net_bridge_mcast_gc *gc);
301 struct net_bridge_group_src {
302 struct hlist_node node;
305 struct net_bridge_port_group *pg;
307 u8 src_query_rexmit_cnt;
308 struct timer_list timer;
310 struct net_bridge *br;
311 struct net_bridge_mcast_gc mcast_gc;
315 struct net_bridge_port_group_sg_key {
316 struct net_bridge_port *port;
320 struct net_bridge_port_group {
321 struct net_bridge_port_group __rcu *next;
322 struct net_bridge_port_group_sg_key key;
323 unsigned char eth_addr[ETH_ALEN] __aligned(2);
325 unsigned char filter_mode;
326 unsigned char grp_query_rexmit_cnt;
327 unsigned char rt_protocol;
329 struct hlist_head src_list;
330 unsigned int src_ents;
331 struct timer_list timer;
332 struct timer_list rexmit_timer;
333 struct hlist_node mglist;
334 struct rb_root eht_set_tree;
335 struct rb_root eht_host_tree;
337 struct rhash_head rhnode;
338 struct net_bridge_mcast_gc mcast_gc;
342 struct net_bridge_mdb_entry {
343 struct rhash_head rhnode;
344 struct net_bridge *br;
345 struct net_bridge_port_group __rcu *ports;
349 struct timer_list timer;
350 struct hlist_node mdb_node;
352 struct net_bridge_mcast_gc mcast_gc;
356 struct net_bridge_port {
357 struct net_bridge *br;
358 struct net_device *dev;
359 netdevice_tracker dev_tracker;
360 struct list_head list;
363 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
364 struct net_bridge_vlan_group __rcu *vlgrp;
366 struct net_bridge_port __rcu *backup_port;
372 unsigned char topology_change_ack;
373 unsigned char config_pending;
375 port_id designated_port;
376 bridge_id designated_root;
377 bridge_id designated_bridge;
380 unsigned long designated_age;
382 struct timer_list forward_delay_timer;
383 struct timer_list hold_timer;
384 struct timer_list message_age_timer;
388 struct net_bridge_mcast_port multicast_ctx;
390 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
391 struct bridge_mcast_stats __percpu *mcast_stats;
393 u32 multicast_eht_hosts_limit;
394 u32 multicast_eht_hosts_cnt;
395 struct hlist_head mglist;
399 char sysfs_name[IFNAMSIZ];
402 #ifdef CONFIG_NET_POLL_CONTROLLER
405 #ifdef CONFIG_NET_SWITCHDEV
406 /* Identifier used to group ports that share the same switchdev
411 struct netdev_phys_item_id ppid;
414 u16 backup_redirected_cnt;
416 struct bridge_stp_xstats stp_xstats;
419 #define kobj_to_brport(obj) container_of(obj, struct net_bridge_port, kobj)
421 #define br_auto_port(p) ((p)->flags & BR_AUTO_MASK)
422 #define br_promisc_port(p) ((p)->flags & BR_PROMISC)
424 static inline struct net_bridge_port *br_port_get_rcu(const struct net_device *dev)
426 return rcu_dereference(dev->rx_handler_data);
429 static inline struct net_bridge_port *br_port_get_rtnl(const struct net_device *dev)
431 return netif_is_bridge_port(dev) ?
432 rtnl_dereference(dev->rx_handler_data) : NULL;
435 static inline struct net_bridge_port *br_port_get_rtnl_rcu(const struct net_device *dev)
437 return netif_is_bridge_port(dev) ?
438 rcu_dereference_rtnl(dev->rx_handler_data) : NULL;
441 enum net_bridge_opts {
443 BROPT_VLAN_STATS_ENABLED,
444 BROPT_NF_CALL_IPTABLES,
445 BROPT_NF_CALL_IP6TABLES,
446 BROPT_NF_CALL_ARPTABLES,
447 BROPT_GROUP_ADDR_SET,
448 BROPT_MULTICAST_ENABLED,
449 BROPT_MULTICAST_QUERY_USE_IFADDR,
450 BROPT_MULTICAST_STATS_ENABLED,
452 BROPT_NEIGH_SUPPRESS_ENABLED,
453 BROPT_MTU_SET_BY_USER,
454 BROPT_VLAN_STATS_PER_PORT,
456 BROPT_VLAN_BRIDGE_BINDING,
457 BROPT_MCAST_VLAN_SNOOPING_ENABLED,
463 spinlock_t hash_lock;
464 struct hlist_head frame_type_list;
465 struct net_device *dev;
466 unsigned long options;
467 /* These fields are accessed on each packet */
468 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
471 struct net_bridge_vlan_group __rcu *vlgrp;
474 struct rhashtable fdb_hash_tbl;
475 struct list_head port_list;
476 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
478 struct rtable fake_rtable;
479 struct rt6_info fake_rt6_info;
483 u16 group_fwd_mask_required;
486 bridge_id designated_root;
488 unsigned char topology_change;
489 unsigned char topology_change_detected;
491 unsigned long max_age;
492 unsigned long hello_time;
493 unsigned long forward_delay;
494 unsigned long ageing_time;
495 unsigned long bridge_max_age;
496 unsigned long bridge_hello_time;
497 unsigned long bridge_forward_delay;
498 unsigned long bridge_ageing_time;
501 u8 group_addr[ETH_ALEN];
504 BR_NO_STP, /* no spanning tree */
505 BR_KERNEL_STP, /* old STP in kernel */
506 BR_USER_STP, /* new RSTP in userspace */
509 struct net_bridge_mcast multicast_ctx;
511 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
512 struct bridge_mcast_stats __percpu *mcast_stats;
516 spinlock_t multicast_lock;
518 struct rhashtable mdb_hash_tbl;
519 struct rhashtable sg_port_tbl;
521 struct hlist_head mcast_gc_list;
522 struct hlist_head mdb_list;
524 struct work_struct mcast_gc_work;
527 struct timer_list hello_timer;
528 struct timer_list tcn_timer;
529 struct timer_list topology_change_timer;
530 struct delayed_work gc_work;
531 struct kobject *ifobj;
534 #ifdef CONFIG_NET_SWITCHDEV
535 /* Counter used to make sure that hardware domains get unique
536 * identifiers in case a bridge spans multiple switchdev instances.
539 /* Bit mask of hardware domain numbers in use */
540 unsigned long busy_hwdoms;
542 struct hlist_head fdb_list;
544 #if IS_ENABLED(CONFIG_BRIDGE_MRP)
545 struct hlist_head mrp_list;
547 #if IS_ENABLED(CONFIG_BRIDGE_CFM)
548 struct hlist_head mep_list;
552 struct br_input_skb_cb {
553 struct net_device *brdev;
556 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
560 u8 proxyarp_replied:1;
561 u8 src_port_isolated:1;
562 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
565 #ifdef CONFIG_NETFILTER_FAMILY_BRIDGE
566 u8 br_netfilter_broute:1;
569 #ifdef CONFIG_NET_SWITCHDEV
570 /* Set if TX data plane offloading is used towards at least one
574 /* The switchdev hardware domain from which this packet was received.
575 * If skb->offload_fwd_mark was set, then this packet was already
576 * forwarded by hardware to the other ports in the source hardware
577 * domain, otherwise it wasn't.
580 /* Bit mask of hardware domains towards this packet has already been
581 * transmitted using the TX data plane offload.
583 unsigned long fwd_hwdoms;
587 #define BR_INPUT_SKB_CB(__skb) ((struct br_input_skb_cb *)(__skb)->cb)
589 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
590 # define BR_INPUT_SKB_CB_MROUTERS_ONLY(__skb) (BR_INPUT_SKB_CB(__skb)->mrouters_only)
592 # define BR_INPUT_SKB_CB_MROUTERS_ONLY(__skb) (0)
595 #define br_printk(level, br, format, args...) \
596 printk(level "%s: " format, (br)->dev->name, ##args)
598 #define br_err(__br, format, args...) \
599 br_printk(KERN_ERR, __br, format, ##args)
600 #define br_warn(__br, format, args...) \
601 br_printk(KERN_WARNING, __br, format, ##args)
602 #define br_notice(__br, format, args...) \
603 br_printk(KERN_NOTICE, __br, format, ##args)
604 #define br_info(__br, format, args...) \
605 br_printk(KERN_INFO, __br, format, ##args)
607 #define br_debug(br, format, args...) \
608 pr_debug("%s: " format, (br)->dev->name, ##args)
610 /* called under bridge lock */
611 static inline int br_is_root_bridge(const struct net_bridge *br)
613 return !memcmp(&br->bridge_id, &br->designated_root, 8);
616 /* check if a VLAN entry is global */
617 static inline bool br_vlan_is_master(const struct net_bridge_vlan *v)
619 return v->flags & BRIDGE_VLAN_INFO_MASTER;
622 /* check if a VLAN entry is used by the bridge */
623 static inline bool br_vlan_is_brentry(const struct net_bridge_vlan *v)
625 return v->flags & BRIDGE_VLAN_INFO_BRENTRY;
628 /* check if we should use the vlan entry, returns false if it's only context */
629 static inline bool br_vlan_should_use(const struct net_bridge_vlan *v)
631 if (br_vlan_is_master(v)) {
632 if (br_vlan_is_brentry(v))
641 static inline bool nbp_state_should_learn(const struct net_bridge_port *p)
643 return p->state == BR_STATE_LEARNING || p->state == BR_STATE_FORWARDING;
646 static inline bool br_vlan_valid_id(u16 vid, struct netlink_ext_ack *extack)
648 bool ret = vid > 0 && vid < VLAN_VID_MASK;
651 NL_SET_ERR_MSG_MOD(extack, "Vlan id is invalid");
656 static inline bool br_vlan_valid_range(const struct bridge_vlan_info *cur,
657 const struct bridge_vlan_info *last,
658 struct netlink_ext_ack *extack)
660 /* pvid flag is not allowed in ranges */
661 if (cur->flags & BRIDGE_VLAN_INFO_PVID) {
662 NL_SET_ERR_MSG_MOD(extack, "Pvid isn't allowed in a range");
666 /* when cur is the range end, check if:
667 * - it has range start flag
668 * - range ids are invalid (end is equal to or before start)
671 if (cur->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
672 NL_SET_ERR_MSG_MOD(extack, "Found a new vlan range start while processing one");
674 } else if (!(cur->flags & BRIDGE_VLAN_INFO_RANGE_END)) {
675 NL_SET_ERR_MSG_MOD(extack, "Vlan range end flag is missing");
677 } else if (cur->vid <= last->vid) {
678 NL_SET_ERR_MSG_MOD(extack, "End vlan id is less than or equal to start vlan id");
683 /* check for required range flags */
684 if (!(cur->flags & (BRIDGE_VLAN_INFO_RANGE_BEGIN |
685 BRIDGE_VLAN_INFO_RANGE_END))) {
686 NL_SET_ERR_MSG_MOD(extack, "Both vlan range flags are missing");
693 static inline u8 br_vlan_multicast_router(const struct net_bridge_vlan *v)
695 u8 mcast_router = MDB_RTR_TYPE_DISABLED;
697 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
698 if (!br_vlan_is_master(v))
699 mcast_router = v->port_mcast_ctx.multicast_router;
701 mcast_router = v->br_mcast_ctx.multicast_router;
707 static inline int br_afspec_cmd_to_rtm(int cmd)
719 static inline int br_opt_get(const struct net_bridge *br,
720 enum net_bridge_opts opt)
722 return test_bit(opt, &br->options);
725 int br_boolopt_toggle(struct net_bridge *br, enum br_boolopt_id opt, bool on,
726 struct netlink_ext_ack *extack);
727 int br_boolopt_get(const struct net_bridge *br, enum br_boolopt_id opt);
728 int br_boolopt_multi_toggle(struct net_bridge *br,
729 struct br_boolopt_multi *bm,
730 struct netlink_ext_ack *extack);
731 void br_boolopt_multi_get(const struct net_bridge *br,
732 struct br_boolopt_multi *bm);
733 void br_opt_toggle(struct net_bridge *br, enum net_bridge_opts opt, bool on);
736 void br_dev_setup(struct net_device *dev);
737 void br_dev_delete(struct net_device *dev, struct list_head *list);
738 netdev_tx_t br_dev_xmit(struct sk_buff *skb, struct net_device *dev);
739 #ifdef CONFIG_NET_POLL_CONTROLLER
740 static inline void br_netpoll_send_skb(const struct net_bridge_port *p,
743 netpoll_send_skb(p->np, skb);
746 int br_netpoll_enable(struct net_bridge_port *p);
747 void br_netpoll_disable(struct net_bridge_port *p);
749 static inline void br_netpoll_send_skb(const struct net_bridge_port *p,
754 static inline int br_netpoll_enable(struct net_bridge_port *p)
759 static inline void br_netpoll_disable(struct net_bridge_port *p)
765 #define FDB_FLUSH_IGNORED_NDM_FLAGS (NTF_MASTER | NTF_SELF)
766 #define FDB_FLUSH_ALLOWED_NDM_STATES (NUD_PERMANENT | NUD_NOARP)
767 #define FDB_FLUSH_ALLOWED_NDM_FLAGS (NTF_USE | NTF_EXT_LEARNED | \
768 NTF_STICKY | NTF_OFFLOADED)
770 int br_fdb_init(void);
771 void br_fdb_fini(void);
772 int br_fdb_hash_init(struct net_bridge *br);
773 void br_fdb_hash_fini(struct net_bridge *br);
774 void br_fdb_flush(struct net_bridge *br,
775 const struct net_bridge_fdb_flush_desc *desc);
776 void br_fdb_find_delete_local(struct net_bridge *br,
777 const struct net_bridge_port *p,
778 const unsigned char *addr, u16 vid);
779 void br_fdb_changeaddr(struct net_bridge_port *p, const unsigned char *newaddr);
780 void br_fdb_change_mac_address(struct net_bridge *br, const u8 *newaddr);
781 void br_fdb_cleanup(struct work_struct *work);
782 void br_fdb_delete_by_port(struct net_bridge *br,
783 const struct net_bridge_port *p, u16 vid, int do_all);
784 struct net_bridge_fdb_entry *br_fdb_find_rcu(struct net_bridge *br,
785 const unsigned char *addr,
787 int br_fdb_test_addr(struct net_device *dev, unsigned char *addr);
788 int br_fdb_fillbuf(struct net_bridge *br, void *buf, unsigned long count,
790 int br_fdb_add_local(struct net_bridge *br, struct net_bridge_port *source,
791 const unsigned char *addr, u16 vid);
792 void br_fdb_update(struct net_bridge *br, struct net_bridge_port *source,
793 const unsigned char *addr, u16 vid, unsigned long flags);
795 int br_fdb_delete(struct ndmsg *ndm, struct nlattr *tb[],
796 struct net_device *dev, const unsigned char *addr, u16 vid,
797 struct netlink_ext_ack *extack);
798 int br_fdb_delete_bulk(struct ndmsg *ndm, struct nlattr *tb[],
799 struct net_device *dev, u16 vid,
800 struct netlink_ext_ack *extack);
801 int br_fdb_add(struct ndmsg *nlh, struct nlattr *tb[], struct net_device *dev,
802 const unsigned char *addr, u16 vid, u16 nlh_flags,
803 struct netlink_ext_ack *extack);
804 int br_fdb_dump(struct sk_buff *skb, struct netlink_callback *cb,
805 struct net_device *dev, struct net_device *fdev, int *idx);
806 int br_fdb_get(struct sk_buff *skb, struct nlattr *tb[], struct net_device *dev,
807 const unsigned char *addr, u16 vid, u32 portid, u32 seq,
808 struct netlink_ext_ack *extack);
809 int br_fdb_sync_static(struct net_bridge *br, struct net_bridge_port *p);
810 void br_fdb_unsync_static(struct net_bridge *br, struct net_bridge_port *p);
811 int br_fdb_external_learn_add(struct net_bridge *br, struct net_bridge_port *p,
812 const unsigned char *addr, u16 vid,
814 int br_fdb_external_learn_del(struct net_bridge *br, struct net_bridge_port *p,
815 const unsigned char *addr, u16 vid,
817 void br_fdb_offloaded_set(struct net_bridge *br, struct net_bridge_port *p,
818 const unsigned char *addr, u16 vid, bool offloaded);
826 int br_dev_queue_push_xmit(struct net *net, struct sock *sk, struct sk_buff *skb);
827 void br_forward(const struct net_bridge_port *to, struct sk_buff *skb,
828 bool local_rcv, bool local_orig);
829 int br_forward_finish(struct net *net, struct sock *sk, struct sk_buff *skb);
830 void br_flood(struct net_bridge *br, struct sk_buff *skb,
831 enum br_pkt_type pkt_type, bool local_rcv, bool local_orig);
833 /* return true if both source port and dest port are isolated */
834 static inline bool br_skb_isolated(const struct net_bridge_port *to,
835 const struct sk_buff *skb)
837 return BR_INPUT_SKB_CB(skb)->src_port_isolated &&
838 (to->flags & BR_ISOLATED);
842 void br_port_carrier_check(struct net_bridge_port *p, bool *notified);
843 int br_add_bridge(struct net *net, const char *name);
844 int br_del_bridge(struct net *net, const char *name);
845 int br_add_if(struct net_bridge *br, struct net_device *dev,
846 struct netlink_ext_ack *extack);
847 int br_del_if(struct net_bridge *br, struct net_device *dev);
848 void br_mtu_auto_adjust(struct net_bridge *br);
849 netdev_features_t br_features_recompute(struct net_bridge *br,
850 netdev_features_t features);
851 void br_port_flags_change(struct net_bridge_port *port, unsigned long mask);
852 void br_manage_promisc(struct net_bridge *br);
853 int nbp_backup_change(struct net_bridge_port *p, struct net_device *backup_dev);
856 int br_handle_frame_finish(struct net *net, struct sock *sk, struct sk_buff *skb);
857 rx_handler_func_t *br_get_rx_handler(const struct net_device *dev);
859 struct br_frame_type {
861 int (*frame_handler)(struct net_bridge_port *port,
862 struct sk_buff *skb);
863 struct hlist_node list;
866 void br_add_frame(struct net_bridge *br, struct br_frame_type *ft);
867 void br_del_frame(struct net_bridge *br, struct br_frame_type *ft);
869 static inline bool br_rx_handler_check_rcu(const struct net_device *dev)
871 return rcu_dereference(dev->rx_handler) == br_get_rx_handler(dev);
874 static inline bool br_rx_handler_check_rtnl(const struct net_device *dev)
876 return rcu_dereference_rtnl(dev->rx_handler) == br_get_rx_handler(dev);
879 static inline struct net_bridge_port *br_port_get_check_rcu(const struct net_device *dev)
881 return br_rx_handler_check_rcu(dev) ? br_port_get_rcu(dev) : NULL;
884 static inline struct net_bridge_port *
885 br_port_get_check_rtnl(const struct net_device *dev)
887 return br_rx_handler_check_rtnl(dev) ? br_port_get_rtnl_rcu(dev) : NULL;
891 int br_dev_siocdevprivate(struct net_device *dev, struct ifreq *rq,
892 void __user *data, int cmd);
893 int br_ioctl_stub(struct net *net, struct net_bridge *br, unsigned int cmd,
894 struct ifreq *ifr, void __user *uarg);
897 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
898 int br_multicast_rcv(struct net_bridge_mcast **brmctx,
899 struct net_bridge_mcast_port **pmctx,
900 struct net_bridge_vlan *vlan,
901 struct sk_buff *skb, u16 vid);
902 struct net_bridge_mdb_entry *br_mdb_get(struct net_bridge_mcast *brmctx,
903 struct sk_buff *skb, u16 vid);
904 int br_multicast_add_port(struct net_bridge_port *port);
905 void br_multicast_del_port(struct net_bridge_port *port);
906 void br_multicast_enable_port(struct net_bridge_port *port);
907 void br_multicast_disable_port(struct net_bridge_port *port);
908 void br_multicast_init(struct net_bridge *br);
909 void br_multicast_join_snoopers(struct net_bridge *br);
910 void br_multicast_leave_snoopers(struct net_bridge *br);
911 void br_multicast_open(struct net_bridge *br);
912 void br_multicast_stop(struct net_bridge *br);
913 void br_multicast_dev_del(struct net_bridge *br);
914 void br_multicast_flood(struct net_bridge_mdb_entry *mdst, struct sk_buff *skb,
915 struct net_bridge_mcast *brmctx,
916 bool local_rcv, bool local_orig);
917 int br_multicast_set_router(struct net_bridge_mcast *brmctx, unsigned long val);
918 int br_multicast_set_port_router(struct net_bridge_mcast_port *pmctx,
920 int br_multicast_set_vlan_router(struct net_bridge_vlan *v, u8 mcast_router);
921 int br_multicast_toggle(struct net_bridge *br, unsigned long val,
922 struct netlink_ext_ack *extack);
923 int br_multicast_set_querier(struct net_bridge_mcast *brmctx, unsigned long val);
924 int br_multicast_set_hash_max(struct net_bridge *br, unsigned long val);
925 int br_multicast_set_igmp_version(struct net_bridge_mcast *brmctx,
927 #if IS_ENABLED(CONFIG_IPV6)
928 int br_multicast_set_mld_version(struct net_bridge_mcast *brmctx,
931 struct net_bridge_mdb_entry *
932 br_mdb_ip_get(struct net_bridge *br, struct br_ip *dst);
933 struct net_bridge_mdb_entry *
934 br_multicast_new_group(struct net_bridge *br, struct br_ip *group);
935 struct net_bridge_port_group *
936 br_multicast_new_port_group(struct net_bridge_port *port, struct br_ip *group,
937 struct net_bridge_port_group __rcu *next,
938 unsigned char flags, const unsigned char *src,
939 u8 filter_mode, u8 rt_protocol);
940 int br_mdb_hash_init(struct net_bridge *br);
941 void br_mdb_hash_fini(struct net_bridge *br);
942 void br_mdb_notify(struct net_device *dev, struct net_bridge_mdb_entry *mp,
943 struct net_bridge_port_group *pg, int type);
944 void br_rtr_notify(struct net_device *dev, struct net_bridge_mcast_port *pmctx,
946 void br_multicast_del_pg(struct net_bridge_mdb_entry *mp,
947 struct net_bridge_port_group *pg,
948 struct net_bridge_port_group __rcu **pp);
949 void br_multicast_count(struct net_bridge *br,
950 const struct net_bridge_port *p,
951 const struct sk_buff *skb, u8 type, u8 dir);
952 int br_multicast_init_stats(struct net_bridge *br);
953 void br_multicast_uninit_stats(struct net_bridge *br);
954 void br_multicast_get_stats(const struct net_bridge *br,
955 const struct net_bridge_port *p,
956 struct br_mcast_stats *dest);
957 void br_mdb_init(void);
958 void br_mdb_uninit(void);
959 void br_multicast_host_join(const struct net_bridge_mcast *brmctx,
960 struct net_bridge_mdb_entry *mp, bool notify);
961 void br_multicast_host_leave(struct net_bridge_mdb_entry *mp, bool notify);
962 void br_multicast_star_g_handle_mode(struct net_bridge_port_group *pg,
964 void br_multicast_sg_add_exclude_ports(struct net_bridge_mdb_entry *star_mp,
965 struct net_bridge_port_group *sg);
966 struct net_bridge_group_src *
967 br_multicast_find_group_src(struct net_bridge_port_group *pg, struct br_ip *ip);
968 void br_multicast_del_group_src(struct net_bridge_group_src *src,
970 void br_multicast_ctx_init(struct net_bridge *br,
971 struct net_bridge_vlan *vlan,
972 struct net_bridge_mcast *brmctx);
973 void br_multicast_ctx_deinit(struct net_bridge_mcast *brmctx);
974 void br_multicast_port_ctx_init(struct net_bridge_port *port,
975 struct net_bridge_vlan *vlan,
976 struct net_bridge_mcast_port *pmctx);
977 void br_multicast_port_ctx_deinit(struct net_bridge_mcast_port *pmctx);
978 void br_multicast_toggle_one_vlan(struct net_bridge_vlan *vlan, bool on);
979 int br_multicast_toggle_vlan_snooping(struct net_bridge *br, bool on,
980 struct netlink_ext_ack *extack);
981 bool br_multicast_toggle_global_vlan(struct net_bridge_vlan *vlan, bool on);
983 int br_rports_fill_info(struct sk_buff *skb,
984 const struct net_bridge_mcast *brmctx);
985 int br_multicast_dump_querier_state(struct sk_buff *skb,
986 const struct net_bridge_mcast *brmctx,
988 size_t br_multicast_querier_state_size(void);
989 size_t br_rports_size(const struct net_bridge_mcast *brmctx);
990 void br_multicast_set_query_intvl(struct net_bridge_mcast *brmctx,
992 void br_multicast_set_startup_query_intvl(struct net_bridge_mcast *brmctx,
995 static inline bool br_group_is_l2(const struct br_ip *group)
997 return group->proto == 0;
1000 #define mlock_dereference(X, br) \
1001 rcu_dereference_protected(X, lockdep_is_held(&br->multicast_lock))
1003 static inline struct hlist_node *
1004 br_multicast_get_first_rport_node(struct net_bridge_mcast *brmctx,
1005 struct sk_buff *skb)
1007 #if IS_ENABLED(CONFIG_IPV6)
1008 if (skb->protocol == htons(ETH_P_IPV6))
1009 return rcu_dereference(hlist_first_rcu(&brmctx->ip6_mc_router_list));
1011 return rcu_dereference(hlist_first_rcu(&brmctx->ip4_mc_router_list));
1014 static inline struct net_bridge_port *
1015 br_multicast_rport_from_node_skb(struct hlist_node *rp, struct sk_buff *skb)
1017 struct net_bridge_mcast_port *mctx;
1019 #if IS_ENABLED(CONFIG_IPV6)
1020 if (skb->protocol == htons(ETH_P_IPV6))
1021 mctx = hlist_entry_safe(rp, struct net_bridge_mcast_port,
1025 mctx = hlist_entry_safe(rp, struct net_bridge_mcast_port,
1034 static inline bool br_ip4_multicast_is_router(struct net_bridge_mcast *brmctx)
1036 return timer_pending(&brmctx->ip4_mc_router_timer);
1039 static inline bool br_ip6_multicast_is_router(struct net_bridge_mcast *brmctx)
1041 #if IS_ENABLED(CONFIG_IPV6)
1042 return timer_pending(&brmctx->ip6_mc_router_timer);
1049 br_multicast_is_router(struct net_bridge_mcast *brmctx, struct sk_buff *skb)
1051 switch (brmctx->multicast_router) {
1052 case MDB_RTR_TYPE_PERM:
1054 case MDB_RTR_TYPE_TEMP_QUERY:
1056 if (skb->protocol == htons(ETH_P_IP))
1057 return br_ip4_multicast_is_router(brmctx);
1058 else if (skb->protocol == htons(ETH_P_IPV6))
1059 return br_ip6_multicast_is_router(brmctx);
1061 return br_ip4_multicast_is_router(brmctx) ||
1062 br_ip6_multicast_is_router(brmctx);
1071 __br_multicast_querier_exists(struct net_bridge_mcast *brmctx,
1072 struct bridge_mcast_other_query *querier,
1075 bool own_querier_enabled;
1077 if (brmctx->multicast_querier) {
1078 if (is_ipv6 && !br_opt_get(brmctx->br, BROPT_HAS_IPV6_ADDR))
1079 own_querier_enabled = false;
1081 own_querier_enabled = true;
1083 own_querier_enabled = false;
1086 return time_is_before_jiffies(querier->delay_time) &&
1087 (own_querier_enabled || timer_pending(&querier->timer));
1090 static inline bool br_multicast_querier_exists(struct net_bridge_mcast *brmctx,
1092 const struct net_bridge_mdb_entry *mdb)
1094 switch (eth->h_proto) {
1095 case (htons(ETH_P_IP)):
1096 return __br_multicast_querier_exists(brmctx,
1097 &brmctx->ip4_other_query, false);
1098 #if IS_ENABLED(CONFIG_IPV6)
1099 case (htons(ETH_P_IPV6)):
1100 return __br_multicast_querier_exists(brmctx,
1101 &brmctx->ip6_other_query, true);
1104 return !!mdb && br_group_is_l2(&mdb->addr);
1108 static inline bool br_multicast_is_star_g(const struct br_ip *ip)
1110 switch (ip->proto) {
1111 case htons(ETH_P_IP):
1112 return ipv4_is_zeronet(ip->src.ip4);
1113 #if IS_ENABLED(CONFIG_IPV6)
1114 case htons(ETH_P_IPV6):
1115 return ipv6_addr_any(&ip->src.ip6);
1123 br_multicast_should_handle_mode(const struct net_bridge_mcast *brmctx,
1127 case htons(ETH_P_IP):
1128 return !!(brmctx->multicast_igmp_version == 3);
1129 #if IS_ENABLED(CONFIG_IPV6)
1130 case htons(ETH_P_IPV6):
1131 return !!(brmctx->multicast_mld_version == 2);
1138 static inline int br_multicast_igmp_type(const struct sk_buff *skb)
1140 return BR_INPUT_SKB_CB(skb)->igmp;
1143 static inline unsigned long br_multicast_lmqt(const struct net_bridge_mcast *brmctx)
1145 return brmctx->multicast_last_member_interval *
1146 brmctx->multicast_last_member_count;
1149 static inline unsigned long br_multicast_gmi(const struct net_bridge_mcast *brmctx)
1151 return brmctx->multicast_membership_interval;
1155 br_multicast_ctx_is_vlan(const struct net_bridge_mcast *brmctx)
1157 return !!brmctx->vlan;
1161 br_multicast_port_ctx_is_vlan(const struct net_bridge_mcast_port *pmctx)
1163 return !!pmctx->vlan;
1166 static inline struct net_bridge_mcast *
1167 br_multicast_port_ctx_get_global(const struct net_bridge_mcast_port *pmctx)
1169 if (!br_multicast_port_ctx_is_vlan(pmctx))
1170 return &pmctx->port->br->multicast_ctx;
1172 return &pmctx->vlan->brvlan->br_mcast_ctx;
1176 br_multicast_ctx_vlan_global_disabled(const struct net_bridge_mcast *brmctx)
1178 return br_multicast_ctx_is_vlan(brmctx) &&
1179 (!br_opt_get(brmctx->br, BROPT_MCAST_VLAN_SNOOPING_ENABLED) ||
1180 !(brmctx->vlan->priv_flags & BR_VLFLAG_GLOBAL_MCAST_ENABLED));
1184 br_multicast_ctx_vlan_disabled(const struct net_bridge_mcast *brmctx)
1186 return br_multicast_ctx_is_vlan(brmctx) &&
1187 !(brmctx->vlan->priv_flags & BR_VLFLAG_MCAST_ENABLED);
1191 br_multicast_port_ctx_vlan_disabled(const struct net_bridge_mcast_port *pmctx)
1193 return br_multicast_port_ctx_is_vlan(pmctx) &&
1194 !(pmctx->vlan->priv_flags & BR_VLFLAG_MCAST_ENABLED);
1198 br_multicast_port_ctx_state_disabled(const struct net_bridge_mcast_port *pmctx)
1200 return pmctx->port->state == BR_STATE_DISABLED ||
1201 (br_multicast_port_ctx_is_vlan(pmctx) &&
1202 (br_multicast_port_ctx_vlan_disabled(pmctx) ||
1203 pmctx->vlan->state == BR_STATE_DISABLED));
1207 br_multicast_port_ctx_state_stopped(const struct net_bridge_mcast_port *pmctx)
1209 return br_multicast_port_ctx_state_disabled(pmctx) ||
1210 pmctx->port->state == BR_STATE_BLOCKING ||
1211 (br_multicast_port_ctx_is_vlan(pmctx) &&
1212 pmctx->vlan->state == BR_STATE_BLOCKING);
1216 br_rports_have_mc_router(const struct net_bridge_mcast *brmctx)
1218 #if IS_ENABLED(CONFIG_IPV6)
1219 return !hlist_empty(&brmctx->ip4_mc_router_list) ||
1220 !hlist_empty(&brmctx->ip6_mc_router_list);
1222 return !hlist_empty(&brmctx->ip4_mc_router_list);
1227 br_multicast_ctx_options_equal(const struct net_bridge_mcast *brmctx1,
1228 const struct net_bridge_mcast *brmctx2)
1230 return brmctx1->multicast_igmp_version ==
1231 brmctx2->multicast_igmp_version &&
1232 brmctx1->multicast_last_member_count ==
1233 brmctx2->multicast_last_member_count &&
1234 brmctx1->multicast_startup_query_count ==
1235 brmctx2->multicast_startup_query_count &&
1236 brmctx1->multicast_last_member_interval ==
1237 brmctx2->multicast_last_member_interval &&
1238 brmctx1->multicast_membership_interval ==
1239 brmctx2->multicast_membership_interval &&
1240 brmctx1->multicast_querier_interval ==
1241 brmctx2->multicast_querier_interval &&
1242 brmctx1->multicast_query_interval ==
1243 brmctx2->multicast_query_interval &&
1244 brmctx1->multicast_query_response_interval ==
1245 brmctx2->multicast_query_response_interval &&
1246 brmctx1->multicast_startup_query_interval ==
1247 brmctx2->multicast_startup_query_interval &&
1248 brmctx1->multicast_querier == brmctx2->multicast_querier &&
1249 brmctx1->multicast_router == brmctx2->multicast_router &&
1250 !br_rports_have_mc_router(brmctx1) &&
1251 !br_rports_have_mc_router(brmctx2) &&
1252 #if IS_ENABLED(CONFIG_IPV6)
1253 brmctx1->multicast_mld_version ==
1254 brmctx2->multicast_mld_version &&
1260 br_multicast_ctx_matches_vlan_snooping(const struct net_bridge_mcast *brmctx)
1262 bool vlan_snooping_enabled;
1264 vlan_snooping_enabled = !!br_opt_get(brmctx->br,
1265 BROPT_MCAST_VLAN_SNOOPING_ENABLED);
1267 return !!(vlan_snooping_enabled == br_multicast_ctx_is_vlan(brmctx));
1270 static inline int br_multicast_rcv(struct net_bridge_mcast **brmctx,
1271 struct net_bridge_mcast_port **pmctx,
1272 struct net_bridge_vlan *vlan,
1273 struct sk_buff *skb,
1279 static inline struct net_bridge_mdb_entry *br_mdb_get(struct net_bridge_mcast *brmctx,
1280 struct sk_buff *skb, u16 vid)
1285 static inline int br_multicast_add_port(struct net_bridge_port *port)
1290 static inline void br_multicast_del_port(struct net_bridge_port *port)
1294 static inline void br_multicast_enable_port(struct net_bridge_port *port)
1298 static inline void br_multicast_disable_port(struct net_bridge_port *port)
1302 static inline void br_multicast_init(struct net_bridge *br)
1306 static inline void br_multicast_join_snoopers(struct net_bridge *br)
1310 static inline void br_multicast_leave_snoopers(struct net_bridge *br)
1314 static inline void br_multicast_open(struct net_bridge *br)
1318 static inline void br_multicast_stop(struct net_bridge *br)
1322 static inline void br_multicast_dev_del(struct net_bridge *br)
1326 static inline void br_multicast_flood(struct net_bridge_mdb_entry *mdst,
1327 struct sk_buff *skb,
1328 struct net_bridge_mcast *brmctx,
1329 bool local_rcv, bool local_orig)
1333 static inline bool br_multicast_is_router(struct net_bridge_mcast *brmctx,
1334 struct sk_buff *skb)
1339 static inline bool br_multicast_querier_exists(struct net_bridge_mcast *brmctx,
1341 const struct net_bridge_mdb_entry *mdb)
1346 static inline void br_mdb_init(void)
1350 static inline void br_mdb_uninit(void)
1354 static inline int br_mdb_hash_init(struct net_bridge *br)
1359 static inline void br_mdb_hash_fini(struct net_bridge *br)
1363 static inline void br_multicast_count(struct net_bridge *br,
1364 const struct net_bridge_port *p,
1365 const struct sk_buff *skb,
1370 static inline int br_multicast_init_stats(struct net_bridge *br)
1375 static inline void br_multicast_uninit_stats(struct net_bridge *br)
1379 static inline int br_multicast_igmp_type(const struct sk_buff *skb)
1384 static inline void br_multicast_ctx_init(struct net_bridge *br,
1385 struct net_bridge_vlan *vlan,
1386 struct net_bridge_mcast *brmctx)
1390 static inline void br_multicast_ctx_deinit(struct net_bridge_mcast *brmctx)
1394 static inline void br_multicast_port_ctx_init(struct net_bridge_port *port,
1395 struct net_bridge_vlan *vlan,
1396 struct net_bridge_mcast_port *pmctx)
1400 static inline void br_multicast_port_ctx_deinit(struct net_bridge_mcast_port *pmctx)
1404 static inline void br_multicast_toggle_one_vlan(struct net_bridge_vlan *vlan,
1409 static inline int br_multicast_toggle_vlan_snooping(struct net_bridge *br,
1411 struct netlink_ext_ack *extack)
1416 static inline bool br_multicast_toggle_global_vlan(struct net_bridge_vlan *vlan,
1423 br_multicast_ctx_options_equal(const struct net_bridge_mcast *brmctx1,
1424 const struct net_bridge_mcast *brmctx2)
1431 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1432 bool br_allowed_ingress(const struct net_bridge *br,
1433 struct net_bridge_vlan_group *vg, struct sk_buff *skb,
1434 u16 *vid, u8 *state,
1435 struct net_bridge_vlan **vlan);
1436 bool br_allowed_egress(struct net_bridge_vlan_group *vg,
1437 const struct sk_buff *skb);
1438 bool br_should_learn(struct net_bridge_port *p, struct sk_buff *skb, u16 *vid);
1439 struct sk_buff *br_handle_vlan(struct net_bridge *br,
1440 const struct net_bridge_port *port,
1441 struct net_bridge_vlan_group *vg,
1442 struct sk_buff *skb);
1443 int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags,
1444 bool *changed, struct netlink_ext_ack *extack);
1445 int br_vlan_delete(struct net_bridge *br, u16 vid);
1446 void br_vlan_flush(struct net_bridge *br);
1447 struct net_bridge_vlan *br_vlan_find(struct net_bridge_vlan_group *vg, u16 vid);
1448 void br_recalculate_fwd_mask(struct net_bridge *br);
1449 int br_vlan_filter_toggle(struct net_bridge *br, unsigned long val,
1450 struct netlink_ext_ack *extack);
1451 int __br_vlan_set_proto(struct net_bridge *br, __be16 proto,
1452 struct netlink_ext_ack *extack);
1453 int br_vlan_set_proto(struct net_bridge *br, unsigned long val,
1454 struct netlink_ext_ack *extack);
1455 int br_vlan_set_stats(struct net_bridge *br, unsigned long val);
1456 int br_vlan_set_stats_per_port(struct net_bridge *br, unsigned long val);
1457 int br_vlan_init(struct net_bridge *br);
1458 int br_vlan_set_default_pvid(struct net_bridge *br, unsigned long val,
1459 struct netlink_ext_ack *extack);
1460 int __br_vlan_set_default_pvid(struct net_bridge *br, u16 pvid,
1461 struct netlink_ext_ack *extack);
1462 int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags,
1463 bool *changed, struct netlink_ext_ack *extack);
1464 int nbp_vlan_delete(struct net_bridge_port *port, u16 vid);
1465 void nbp_vlan_flush(struct net_bridge_port *port);
1466 int nbp_vlan_init(struct net_bridge_port *port, struct netlink_ext_ack *extack);
1467 int nbp_get_num_vlan_infos(struct net_bridge_port *p, u32 filter_mask);
1468 void br_vlan_get_stats(const struct net_bridge_vlan *v,
1469 struct pcpu_sw_netstats *stats);
1470 void br_vlan_port_event(struct net_bridge_port *p, unsigned long event);
1471 int br_vlan_bridge_event(struct net_device *dev, unsigned long event,
1473 void br_vlan_rtnl_init(void);
1474 void br_vlan_rtnl_uninit(void);
1475 void br_vlan_notify(const struct net_bridge *br,
1476 const struct net_bridge_port *p,
1477 u16 vid, u16 vid_range,
1479 bool br_vlan_can_enter_range(const struct net_bridge_vlan *v_curr,
1480 const struct net_bridge_vlan *range_end);
1482 void br_vlan_fill_forward_path_pvid(struct net_bridge *br,
1483 struct net_device_path_ctx *ctx,
1484 struct net_device_path *path);
1485 int br_vlan_fill_forward_path_mode(struct net_bridge *br,
1486 struct net_bridge_port *dst,
1487 struct net_device_path *path);
1489 static inline struct net_bridge_vlan_group *br_vlan_group(
1490 const struct net_bridge *br)
1492 return rtnl_dereference(br->vlgrp);
1495 static inline struct net_bridge_vlan_group *nbp_vlan_group(
1496 const struct net_bridge_port *p)
1498 return rtnl_dereference(p->vlgrp);
1501 static inline struct net_bridge_vlan_group *br_vlan_group_rcu(
1502 const struct net_bridge *br)
1504 return rcu_dereference(br->vlgrp);
1507 static inline struct net_bridge_vlan_group *nbp_vlan_group_rcu(
1508 const struct net_bridge_port *p)
1510 return rcu_dereference(p->vlgrp);
1513 /* Since bridge now depends on 8021Q module, but the time bridge sees the
1514 * skb, the vlan tag will always be present if the frame was tagged.
1516 static inline int br_vlan_get_tag(const struct sk_buff *skb, u16 *vid)
1520 if (skb_vlan_tag_present(skb)) {
1521 *vid = skb_vlan_tag_get_id(skb);
1530 static inline u16 br_get_pvid(const struct net_bridge_vlan_group *vg)
1539 static inline u16 br_vlan_flags(const struct net_bridge_vlan *v, u16 pvid)
1541 return v->vid == pvid ? v->flags | BRIDGE_VLAN_INFO_PVID : v->flags;
1544 static inline bool br_allowed_ingress(const struct net_bridge *br,
1545 struct net_bridge_vlan_group *vg,
1546 struct sk_buff *skb,
1547 u16 *vid, u8 *state,
1548 struct net_bridge_vlan **vlan)
1555 static inline bool br_allowed_egress(struct net_bridge_vlan_group *vg,
1556 const struct sk_buff *skb)
1561 static inline bool br_should_learn(struct net_bridge_port *p,
1562 struct sk_buff *skb, u16 *vid)
1567 static inline struct sk_buff *br_handle_vlan(struct net_bridge *br,
1568 const struct net_bridge_port *port,
1569 struct net_bridge_vlan_group *vg,
1570 struct sk_buff *skb)
1575 static inline int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags,
1576 bool *changed, struct netlink_ext_ack *extack)
1582 static inline int br_vlan_delete(struct net_bridge *br, u16 vid)
1587 static inline void br_vlan_flush(struct net_bridge *br)
1591 static inline void br_recalculate_fwd_mask(struct net_bridge *br)
1595 static inline int br_vlan_init(struct net_bridge *br)
1600 static inline int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags,
1601 bool *changed, struct netlink_ext_ack *extack)
1607 static inline int nbp_vlan_delete(struct net_bridge_port *port, u16 vid)
1612 static inline void nbp_vlan_flush(struct net_bridge_port *port)
1616 static inline struct net_bridge_vlan *br_vlan_find(struct net_bridge_vlan_group *vg,
1622 static inline int nbp_vlan_init(struct net_bridge_port *port,
1623 struct netlink_ext_ack *extack)
1628 static inline u16 br_vlan_get_tag(const struct sk_buff *skb, u16 *tag)
1633 static inline u16 br_get_pvid(const struct net_bridge_vlan_group *vg)
1638 static inline int br_vlan_filter_toggle(struct net_bridge *br,
1640 struct netlink_ext_ack *extack)
1645 static inline int nbp_get_num_vlan_infos(struct net_bridge_port *p,
1651 static inline void br_vlan_fill_forward_path_pvid(struct net_bridge *br,
1652 struct net_device_path_ctx *ctx,
1653 struct net_device_path *path)
1657 static inline int br_vlan_fill_forward_path_mode(struct net_bridge *br,
1658 struct net_bridge_port *dst,
1659 struct net_device_path *path)
1664 static inline struct net_bridge_vlan_group *br_vlan_group(
1665 const struct net_bridge *br)
1670 static inline struct net_bridge_vlan_group *nbp_vlan_group(
1671 const struct net_bridge_port *p)
1676 static inline struct net_bridge_vlan_group *br_vlan_group_rcu(
1677 const struct net_bridge *br)
1682 static inline struct net_bridge_vlan_group *nbp_vlan_group_rcu(
1683 const struct net_bridge_port *p)
1688 static inline void br_vlan_get_stats(const struct net_bridge_vlan *v,
1689 struct pcpu_sw_netstats *stats)
1693 static inline void br_vlan_port_event(struct net_bridge_port *p,
1694 unsigned long event)
1698 static inline int br_vlan_bridge_event(struct net_device *dev,
1699 unsigned long event, void *ptr)
1704 static inline void br_vlan_rtnl_init(void)
1708 static inline void br_vlan_rtnl_uninit(void)
1712 static inline void br_vlan_notify(const struct net_bridge *br,
1713 const struct net_bridge_port *p,
1714 u16 vid, u16 vid_range,
1719 static inline bool br_vlan_can_enter_range(const struct net_bridge_vlan *v_curr,
1720 const struct net_bridge_vlan *range_end)
1725 static inline u16 br_vlan_flags(const struct net_bridge_vlan *v, u16 pvid)
1732 /* br_vlan_options.c */
1733 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1734 bool br_vlan_opts_eq_range(const struct net_bridge_vlan *v_curr,
1735 const struct net_bridge_vlan *range_end);
1736 bool br_vlan_opts_fill(struct sk_buff *skb, const struct net_bridge_vlan *v);
1737 size_t br_vlan_opts_nl_size(void);
1738 int br_vlan_process_options(const struct net_bridge *br,
1739 const struct net_bridge_port *p,
1740 struct net_bridge_vlan *range_start,
1741 struct net_bridge_vlan *range_end,
1743 struct netlink_ext_ack *extack);
1744 int br_vlan_rtm_process_global_options(struct net_device *dev,
1745 const struct nlattr *attr,
1747 struct netlink_ext_ack *extack);
1748 bool br_vlan_global_opts_can_enter_range(const struct net_bridge_vlan *v_curr,
1749 const struct net_bridge_vlan *r_end);
1750 bool br_vlan_global_opts_fill(struct sk_buff *skb, u16 vid, u16 vid_range,
1751 const struct net_bridge_vlan *v_opts);
1753 /* vlan state manipulation helpers using *_ONCE to annotate lock-free access */
1754 static inline u8 br_vlan_get_state(const struct net_bridge_vlan *v)
1756 return READ_ONCE(v->state);
1759 static inline void br_vlan_set_state(struct net_bridge_vlan *v, u8 state)
1761 WRITE_ONCE(v->state, state);
1764 static inline u8 br_vlan_get_pvid_state(const struct net_bridge_vlan_group *vg)
1766 return READ_ONCE(vg->pvid_state);
1769 static inline void br_vlan_set_pvid_state(struct net_bridge_vlan_group *vg,
1772 WRITE_ONCE(vg->pvid_state, state);
1775 /* learn_allow is true at ingress and false at egress */
1776 static inline bool br_vlan_state_allowed(u8 state, bool learn_allow)
1779 case BR_STATE_LEARNING:
1781 case BR_STATE_FORWARDING:
1790 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1791 DECLARE_STATIC_KEY_FALSE(br_mst_used);
1792 static inline bool br_mst_is_enabled(struct net_bridge *br)
1794 return static_branch_unlikely(&br_mst_used) &&
1795 br_opt_get(br, BROPT_MST_ENABLED);
1798 int br_mst_set_state(struct net_bridge_port *p, u16 msti, u8 state,
1799 struct netlink_ext_ack *extack);
1800 int br_mst_vlan_set_msti(struct net_bridge_vlan *v, u16 msti);
1801 void br_mst_vlan_init_state(struct net_bridge_vlan *v);
1802 int br_mst_set_enabled(struct net_bridge *br, bool on,
1803 struct netlink_ext_ack *extack);
1804 size_t br_mst_info_size(const struct net_bridge_vlan_group *vg);
1805 int br_mst_fill_info(struct sk_buff *skb,
1806 const struct net_bridge_vlan_group *vg);
1807 int br_mst_process(struct net_bridge_port *p, const struct nlattr *mst_attr,
1808 struct netlink_ext_ack *extack);
1810 static inline bool br_mst_is_enabled(struct net_bridge *br)
1815 static inline int br_mst_set_state(struct net_bridge_port *p, u16 msti,
1816 u8 state, struct netlink_ext_ack *extack)
1821 static inline int br_mst_set_enabled(struct net_bridge *br, bool on,
1822 struct netlink_ext_ack *extack)
1827 static inline size_t br_mst_info_size(const struct net_bridge_vlan_group *vg)
1832 static inline int br_mst_fill_info(struct sk_buff *skb,
1833 const struct net_bridge_vlan_group *vg)
1838 static inline int br_mst_process(struct net_bridge_port *p,
1839 const struct nlattr *mst_attr,
1840 struct netlink_ext_ack *extack)
1847 int (*br_dev_xmit_hook)(struct sk_buff *skb);
1849 extern const struct nf_br_ops __rcu *nf_br_ops;
1851 /* br_netfilter.c */
1852 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1853 int br_nf_core_init(void);
1854 void br_nf_core_fini(void);
1855 void br_netfilter_rtable_init(struct net_bridge *);
1857 static inline int br_nf_core_init(void) { return 0; }
1858 static inline void br_nf_core_fini(void) {}
1859 #define br_netfilter_rtable_init(x)
1863 void br_set_state(struct net_bridge_port *p, unsigned int state);
1864 struct net_bridge_port *br_get_port(struct net_bridge *br, u16 port_no);
1865 void br_init_port(struct net_bridge_port *p);
1866 void br_become_designated_port(struct net_bridge_port *p);
1868 void __br_set_forward_delay(struct net_bridge *br, unsigned long t);
1869 int br_set_forward_delay(struct net_bridge *br, unsigned long x);
1870 int br_set_hello_time(struct net_bridge *br, unsigned long x);
1871 int br_set_max_age(struct net_bridge *br, unsigned long x);
1872 int __set_ageing_time(struct net_device *dev, unsigned long t);
1873 int br_set_ageing_time(struct net_bridge *br, clock_t ageing_time);
1877 void br_stp_enable_bridge(struct net_bridge *br);
1878 void br_stp_disable_bridge(struct net_bridge *br);
1879 int br_stp_set_enabled(struct net_bridge *br, unsigned long val,
1880 struct netlink_ext_ack *extack);
1881 void br_stp_enable_port(struct net_bridge_port *p);
1882 void br_stp_disable_port(struct net_bridge_port *p);
1883 bool br_stp_recalculate_bridge_id(struct net_bridge *br);
1884 void br_stp_change_bridge_id(struct net_bridge *br, const unsigned char *a);
1885 void br_stp_set_bridge_priority(struct net_bridge *br, u16 newprio);
1886 int br_stp_set_port_priority(struct net_bridge_port *p, unsigned long newprio);
1887 int br_stp_set_path_cost(struct net_bridge_port *p, unsigned long path_cost);
1888 ssize_t br_show_bridge_id(char *buf, const struct bridge_id *id);
1892 void br_stp_rcv(const struct stp_proto *proto, struct sk_buff *skb,
1893 struct net_device *dev);
1895 /* br_stp_timer.c */
1896 void br_stp_timer_init(struct net_bridge *br);
1897 void br_stp_port_timer_init(struct net_bridge_port *p);
1898 unsigned long br_timer_value(const struct timer_list *timer);
1901 #if IS_ENABLED(CONFIG_ATM_LANE)
1902 extern int (*br_fdb_test_addr_hook)(struct net_device *dev, unsigned char *addr);
1906 #if IS_ENABLED(CONFIG_BRIDGE_MRP)
1907 int br_mrp_parse(struct net_bridge *br, struct net_bridge_port *p,
1908 struct nlattr *attr, int cmd, struct netlink_ext_ack *extack);
1909 bool br_mrp_enabled(struct net_bridge *br);
1910 void br_mrp_port_del(struct net_bridge *br, struct net_bridge_port *p);
1911 int br_mrp_fill_info(struct sk_buff *skb, struct net_bridge *br);
1913 static inline int br_mrp_parse(struct net_bridge *br, struct net_bridge_port *p,
1914 struct nlattr *attr, int cmd,
1915 struct netlink_ext_ack *extack)
1920 static inline bool br_mrp_enabled(struct net_bridge *br)
1925 static inline void br_mrp_port_del(struct net_bridge *br,
1926 struct net_bridge_port *p)
1930 static inline int br_mrp_fill_info(struct sk_buff *skb, struct net_bridge *br)
1938 #if IS_ENABLED(CONFIG_BRIDGE_CFM)
1939 int br_cfm_parse(struct net_bridge *br, struct net_bridge_port *p,
1940 struct nlattr *attr, int cmd, struct netlink_ext_ack *extack);
1941 bool br_cfm_created(struct net_bridge *br);
1942 void br_cfm_port_del(struct net_bridge *br, struct net_bridge_port *p);
1943 int br_cfm_config_fill_info(struct sk_buff *skb, struct net_bridge *br);
1944 int br_cfm_status_fill_info(struct sk_buff *skb,
1945 struct net_bridge *br,
1947 int br_cfm_mep_count(struct net_bridge *br, u32 *count);
1948 int br_cfm_peer_mep_count(struct net_bridge *br, u32 *count);
1950 static inline int br_cfm_parse(struct net_bridge *br, struct net_bridge_port *p,
1951 struct nlattr *attr, int cmd,
1952 struct netlink_ext_ack *extack)
1957 static inline bool br_cfm_created(struct net_bridge *br)
1962 static inline void br_cfm_port_del(struct net_bridge *br,
1963 struct net_bridge_port *p)
1967 static inline int br_cfm_config_fill_info(struct sk_buff *skb, struct net_bridge *br)
1972 static inline int br_cfm_status_fill_info(struct sk_buff *skb,
1973 struct net_bridge *br,
1979 static inline int br_cfm_mep_count(struct net_bridge *br, u32 *count)
1985 static inline int br_cfm_peer_mep_count(struct net_bridge *br, u32 *count)
1993 extern struct rtnl_link_ops br_link_ops;
1994 int br_netlink_init(void);
1995 void br_netlink_fini(void);
1996 void br_ifinfo_notify(int event, const struct net_bridge *br,
1997 const struct net_bridge_port *port);
1998 void br_info_notify(int event, const struct net_bridge *br,
1999 const struct net_bridge_port *port, u32 filter);
2000 int br_setlink(struct net_device *dev, struct nlmsghdr *nlmsg, u16 flags,
2001 struct netlink_ext_ack *extack);
2002 int br_dellink(struct net_device *dev, struct nlmsghdr *nlmsg, u16 flags);
2003 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq, struct net_device *dev,
2004 u32 filter_mask, int nlflags);
2005 int br_process_vlan_info(struct net_bridge *br,
2006 struct net_bridge_port *p, int cmd,
2007 struct bridge_vlan_info *vinfo_curr,
2008 struct bridge_vlan_info **vinfo_last,
2010 struct netlink_ext_ack *extack);
2014 extern const struct sysfs_ops brport_sysfs_ops;
2015 int br_sysfs_addif(struct net_bridge_port *p);
2016 int br_sysfs_renameif(struct net_bridge_port *p);
2019 int br_sysfs_addbr(struct net_device *dev);
2020 void br_sysfs_delbr(struct net_device *dev);
2024 static inline int br_sysfs_addif(struct net_bridge_port *p) { return 0; }
2025 static inline int br_sysfs_renameif(struct net_bridge_port *p) { return 0; }
2026 static inline int br_sysfs_addbr(struct net_device *dev) { return 0; }
2027 static inline void br_sysfs_delbr(struct net_device *dev) { return; }
2028 #endif /* CONFIG_SYSFS */
2030 /* br_switchdev.c */
2031 #ifdef CONFIG_NET_SWITCHDEV
2032 int br_switchdev_port_offload(struct net_bridge_port *p,
2033 struct net_device *dev, const void *ctx,
2034 struct notifier_block *atomic_nb,
2035 struct notifier_block *blocking_nb,
2036 bool tx_fwd_offload,
2037 struct netlink_ext_ack *extack);
2039 void br_switchdev_port_unoffload(struct net_bridge_port *p, const void *ctx,
2040 struct notifier_block *atomic_nb,
2041 struct notifier_block *blocking_nb);
2043 bool br_switchdev_frame_uses_tx_fwd_offload(struct sk_buff *skb);
2045 void br_switchdev_frame_set_offload_fwd_mark(struct sk_buff *skb);
2047 void nbp_switchdev_frame_mark_tx_fwd_offload(const struct net_bridge_port *p,
2048 struct sk_buff *skb);
2049 void nbp_switchdev_frame_mark_tx_fwd_to_hwdom(const struct net_bridge_port *p,
2050 struct sk_buff *skb);
2051 void nbp_switchdev_frame_mark(const struct net_bridge_port *p,
2052 struct sk_buff *skb);
2053 bool nbp_switchdev_allowed_egress(const struct net_bridge_port *p,
2054 const struct sk_buff *skb);
2055 int br_switchdev_set_port_flag(struct net_bridge_port *p,
2056 unsigned long flags,
2058 struct netlink_ext_ack *extack);
2059 void br_switchdev_fdb_notify(struct net_bridge *br,
2060 const struct net_bridge_fdb_entry *fdb, int type);
2061 void br_switchdev_mdb_notify(struct net_device *dev,
2062 struct net_bridge_mdb_entry *mp,
2063 struct net_bridge_port_group *pg,
2065 int br_switchdev_port_vlan_add(struct net_device *dev, u16 vid, u16 flags,
2066 bool changed, struct netlink_ext_ack *extack);
2067 int br_switchdev_port_vlan_del(struct net_device *dev, u16 vid);
2068 void br_switchdev_init(struct net_bridge *br);
2070 static inline void br_switchdev_frame_unmark(struct sk_buff *skb)
2072 skb->offload_fwd_mark = 0;
2076 br_switchdev_port_offload(struct net_bridge_port *p,
2077 struct net_device *dev, const void *ctx,
2078 struct notifier_block *atomic_nb,
2079 struct notifier_block *blocking_nb,
2080 bool tx_fwd_offload,
2081 struct netlink_ext_ack *extack)
2087 br_switchdev_port_unoffload(struct net_bridge_port *p, const void *ctx,
2088 struct notifier_block *atomic_nb,
2089 struct notifier_block *blocking_nb)
2093 static inline bool br_switchdev_frame_uses_tx_fwd_offload(struct sk_buff *skb)
2098 static inline void br_switchdev_frame_set_offload_fwd_mark(struct sk_buff *skb)
2103 nbp_switchdev_frame_mark_tx_fwd_offload(const struct net_bridge_port *p,
2104 struct sk_buff *skb)
2109 nbp_switchdev_frame_mark_tx_fwd_to_hwdom(const struct net_bridge_port *p,
2110 struct sk_buff *skb)
2114 static inline void nbp_switchdev_frame_mark(const struct net_bridge_port *p,
2115 struct sk_buff *skb)
2119 static inline bool nbp_switchdev_allowed_egress(const struct net_bridge_port *p,
2120 const struct sk_buff *skb)
2125 static inline int br_switchdev_set_port_flag(struct net_bridge_port *p,
2126 unsigned long flags,
2128 struct netlink_ext_ack *extack)
2133 static inline int br_switchdev_port_vlan_add(struct net_device *dev, u16 vid,
2134 u16 flags, bool changed,
2135 struct netlink_ext_ack *extack)
2140 static inline int br_switchdev_port_vlan_del(struct net_device *dev, u16 vid)
2146 br_switchdev_fdb_notify(struct net_bridge *br,
2147 const struct net_bridge_fdb_entry *fdb, int type)
2151 static inline void br_switchdev_mdb_notify(struct net_device *dev,
2152 struct net_bridge_mdb_entry *mp,
2153 struct net_bridge_port_group *pg,
2158 static inline void br_switchdev_frame_unmark(struct sk_buff *skb)
2162 static inline void br_switchdev_init(struct net_bridge *br)
2166 #endif /* CONFIG_NET_SWITCHDEV */
2168 /* br_arp_nd_proxy.c */
2169 void br_recalculate_neigh_suppress_enabled(struct net_bridge *br);
2170 void br_do_proxy_suppress_arp(struct sk_buff *skb, struct net_bridge *br,
2171 u16 vid, struct net_bridge_port *p);
2172 void br_do_suppress_nd(struct sk_buff *skb, struct net_bridge *br,
2173 u16 vid, struct net_bridge_port *p, struct nd_msg *msg);
2174 struct nd_msg *br_is_nd_neigh_msg(struct sk_buff *skb, struct nd_msg *m);