6002f266b3
Introduce expectation classes and policies. An expectation class is used to distinguish different types of expectations by the same helper (for example audio/video/t.120). The expectation policy is used to hold the maximum number of expectations and the initial timeout for each class. The individual classes are isolated from each other, which means that for example an audio expectation will only evict other audio expectations. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
98 lines
2.6 KiB
C
98 lines
2.6 KiB
C
/*
|
|
* connection tracking expectations.
|
|
*/
|
|
|
|
#ifndef _NF_CONNTRACK_EXPECT_H
|
|
#define _NF_CONNTRACK_EXPECT_H
|
|
#include <net/netfilter/nf_conntrack.h>
|
|
|
|
extern struct hlist_head *nf_ct_expect_hash;
|
|
extern unsigned int nf_ct_expect_hsize;
|
|
extern unsigned int nf_ct_expect_max;
|
|
|
|
struct nf_conntrack_expect
|
|
{
|
|
/* Conntrack expectation list member */
|
|
struct hlist_node lnode;
|
|
|
|
/* Hash member */
|
|
struct hlist_node hnode;
|
|
|
|
/* We expect this tuple, with the following mask */
|
|
struct nf_conntrack_tuple tuple;
|
|
struct nf_conntrack_tuple_mask mask;
|
|
|
|
/* Function to call after setup and insertion */
|
|
void (*expectfn)(struct nf_conn *new,
|
|
struct nf_conntrack_expect *this);
|
|
|
|
/* Helper to assign to new connection */
|
|
struct nf_conntrack_helper *helper;
|
|
|
|
/* The conntrack of the master connection */
|
|
struct nf_conn *master;
|
|
|
|
/* Timer function; deletes the expectation. */
|
|
struct timer_list timeout;
|
|
|
|
/* Usage count. */
|
|
atomic_t use;
|
|
|
|
/* Flags */
|
|
unsigned int flags;
|
|
|
|
/* Expectation class */
|
|
unsigned int class;
|
|
|
|
#ifdef CONFIG_NF_NAT_NEEDED
|
|
__be32 saved_ip;
|
|
/* This is the original per-proto part, used to map the
|
|
* expected connection the way the recipient expects. */
|
|
union nf_conntrack_man_proto saved_proto;
|
|
/* Direction relative to the master connection. */
|
|
enum ip_conntrack_dir dir;
|
|
#endif
|
|
|
|
struct rcu_head rcu;
|
|
};
|
|
|
|
struct nf_conntrack_expect_policy
|
|
{
|
|
unsigned int max_expected;
|
|
unsigned int timeout;
|
|
};
|
|
|
|
#define NF_CT_EXPECT_CLASS_DEFAULT 0
|
|
|
|
#define NF_CT_EXPECT_PERMANENT 0x1
|
|
#define NF_CT_EXPECT_INACTIVE 0x2
|
|
|
|
int nf_conntrack_expect_init(void);
|
|
void nf_conntrack_expect_fini(void);
|
|
|
|
struct nf_conntrack_expect *
|
|
__nf_ct_expect_find(const struct nf_conntrack_tuple *tuple);
|
|
|
|
struct nf_conntrack_expect *
|
|
nf_ct_expect_find_get(const struct nf_conntrack_tuple *tuple);
|
|
|
|
struct nf_conntrack_expect *
|
|
nf_ct_find_expectation(const struct nf_conntrack_tuple *tuple);
|
|
|
|
void nf_ct_unlink_expect(struct nf_conntrack_expect *exp);
|
|
void nf_ct_remove_expectations(struct nf_conn *ct);
|
|
void nf_ct_unexpect_related(struct nf_conntrack_expect *exp);
|
|
|
|
/* Allocate space for an expectation: this is mandatory before calling
|
|
nf_ct_expect_related. You will have to call put afterwards. */
|
|
struct nf_conntrack_expect *nf_ct_expect_alloc(struct nf_conn *me);
|
|
void nf_ct_expect_init(struct nf_conntrack_expect *, unsigned int, int,
|
|
const union nf_inet_addr *,
|
|
const union nf_inet_addr *,
|
|
u_int8_t, const __be16 *, const __be16 *);
|
|
void nf_ct_expect_put(struct nf_conntrack_expect *exp);
|
|
int nf_ct_expect_related(struct nf_conntrack_expect *expect);
|
|
|
|
#endif /*_NF_CONNTRACK_EXPECT_H*/
|
|
|