mirror of
https://github.com/vishvananda/netlink
synced 2025-01-22 15:34:32 +00:00
6f0327edfd
Current U32 filter only supports redirect action, but the U32 can support a lot more. Refactor a bit the action generating/parsing logic to be more generic and add BPF action support. When creating a U32 filter, one can supply an array of Actions, which will be executed by the U32 filter in order: * The new MirredAction implements the same functionality as RedirIndex field in the U32 filter, with that static field kept in the struct for backwards compatibility. * A new BpfAction type is added which allows a program with an open bpf file descriptor (implementation is out of scope of this patch) to be added as well. Add a test for the above use case which includes one of each type of action.
54 lines
1.2 KiB
Go
54 lines
1.2 KiB
Go
package netlink
|
|
|
|
/*
|
|
#include <asm/types.h>
|
|
#include <asm/unistd.h>
|
|
#include <stdio.h>
|
|
#include <unistd.h>
|
|
|
|
static int load_simple_bpf(int prog_type) {
|
|
// { return 1; }
|
|
__u64 __attribute__((aligned(8))) insns[] = {
|
|
0x00000001000000b7ull,
|
|
0x0000000000000095ull,
|
|
};
|
|
__u8 __attribute__((aligned(8))) license[] = "ASL2";
|
|
// Copied from a header file since libc is notoriously slow to update.
|
|
// The call will succeed or fail and that will be our indication on
|
|
// whether or not it is supported.
|
|
struct {
|
|
__u32 prog_type;
|
|
__u32 insn_cnt;
|
|
__u64 insns;
|
|
__u64 license;
|
|
__u32 log_level;
|
|
__u32 log_size;
|
|
__u64 log_buf;
|
|
__u32 kern_version;
|
|
} __attribute__((aligned(8))) attr = {
|
|
.prog_type = prog_type,
|
|
.insn_cnt = 2,
|
|
.insns = (__u64)&insns,
|
|
.license = (__u64)&license,
|
|
};
|
|
return syscall(__NR_bpf, 5, &attr, sizeof(attr));
|
|
}
|
|
*/
|
|
import "C"
|
|
|
|
type BpfProgType C.int
|
|
|
|
const (
|
|
BPF_PROG_TYPE_UNSPEC BpfProgType = iota
|
|
BPF_PROG_TYPE_SOCKET_FILTER
|
|
BPF_PROG_TYPE_KPROBE
|
|
BPF_PROG_TYPE_SCHED_CLS
|
|
BPF_PROG_TYPE_SCHED_ACT
|
|
)
|
|
|
|
// loadSimpleBpf loads a trivial bpf program for testing purposes
|
|
func loadSimpleBpf(progType BpfProgType) (int, error) {
|
|
fd, err := C.load_simple_bpf(C.int(progType))
|
|
return int(fd), err
|
|
}
|