blob: 3882db1e263a502faeb40fd4d0c9adf523235d8a [file] [log] [blame]
Eric W. Biederman5f256be2007-09-12 11:50:50 +02001/*
2 * Operations on the network namespace
3 */
4#ifndef __NET_NET_NAMESPACE_H
5#define __NET_NET_NAMESPACE_H
6
7#include <asm/atomic.h>
8#include <linux/workqueue.h>
9#include <linux/list.h>
10
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070011#include <net/netns/core.h>
Pavel Emelyanov852566f52008-07-18 04:01:24 -070012#include <net/netns/mib.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080013#include <net/netns/unix.h>
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080014#include <net/netns/packet.h>
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080015#include <net/netns/ipv4.h>
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080016#include <net/netns/ipv6.h>
Pavel Emelyanov67019cc2008-04-13 22:28:42 -070017#include <net/netns/dccp.h>
Alexey Dobriyan8d870052008-01-31 04:02:13 -080018#include <net/netns/x_tables.h>
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020019#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
20#include <net/netns/conntrack.h>
21#endif
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080022#include <net/netns/xfrm.h>
Denis V. Luneva0a53c82007-12-11 04:19:17 -080023
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020024struct proc_dir_entry;
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070025struct net_device;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080026struct sock;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110027struct ctl_table_header;
Pavel Emelyanovdec827d2008-04-15 00:36:08 -070028struct net_generic;
Johannes Berg134e6372009-07-10 09:51:34 +000029struct sock;
Pavel Emelyanov1597fbc2007-12-01 23:51:01 +110030
Eric W. Biederman5f256be2007-09-12 11:50:50 +020031struct net {
32 atomic_t count; /* To decided when the network
33 * namespace should be freed.
34 */
Denis V. Lunev5d1e4462008-04-16 01:58:04 -070035#ifdef NETNS_REFCNT_DEBUG
Eric W. Biederman5f256be2007-09-12 11:50:50 +020036 atomic_t use_count; /* To track references we
37 * destroy on demand
38 */
Denis V. Lunev5d1e4462008-04-16 01:58:04 -070039#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +020040 struct list_head list; /* list of network namespaces */
41 struct work_struct work; /* work struct for freeing */
Eric W. Biederman457c4cb2007-09-12 12:01:34 +020042
43 struct proc_dir_entry *proc_net;
44 struct proc_dir_entry *proc_net_stat;
Eric W. Biederman881d9662007-09-17 11:56:21 -070045
Al Viro73455092008-07-14 21:22:20 -040046#ifdef CONFIG_SYSCTL
47 struct ctl_table_set sysctls;
48#endif
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +110049
Eric W. Biederman2774c7a2007-09-26 22:10:56 -070050 struct net_device *loopback_dev; /* The loopback */
51
Eric W. Biederman881d9662007-09-17 11:56:21 -070052 struct list_head dev_base_head;
53 struct hlist_head *dev_name_head;
54 struct hlist_head *dev_index_head;
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080055
Denis V. Lunev5fd30ee2008-01-10 03:20:28 -080056 /* core fib_rules */
57 struct list_head rules_ops;
58 spinlock_t rules_mod_lock;
59
Denis V. Lunev97c53ca2007-11-19 22:26:51 -080060 struct sock *rtnl; /* rtnetlink socket */
Johannes Berg134e6372009-07-10 09:51:34 +000061 struct sock *genl_sock;
Denis V. Lunevd12d01d2007-11-19 22:28:35 -080062
Pavel Emelyanov8efa6e92008-03-31 19:41:14 -070063 struct netns_core core;
Pavel Emelyanov852566f52008-07-18 04:01:24 -070064 struct netns_mib mib;
Denis V. Lunev2aaef4e2007-12-11 04:19:54 -080065 struct netns_packet packet;
Denis V. Luneva0a53c82007-12-11 04:19:17 -080066 struct netns_unix unx;
Pavel Emelyanov8afd3512007-12-16 13:29:36 -080067 struct netns_ipv4 ipv4;
Daniel Lezcanob0f159d2008-01-10 02:49:06 -080068#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
69 struct netns_ipv6 ipv6;
70#endif
Pavel Emelyanov67019cc2008-04-13 22:28:42 -070071#if defined(CONFIG_IP_DCCP) || defined(CONFIG_IP_DCCP_MODULE)
72 struct netns_dccp dccp;
73#endif
Alexey Dobriyan8d870052008-01-31 04:02:13 -080074#ifdef CONFIG_NETFILTER
75 struct netns_xt xt;
Alexey Dobriyandfdb8d72008-10-08 11:35:02 +020076#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
77 struct netns_ct ct;
78#endif
Alexey Dobriyan8d870052008-01-31 04:02:13 -080079#endif
Alexey Dobriyand62ddc22008-11-25 17:14:31 -080080#ifdef CONFIG_XFRM
81 struct netns_xfrm xfrm;
82#endif
Pavel Emelyanovdec827d2008-04-15 00:36:08 -070083 struct net_generic *gen;
Eric W. Biederman5f256be2007-09-12 11:50:50 +020084};
85
Denis V. Lunev225c0a02008-04-02 00:09:29 -070086
Denis V. Lunevc0f39322008-04-02 00:10:28 -070087#include <linux/seq_file_net.h>
88
Daniel Lezcano4fabcd72007-09-13 09:16:29 +020089/* Init's network namespace */
Eric W. Biederman5f256be2007-09-12 11:50:50 +020090extern struct net init_net;
Denis V. Luneva4aa8342008-04-03 13:04:33 -070091
92#ifdef CONFIG_NET
Daniel Lezcano4fabcd72007-09-13 09:16:29 +020093#define INIT_NET_NS(net_ns) .net_ns = &init_net,
Daniel Lezcano4fabcd72007-09-13 09:16:29 +020094
Eric W. Biederman9dd776b2007-09-26 22:04:26 -070095extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns);
Denis V. Lunev225c0a02008-04-02 00:09:29 -070096
97#else /* CONFIG_NET */
98
99#define INIT_NET_NS(net_ns)
100
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700101static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns)
102{
103 /* There is nothing to copy so this is a noop */
104 return net_ns;
105}
Denis V. Lunev225c0a02008-04-02 00:09:29 -0700106#endif /* CONFIG_NET */
107
108
109extern struct list_head net_namespace_list;
Eric W. Biederman9dd776b2007-09-26 22:04:26 -0700110
Johannes Berg30ffee82009-07-10 09:51:35 +0000111extern struct net *get_net_ns_by_pid(pid_t pid);
112
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700113#ifdef CONFIG_NET_NS
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200114extern void __put_net(struct net *net);
115
116static inline struct net *get_net(struct net *net)
117{
118 atomic_inc(&net->count);
119 return net;
120}
121
Eric W. Biederman077130c2007-09-13 09:18:57 +0200122static inline struct net *maybe_get_net(struct net *net)
123{
124 /* Used when we know struct net exists but we
125 * aren't guaranteed a previous reference count
126 * exists. If the reference count is zero this
127 * function fails and returns NULL.
128 */
129 if (!atomic_inc_not_zero(&net->count))
130 net = NULL;
131 return net;
132}
133
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200134static inline void put_net(struct net *net)
135{
136 if (atomic_dec_and_test(&net->count))
137 __put_net(net);
138}
139
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900140static inline
141int net_eq(const struct net *net1, const struct net *net2)
142{
143 return net1 == net2;
144}
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700145#else
Eric W. Biedermanb9f75f42008-06-20 22:16:51 -0700146
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700147static inline struct net *get_net(struct net *net)
148{
149 return net;
150}
151
152static inline void put_net(struct net *net)
153{
154}
155
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700156static inline struct net *maybe_get_net(struct net *net)
157{
158 return net;
159}
YOSHIFUJI Hideaki878628f2008-03-26 03:57:35 +0900160
161static inline
162int net_eq(const struct net *net1, const struct net *net2)
163{
164 return 1;
165}
Pavel Emelyanovd4655792007-11-01 00:43:49 -0700166#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200167
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700168
169#ifdef NETNS_REFCNT_DEBUG
170static inline struct net *hold_net(struct net *net)
171{
172 if (net)
173 atomic_inc(&net->use_count);
174 return net;
175}
176
177static inline void release_net(struct net *net)
178{
179 if (net)
180 atomic_dec(&net->use_count);
181}
182#else
183static inline struct net *hold_net(struct net *net)
184{
185 return net;
186}
187
188static inline void release_net(struct net *net)
189{
190}
191#endif
192
Eric Dumazet8f424b52008-11-12 00:53:30 -0800193#ifdef CONFIG_NET_NS
194
195static inline void write_pnet(struct net **pnet, struct net *net)
196{
197 *pnet = net;
198}
199
200static inline struct net *read_pnet(struct net * const *pnet)
201{
202 return *pnet;
203}
204
205#else
206
207#define write_pnet(pnet, net) do { (void)(net);} while (0)
208#define read_pnet(pnet) (&init_net)
209
210#endif
Denis V. Lunev5d1e4462008-04-16 01:58:04 -0700211
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200212#define for_each_net(VAR) \
213 list_for_each_entry(VAR, &net_namespace_list, list)
214
Johannes Berg11a28d32009-07-10 09:51:33 +0000215#define for_each_net_rcu(VAR) \
216 list_for_each_entry_rcu(VAR, &net_namespace_list, list)
217
Pavel Emelyanov46650792007-10-08 20:38:39 -0700218#ifdef CONFIG_NET_NS
219#define __net_init
220#define __net_exit
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800221#define __net_initdata
Pavel Emelyanov46650792007-10-08 20:38:39 -0700222#else
223#define __net_init __init
224#define __net_exit __exit_refok
Denis V. Lunev022cbae2007-11-13 03:23:50 -0800225#define __net_initdata __initdata
Pavel Emelyanov46650792007-10-08 20:38:39 -0700226#endif
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200227
228struct pernet_operations {
229 struct list_head list;
230 int (*init)(struct net *net);
231 void (*exit)(struct net *net);
232};
233
Eric W. Biederman17edde52009-02-22 00:11:09 -0800234/*
235 * Use these carefully. If you implement a network device and it
236 * needs per network namespace operations use device pernet operations,
237 * otherwise use pernet subsys operations.
238 *
239 * This is critically important. Most of the network code cleanup
240 * runs with the assumption that dev_remove_pack has been called so no
241 * new packets will arrive during and after the cleanup functions have
242 * been called. dev_remove_pack is not per namespace so instead the
243 * guarantee of no more packets arriving in a network namespace is
244 * provided by ensuring that all network devices and all sockets have
245 * left the network namespace before the cleanup methods are called.
246 *
247 * For the longest time the ipv4 icmp code was registered as a pernet
248 * device which caused kernel oops, and panics during network
249 * namespace cleanup. So please don't get this wrong.
250 */
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200251extern int register_pernet_subsys(struct pernet_operations *);
252extern void unregister_pernet_subsys(struct pernet_operations *);
Alexey Dobriyan485ac572008-10-30 23:55:16 -0700253extern int register_pernet_gen_subsys(int *id, struct pernet_operations *);
254extern void unregister_pernet_gen_subsys(int id, struct pernet_operations *);
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200255extern int register_pernet_device(struct pernet_operations *);
256extern void unregister_pernet_device(struct pernet_operations *);
Pavel Emelyanovc93cf612008-04-15 00:35:23 -0700257extern int register_pernet_gen_device(int *id, struct pernet_operations *);
258extern void unregister_pernet_gen_device(int id, struct pernet_operations *);
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200259
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100260struct ctl_path;
261struct ctl_table;
262struct ctl_table_header;
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700263
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100264extern struct ctl_table_header *register_net_sysctl_table(struct net *net,
265 const struct ctl_path *path, struct ctl_table *table);
Pavel Emelyanovd62c6122008-05-19 13:45:33 -0700266extern struct ctl_table_header *register_net_sysctl_rotable(
267 const struct ctl_path *path, struct ctl_table *table);
Eric W. Biederman95bdfcc2007-11-30 23:55:42 +1100268extern void unregister_net_sysctl_table(struct ctl_table_header *header);
269
Eric W. Biederman5f256be2007-09-12 11:50:50 +0200270#endif /* __NET_NET_NAMESPACE_H */