1 /* SPDX-License-Identifier: GPL-2.0 */ 2 /* 3 * ipv4 in net namespaces 4 */ 5 6 #ifndef __NETNS_IPV4_H__ 7 #define __NETNS_IPV4_H__ 8 9 #include <linux/uidgid.h> 10 #include <net/inet_frag.h> 11 #include <linux/rcupdate.h> 12 13 struct tcpm_hash_bucket; 14 struct ctl_table_header; 15 struct ipv4_devconf; 16 struct fib_rules_ops; 17 struct hlist_head; 18 struct fib_table; 19 struct sock; 20 struct local_ports { 21 seqlock_t lock; 22 int range[2]; 23 bool warned; 24 }; 25 26 struct ping_group_range { 27 seqlock_t lock; 28 kgid_t range[2]; 29 }; 30 31 struct inet_hashinfo; 32 33 struct inet_timewait_death_row { 34 atomic_t tw_count; 35 36 struct inet_hashinfo *hashinfo ____cacheline_aligned_in_smp; 37 int sysctl_max_tw_buckets; 38 }; 39 40 struct tcp_fastopen_context; 41 42 struct netns_ipv4 { 43 #ifdef CONFIG_SYSCTL 44 struct ctl_table_header *forw_hdr; 45 struct ctl_table_header *frags_hdr; 46 struct ctl_table_header *ipv4_hdr; 47 struct ctl_table_header *route_hdr; 48 struct ctl_table_header *xfrm4_hdr; 49 #endif 50 struct ipv4_devconf *devconf_all; 51 struct ipv4_devconf *devconf_dflt; 52 struct ip_ra_chain __rcu *ra_chain; 53 struct mutex ra_mutex; 54 #ifdef CONFIG_IP_MULTIPLE_TABLES 55 struct fib_rules_ops *rules_ops; 56 bool fib_has_custom_rules; 57 unsigned int fib_rules_require_fldissect; 58 struct fib_table __rcu *fib_main; 59 struct fib_table __rcu *fib_default; 60 #endif 61 bool fib_has_custom_local_routes; 62 #ifdef CONFIG_IP_ROUTE_CLASSID 63 int fib_num_tclassid_users; 64 #endif 65 struct hlist_head *fib_table_hash; 66 bool fib_offload_disabled; 67 struct sock *fibnl; 68 69 struct sock * __percpu *icmp_sk; 70 struct sock *mc_autojoin_sk; 71 72 struct inet_peer_base *peers; 73 struct sock * __percpu *tcp_sk; 74 struct netns_frags frags; 75 #ifdef CONFIG_NETFILTER 76 struct xt_table *iptable_filter; 77 struct xt_table *iptable_mangle; 78 struct xt_table *iptable_raw; 79 struct xt_table *arptable_filter; 80 #ifdef CONFIG_SECURITY 81 struct xt_table *iptable_security; 82 #endif 83 struct xt_table *nat_table; 84 #endif 85 86 int sysctl_icmp_echo_ignore_all; 87 int sysctl_icmp_echo_ignore_broadcasts; 88 int sysctl_icmp_ignore_bogus_error_responses; 89 int sysctl_icmp_ratelimit; 90 int sysctl_icmp_ratemask; 91 int sysctl_icmp_errors_use_inbound_ifaddr; 92 93 struct local_ports ip_local_ports; 94 95 int sysctl_tcp_ecn; 96 int sysctl_tcp_ecn_fallback; 97 98 int sysctl_ip_default_ttl; 99 int sysctl_ip_no_pmtu_disc; 100 int sysctl_ip_fwd_use_pmtu; 101 int sysctl_ip_nonlocal_bind; 102 /* Shall we try to damage output packets if routing dev changes? */ 103 int sysctl_ip_dynaddr; 104 int sysctl_ip_early_demux; 105 int sysctl_tcp_early_demux; 106 int sysctl_udp_early_demux; 107 108 int sysctl_fwmark_reflect; 109 int sysctl_tcp_fwmark_accept; 110 #ifdef CONFIG_NET_L3_MASTER_DEV 111 int sysctl_tcp_l3mdev_accept; 112 #endif 113 int sysctl_tcp_mtu_probing; 114 int sysctl_tcp_base_mss; 115 int sysctl_tcp_probe_threshold; 116 u32 sysctl_tcp_probe_interval; 117 118 int sysctl_tcp_keepalive_time; 119 int sysctl_tcp_keepalive_probes; 120 int sysctl_tcp_keepalive_intvl; 121 122 int sysctl_tcp_syn_retries; 123 int sysctl_tcp_synack_retries; 124 int sysctl_tcp_syncookies; 125 int sysctl_tcp_reordering; 126 int sysctl_tcp_retries1; 127 int sysctl_tcp_retries2; 128 int sysctl_tcp_orphan_retries; 129 int sysctl_tcp_fin_timeout; 130 unsigned int sysctl_tcp_notsent_lowat; 131 int sysctl_tcp_tw_reuse; 132 int sysctl_tcp_sack; 133 int sysctl_tcp_window_scaling; 134 int sysctl_tcp_timestamps; 135 int sysctl_tcp_early_retrans; 136 int sysctl_tcp_recovery; 137 int sysctl_tcp_thin_linear_timeouts; 138 int sysctl_tcp_slow_start_after_idle; 139 int sysctl_tcp_retrans_collapse; 140 int sysctl_tcp_stdurg; 141 int sysctl_tcp_rfc1337; 142 int sysctl_tcp_abort_on_overflow; 143 int sysctl_tcp_fack; 144 int sysctl_tcp_max_reordering; 145 int sysctl_tcp_dsack; 146 int sysctl_tcp_app_win; 147 int sysctl_tcp_adv_win_scale; 148 int sysctl_tcp_frto; 149 int sysctl_tcp_nometrics_save; 150 int sysctl_tcp_moderate_rcvbuf; 151 int sysctl_tcp_tso_win_divisor; 152 int sysctl_tcp_workaround_signed_windows; 153 int sysctl_tcp_limit_output_bytes; 154 int sysctl_tcp_challenge_ack_limit; 155 int sysctl_tcp_min_tso_segs; 156 int sysctl_tcp_min_rtt_wlen; 157 int sysctl_tcp_autocorking; 158 int sysctl_tcp_invalid_ratelimit; 159 int sysctl_tcp_pacing_ss_ratio; 160 int sysctl_tcp_pacing_ca_ratio; 161 int sysctl_tcp_wmem[3]; 162 int sysctl_tcp_rmem[3]; 163 struct inet_timewait_death_row tcp_death_row; 164 int sysctl_max_syn_backlog; 165 int sysctl_tcp_fastopen; 166 const struct tcp_congestion_ops __rcu *tcp_congestion_control; 167 struct tcp_fastopen_context __rcu *tcp_fastopen_ctx; 168 spinlock_t tcp_fastopen_ctx_lock; 169 unsigned int sysctl_tcp_fastopen_blackhole_timeout; 170 atomic_t tfo_active_disable_times; 171 unsigned long tfo_active_disable_stamp; 172 173 int sysctl_udp_wmem_min; 174 int sysctl_udp_rmem_min; 175 176 #ifdef CONFIG_NET_L3_MASTER_DEV 177 int sysctl_udp_l3mdev_accept; 178 #endif 179 180 int sysctl_igmp_max_memberships; 181 int sysctl_igmp_max_msf; 182 int sysctl_igmp_llm_reports; 183 int sysctl_igmp_qrv; 184 185 struct ping_group_range ping_group_range; 186 187 atomic_t dev_addr_genid; 188 189 #ifdef CONFIG_SYSCTL 190 unsigned long *sysctl_local_reserved_ports; 191 int sysctl_ip_prot_sock; 192 #endif 193 194 #ifdef CONFIG_IP_MROUTE 195 #ifndef CONFIG_IP_MROUTE_MULTIPLE_TABLES 196 struct mr_table *mrt; 197 #else 198 struct list_head mr_tables; 199 struct fib_rules_ops *mr_rules_ops; 200 #endif 201 #endif 202 #ifdef CONFIG_IP_ROUTE_MULTIPATH 203 int sysctl_fib_multipath_use_neigh; 204 int sysctl_fib_multipath_hash_policy; 205 #endif 206 207 struct fib_notifier_ops *notifier_ops; 208 unsigned int fib_seq; /* protected by rtnl_mutex */ 209 210 struct fib_notifier_ops *ipmr_notifier_ops; 211 unsigned int ipmr_seq; /* protected by rtnl_mutex */ 212 213 atomic_t rt_genid; 214 }; 215 #endif 216