1daedfb22SAlexei Starovoitov /* Copyright (c) 2011-2014 PLUMgrid, http://plumgrid.com 2daedfb22SAlexei Starovoitov * 3daedfb22SAlexei Starovoitov * This program is free software; you can redistribute it and/or 4daedfb22SAlexei Starovoitov * modify it under the terms of version 2 of the GNU General Public 5daedfb22SAlexei Starovoitov * License as published by the Free Software Foundation. 6daedfb22SAlexei Starovoitov */ 7daedfb22SAlexei Starovoitov #ifndef _UAPI__LINUX_BPF_H__ 8daedfb22SAlexei Starovoitov #define _UAPI__LINUX_BPF_H__ 9daedfb22SAlexei Starovoitov 10daedfb22SAlexei Starovoitov #include <linux/types.h> 11c15952dcSAlexei Starovoitov #include <linux/bpf_common.h> 12daedfb22SAlexei Starovoitov 13daedfb22SAlexei Starovoitov /* Extended instruction set based on top of classic BPF */ 14daedfb22SAlexei Starovoitov 15daedfb22SAlexei Starovoitov /* instruction classes */ 16daedfb22SAlexei Starovoitov #define BPF_ALU64 0x07 /* alu mode in double word width */ 17daedfb22SAlexei Starovoitov 18daedfb22SAlexei Starovoitov /* ld/ldx fields */ 19daedfb22SAlexei Starovoitov #define BPF_DW 0x18 /* double word */ 20daedfb22SAlexei Starovoitov #define BPF_XADD 0xc0 /* exclusive add */ 21daedfb22SAlexei Starovoitov 22daedfb22SAlexei Starovoitov /* alu/jmp fields */ 23daedfb22SAlexei Starovoitov #define BPF_MOV 0xb0 /* mov reg to reg */ 24daedfb22SAlexei Starovoitov #define BPF_ARSH 0xc0 /* sign extending arithmetic shift right */ 25daedfb22SAlexei Starovoitov 26daedfb22SAlexei Starovoitov /* change endianness of a register */ 27daedfb22SAlexei Starovoitov #define BPF_END 0xd0 /* flags for endianness conversion: */ 28daedfb22SAlexei Starovoitov #define BPF_TO_LE 0x00 /* convert to little-endian */ 29daedfb22SAlexei Starovoitov #define BPF_TO_BE 0x08 /* convert to big-endian */ 30daedfb22SAlexei Starovoitov #define BPF_FROM_LE BPF_TO_LE 31daedfb22SAlexei Starovoitov #define BPF_FROM_BE BPF_TO_BE 32daedfb22SAlexei Starovoitov 33daedfb22SAlexei Starovoitov #define BPF_JNE 0x50 /* jump != */ 34daedfb22SAlexei Starovoitov #define BPF_JSGT 0x60 /* SGT is signed '>', GT in x86 */ 35daedfb22SAlexei Starovoitov #define BPF_JSGE 0x70 /* SGE is signed '>=', GE in x86 */ 36daedfb22SAlexei Starovoitov #define BPF_CALL 0x80 /* function call */ 37daedfb22SAlexei Starovoitov #define BPF_EXIT 0x90 /* function return */ 38daedfb22SAlexei Starovoitov 39daedfb22SAlexei Starovoitov /* Register numbers */ 40daedfb22SAlexei Starovoitov enum { 41daedfb22SAlexei Starovoitov BPF_REG_0 = 0, 42daedfb22SAlexei Starovoitov BPF_REG_1, 43daedfb22SAlexei Starovoitov BPF_REG_2, 44daedfb22SAlexei Starovoitov BPF_REG_3, 45daedfb22SAlexei Starovoitov BPF_REG_4, 46daedfb22SAlexei Starovoitov BPF_REG_5, 47daedfb22SAlexei Starovoitov BPF_REG_6, 48daedfb22SAlexei Starovoitov BPF_REG_7, 49daedfb22SAlexei Starovoitov BPF_REG_8, 50daedfb22SAlexei Starovoitov BPF_REG_9, 51daedfb22SAlexei Starovoitov BPF_REG_10, 52daedfb22SAlexei Starovoitov __MAX_BPF_REG, 53daedfb22SAlexei Starovoitov }; 54daedfb22SAlexei Starovoitov 55daedfb22SAlexei Starovoitov /* BPF has 10 general purpose 64-bit registers and stack frame. */ 56daedfb22SAlexei Starovoitov #define MAX_BPF_REG __MAX_BPF_REG 57daedfb22SAlexei Starovoitov 58daedfb22SAlexei Starovoitov struct bpf_insn { 59daedfb22SAlexei Starovoitov __u8 code; /* opcode */ 60daedfb22SAlexei Starovoitov __u8 dst_reg:4; /* dest register */ 61daedfb22SAlexei Starovoitov __u8 src_reg:4; /* source register */ 62daedfb22SAlexei Starovoitov __s16 off; /* signed offset */ 63daedfb22SAlexei Starovoitov __s32 imm; /* signed immediate constant */ 64daedfb22SAlexei Starovoitov }; 65daedfb22SAlexei Starovoitov 66b2197755SDaniel Borkmann /* BPF syscall commands, see bpf(2) man-page for details. */ 6799c55f7dSAlexei Starovoitov enum bpf_cmd { 6899c55f7dSAlexei Starovoitov BPF_MAP_CREATE, 69db20fd2bSAlexei Starovoitov BPF_MAP_LOOKUP_ELEM, 70db20fd2bSAlexei Starovoitov BPF_MAP_UPDATE_ELEM, 71db20fd2bSAlexei Starovoitov BPF_MAP_DELETE_ELEM, 72db20fd2bSAlexei Starovoitov BPF_MAP_GET_NEXT_KEY, 7309756af4SAlexei Starovoitov BPF_PROG_LOAD, 74b2197755SDaniel Borkmann BPF_OBJ_PIN, 75b2197755SDaniel Borkmann BPF_OBJ_GET, 7699c55f7dSAlexei Starovoitov }; 7799c55f7dSAlexei Starovoitov 7899c55f7dSAlexei Starovoitov enum bpf_map_type { 7999c55f7dSAlexei Starovoitov BPF_MAP_TYPE_UNSPEC, 800f8e4bd8SAlexei Starovoitov BPF_MAP_TYPE_HASH, 8128fbcfa0SAlexei Starovoitov BPF_MAP_TYPE_ARRAY, 8204fd61abSAlexei Starovoitov BPF_MAP_TYPE_PROG_ARRAY, 83ea317b26SKaixu Xia BPF_MAP_TYPE_PERF_EVENT_ARRAY, 84824bd0ceSAlexei Starovoitov BPF_MAP_TYPE_PERCPU_HASH, 85a10423b8SAlexei Starovoitov BPF_MAP_TYPE_PERCPU_ARRAY, 86d5a3b1f6SAlexei Starovoitov BPF_MAP_TYPE_STACK_TRACE, 874ed8ec52SMartin KaFai Lau BPF_MAP_TYPE_CGROUP_ARRAY, 8899c55f7dSAlexei Starovoitov }; 8999c55f7dSAlexei Starovoitov 9009756af4SAlexei Starovoitov enum bpf_prog_type { 9109756af4SAlexei Starovoitov BPF_PROG_TYPE_UNSPEC, 92ddd872bcSAlexei Starovoitov BPF_PROG_TYPE_SOCKET_FILTER, 932541517cSAlexei Starovoitov BPF_PROG_TYPE_KPROBE, 9496be4325SDaniel Borkmann BPF_PROG_TYPE_SCHED_CLS, 9594caee8cSDaniel Borkmann BPF_PROG_TYPE_SCHED_ACT, 9698b5c2c6SAlexei Starovoitov BPF_PROG_TYPE_TRACEPOINT, 976a773a15SBrenden Blanco BPF_PROG_TYPE_XDP, 980515e599SAlexei Starovoitov BPF_PROG_TYPE_PERF_EVENT, 9909756af4SAlexei Starovoitov }; 10009756af4SAlexei Starovoitov 101f1a66f85SDaniel Borkmann #define BPF_PSEUDO_MAP_FD 1 102f1a66f85SDaniel Borkmann 1033274f520SAlexei Starovoitov /* flags for BPF_MAP_UPDATE_ELEM command */ 1043274f520SAlexei Starovoitov #define BPF_ANY 0 /* create new element or update existing */ 1053274f520SAlexei Starovoitov #define BPF_NOEXIST 1 /* create new element if it didn't exist */ 1063274f520SAlexei Starovoitov #define BPF_EXIST 2 /* update existing element */ 1073274f520SAlexei Starovoitov 1086c905981SAlexei Starovoitov #define BPF_F_NO_PREALLOC (1U << 0) 1096c905981SAlexei Starovoitov 11099c55f7dSAlexei Starovoitov union bpf_attr { 11199c55f7dSAlexei Starovoitov struct { /* anonymous struct used by BPF_MAP_CREATE command */ 11299c55f7dSAlexei Starovoitov __u32 map_type; /* one of enum bpf_map_type */ 11399c55f7dSAlexei Starovoitov __u32 key_size; /* size of key in bytes */ 11499c55f7dSAlexei Starovoitov __u32 value_size; /* size of value in bytes */ 11599c55f7dSAlexei Starovoitov __u32 max_entries; /* max number of entries in a map */ 1166c905981SAlexei Starovoitov __u32 map_flags; /* prealloc or not */ 11799c55f7dSAlexei Starovoitov }; 118db20fd2bSAlexei Starovoitov 119db20fd2bSAlexei Starovoitov struct { /* anonymous struct used by BPF_MAP_*_ELEM commands */ 120db20fd2bSAlexei Starovoitov __u32 map_fd; 121db20fd2bSAlexei Starovoitov __aligned_u64 key; 122db20fd2bSAlexei Starovoitov union { 123db20fd2bSAlexei Starovoitov __aligned_u64 value; 124db20fd2bSAlexei Starovoitov __aligned_u64 next_key; 125db20fd2bSAlexei Starovoitov }; 1263274f520SAlexei Starovoitov __u64 flags; 127db20fd2bSAlexei Starovoitov }; 12809756af4SAlexei Starovoitov 12909756af4SAlexei Starovoitov struct { /* anonymous struct used by BPF_PROG_LOAD command */ 13009756af4SAlexei Starovoitov __u32 prog_type; /* one of enum bpf_prog_type */ 13109756af4SAlexei Starovoitov __u32 insn_cnt; 13209756af4SAlexei Starovoitov __aligned_u64 insns; 13309756af4SAlexei Starovoitov __aligned_u64 license; 134cbd35700SAlexei Starovoitov __u32 log_level; /* verbosity level of verifier */ 135cbd35700SAlexei Starovoitov __u32 log_size; /* size of user buffer */ 136cbd35700SAlexei Starovoitov __aligned_u64 log_buf; /* user supplied buffer */ 1372541517cSAlexei Starovoitov __u32 kern_version; /* checked when prog_type=kprobe */ 13809756af4SAlexei Starovoitov }; 139b2197755SDaniel Borkmann 140b2197755SDaniel Borkmann struct { /* anonymous struct used by BPF_OBJ_* commands */ 141b2197755SDaniel Borkmann __aligned_u64 pathname; 142b2197755SDaniel Borkmann __u32 bpf_fd; 143b2197755SDaniel Borkmann }; 14499c55f7dSAlexei Starovoitov } __attribute__((aligned(8))); 14599c55f7dSAlexei Starovoitov 14609756af4SAlexei Starovoitov /* integer value in 'imm' field of BPF_CALL instruction selects which helper 14709756af4SAlexei Starovoitov * function eBPF program intends to call 14809756af4SAlexei Starovoitov */ 14909756af4SAlexei Starovoitov enum bpf_func_id { 15009756af4SAlexei Starovoitov BPF_FUNC_unspec, 151d0003ec0SAlexei Starovoitov BPF_FUNC_map_lookup_elem, /* void *map_lookup_elem(&map, &key) */ 152d0003ec0SAlexei Starovoitov BPF_FUNC_map_update_elem, /* int map_update_elem(&map, &key, &value, flags) */ 153d0003ec0SAlexei Starovoitov BPF_FUNC_map_delete_elem, /* int map_delete_elem(&map, &key) */ 1542541517cSAlexei Starovoitov BPF_FUNC_probe_read, /* int bpf_probe_read(void *dst, int size, void *src) */ 155d9847d31SAlexei Starovoitov BPF_FUNC_ktime_get_ns, /* u64 bpf_ktime_get_ns(void) */ 1569c959c86SAlexei Starovoitov BPF_FUNC_trace_printk, /* int bpf_trace_printk(const char *fmt, int fmt_size, ...) */ 15703e69b50SDaniel Borkmann BPF_FUNC_get_prandom_u32, /* u32 prandom_u32(void) */ 158c04167ceSDaniel Borkmann BPF_FUNC_get_smp_processor_id, /* u32 raw_smp_processor_id(void) */ 15991bc4822SAlexei Starovoitov 16091bc4822SAlexei Starovoitov /** 16191bc4822SAlexei Starovoitov * skb_store_bytes(skb, offset, from, len, flags) - store bytes into packet 16291bc4822SAlexei Starovoitov * @skb: pointer to skb 163a166151cSAlexei Starovoitov * @offset: offset within packet from skb->mac_header 16491bc4822SAlexei Starovoitov * @from: pointer where to copy bytes from 16591bc4822SAlexei Starovoitov * @len: number of bytes to store into packet 16691bc4822SAlexei Starovoitov * @flags: bit 0 - if true, recompute skb->csum 16791bc4822SAlexei Starovoitov * other bits - reserved 16891bc4822SAlexei Starovoitov * Return: 0 on success 16991bc4822SAlexei Starovoitov */ 17091bc4822SAlexei Starovoitov BPF_FUNC_skb_store_bytes, 17191bc4822SAlexei Starovoitov 17291bc4822SAlexei Starovoitov /** 17391bc4822SAlexei Starovoitov * l3_csum_replace(skb, offset, from, to, flags) - recompute IP checksum 17491bc4822SAlexei Starovoitov * @skb: pointer to skb 17591bc4822SAlexei Starovoitov * @offset: offset within packet where IP checksum is located 17691bc4822SAlexei Starovoitov * @from: old value of header field 17791bc4822SAlexei Starovoitov * @to: new value of header field 17891bc4822SAlexei Starovoitov * @flags: bits 0-3 - size of header field 17991bc4822SAlexei Starovoitov * other bits - reserved 18091bc4822SAlexei Starovoitov * Return: 0 on success 18191bc4822SAlexei Starovoitov */ 18291bc4822SAlexei Starovoitov BPF_FUNC_l3_csum_replace, 18391bc4822SAlexei Starovoitov 18491bc4822SAlexei Starovoitov /** 18591bc4822SAlexei Starovoitov * l4_csum_replace(skb, offset, from, to, flags) - recompute TCP/UDP checksum 18691bc4822SAlexei Starovoitov * @skb: pointer to skb 18791bc4822SAlexei Starovoitov * @offset: offset within packet where TCP/UDP checksum is located 18891bc4822SAlexei Starovoitov * @from: old value of header field 18991bc4822SAlexei Starovoitov * @to: new value of header field 19091bc4822SAlexei Starovoitov * @flags: bits 0-3 - size of header field 19191bc4822SAlexei Starovoitov * bit 4 - is pseudo header 19291bc4822SAlexei Starovoitov * other bits - reserved 19391bc4822SAlexei Starovoitov * Return: 0 on success 19491bc4822SAlexei Starovoitov */ 19591bc4822SAlexei Starovoitov BPF_FUNC_l4_csum_replace, 19604fd61abSAlexei Starovoitov 19704fd61abSAlexei Starovoitov /** 19804fd61abSAlexei Starovoitov * bpf_tail_call(ctx, prog_array_map, index) - jump into another BPF program 19904fd61abSAlexei Starovoitov * @ctx: context pointer passed to next program 20004fd61abSAlexei Starovoitov * @prog_array_map: pointer to map which type is BPF_MAP_TYPE_PROG_ARRAY 20104fd61abSAlexei Starovoitov * @index: index inside array that selects specific program to run 20204fd61abSAlexei Starovoitov * Return: 0 on success 20304fd61abSAlexei Starovoitov */ 20404fd61abSAlexei Starovoitov BPF_FUNC_tail_call, 2053896d655SAlexei Starovoitov 2063896d655SAlexei Starovoitov /** 2073896d655SAlexei Starovoitov * bpf_clone_redirect(skb, ifindex, flags) - redirect to another netdev 2083896d655SAlexei Starovoitov * @skb: pointer to skb 2093896d655SAlexei Starovoitov * @ifindex: ifindex of the net device 2103896d655SAlexei Starovoitov * @flags: bit 0 - if set, redirect to ingress instead of egress 2113896d655SAlexei Starovoitov * other bits - reserved 2123896d655SAlexei Starovoitov * Return: 0 on success 2133896d655SAlexei Starovoitov */ 2143896d655SAlexei Starovoitov BPF_FUNC_clone_redirect, 215ffeedafbSAlexei Starovoitov 216ffeedafbSAlexei Starovoitov /** 217ffeedafbSAlexei Starovoitov * u64 bpf_get_current_pid_tgid(void) 218ffeedafbSAlexei Starovoitov * Return: current->tgid << 32 | current->pid 219ffeedafbSAlexei Starovoitov */ 220ffeedafbSAlexei Starovoitov BPF_FUNC_get_current_pid_tgid, 221ffeedafbSAlexei Starovoitov 222ffeedafbSAlexei Starovoitov /** 223ffeedafbSAlexei Starovoitov * u64 bpf_get_current_uid_gid(void) 224ffeedafbSAlexei Starovoitov * Return: current_gid << 32 | current_uid 225ffeedafbSAlexei Starovoitov */ 226ffeedafbSAlexei Starovoitov BPF_FUNC_get_current_uid_gid, 227ffeedafbSAlexei Starovoitov 228ffeedafbSAlexei Starovoitov /** 229ffeedafbSAlexei Starovoitov * bpf_get_current_comm(char *buf, int size_of_buf) 230ffeedafbSAlexei Starovoitov * stores current->comm into buf 231ffeedafbSAlexei Starovoitov * Return: 0 on success 232ffeedafbSAlexei Starovoitov */ 233ffeedafbSAlexei Starovoitov BPF_FUNC_get_current_comm, 2348d20aabeSDaniel Borkmann 2358d20aabeSDaniel Borkmann /** 2368d20aabeSDaniel Borkmann * bpf_get_cgroup_classid(skb) - retrieve a proc's classid 2378d20aabeSDaniel Borkmann * @skb: pointer to skb 2388d20aabeSDaniel Borkmann * Return: classid if != 0 2398d20aabeSDaniel Borkmann */ 2408d20aabeSDaniel Borkmann BPF_FUNC_get_cgroup_classid, 2414e10df9aSAlexei Starovoitov BPF_FUNC_skb_vlan_push, /* bpf_skb_vlan_push(skb, vlan_proto, vlan_tci) */ 2424e10df9aSAlexei Starovoitov BPF_FUNC_skb_vlan_pop, /* bpf_skb_vlan_pop(skb) */ 243d3aa45ceSAlexei Starovoitov 244d3aa45ceSAlexei Starovoitov /** 245d3aa45ceSAlexei Starovoitov * bpf_skb_[gs]et_tunnel_key(skb, key, size, flags) 246d3aa45ceSAlexei Starovoitov * retrieve or populate tunnel metadata 247d3aa45ceSAlexei Starovoitov * @skb: pointer to skb 248d3aa45ceSAlexei Starovoitov * @key: pointer to 'struct bpf_tunnel_key' 249d3aa45ceSAlexei Starovoitov * @size: size of 'struct bpf_tunnel_key' 250d3aa45ceSAlexei Starovoitov * @flags: room for future extensions 251d3aa45ceSAlexei Starovoitov * Retrun: 0 on success 252d3aa45ceSAlexei Starovoitov */ 253d3aa45ceSAlexei Starovoitov BPF_FUNC_skb_get_tunnel_key, 254d3aa45ceSAlexei Starovoitov BPF_FUNC_skb_set_tunnel_key, 25535578d79SKaixu Xia BPF_FUNC_perf_event_read, /* u64 bpf_perf_event_read(&map, index) */ 25627b29f63SAlexei Starovoitov /** 25727b29f63SAlexei Starovoitov * bpf_redirect(ifindex, flags) - redirect to another netdev 25827b29f63SAlexei Starovoitov * @ifindex: ifindex of the net device 25927b29f63SAlexei Starovoitov * @flags: bit 0 - if set, redirect to ingress instead of egress 26027b29f63SAlexei Starovoitov * other bits - reserved 26127b29f63SAlexei Starovoitov * Return: TC_ACT_REDIRECT 26227b29f63SAlexei Starovoitov */ 26327b29f63SAlexei Starovoitov BPF_FUNC_redirect, 264c46646d0SDaniel Borkmann 265c46646d0SDaniel Borkmann /** 266c46646d0SDaniel Borkmann * bpf_get_route_realm(skb) - retrieve a dst's tclassid 267c46646d0SDaniel Borkmann * @skb: pointer to skb 268c46646d0SDaniel Borkmann * Return: realm if != 0 269c46646d0SDaniel Borkmann */ 270c46646d0SDaniel Borkmann BPF_FUNC_get_route_realm, 271a43eec30SAlexei Starovoitov 272a43eec30SAlexei Starovoitov /** 273a43eec30SAlexei Starovoitov * bpf_perf_event_output(ctx, map, index, data, size) - output perf raw sample 274a43eec30SAlexei Starovoitov * @ctx: struct pt_regs* 275a43eec30SAlexei Starovoitov * @map: pointer to perf_event_array map 276a43eec30SAlexei Starovoitov * @index: index of event in the map 277a43eec30SAlexei Starovoitov * @data: data on stack to be output as raw data 278a43eec30SAlexei Starovoitov * @size: size of data 279a43eec30SAlexei Starovoitov * Return: 0 on success 280a43eec30SAlexei Starovoitov */ 281a43eec30SAlexei Starovoitov BPF_FUNC_perf_event_output, 28205c74e5eSDaniel Borkmann BPF_FUNC_skb_load_bytes, 283d5a3b1f6SAlexei Starovoitov 284d5a3b1f6SAlexei Starovoitov /** 285d5a3b1f6SAlexei Starovoitov * bpf_get_stackid(ctx, map, flags) - walk user or kernel stack and return id 286d5a3b1f6SAlexei Starovoitov * @ctx: struct pt_regs* 287d5a3b1f6SAlexei Starovoitov * @map: pointer to stack_trace map 288d5a3b1f6SAlexei Starovoitov * @flags: bits 0-7 - numer of stack frames to skip 289d5a3b1f6SAlexei Starovoitov * bit 8 - collect user stack instead of kernel 290d5a3b1f6SAlexei Starovoitov * bit 9 - compare stacks by hash only 291d5a3b1f6SAlexei Starovoitov * bit 10 - if two different stacks hash into the same stackid 292d5a3b1f6SAlexei Starovoitov * discard old 293d5a3b1f6SAlexei Starovoitov * other bits - reserved 294d5a3b1f6SAlexei Starovoitov * Return: >= 0 stackid on success or negative error 295d5a3b1f6SAlexei Starovoitov */ 296d5a3b1f6SAlexei Starovoitov BPF_FUNC_get_stackid, 2977d672345SDaniel Borkmann 2987d672345SDaniel Borkmann /** 2997d672345SDaniel Borkmann * bpf_csum_diff(from, from_size, to, to_size, seed) - calculate csum diff 3007d672345SDaniel Borkmann * @from: raw from buffer 3017d672345SDaniel Borkmann * @from_size: length of from buffer 3027d672345SDaniel Borkmann * @to: raw to buffer 3037d672345SDaniel Borkmann * @to_size: length of to buffer 3047d672345SDaniel Borkmann * @seed: optional seed 3057d672345SDaniel Borkmann * Return: csum result 3067d672345SDaniel Borkmann */ 3077d672345SDaniel Borkmann BPF_FUNC_csum_diff, 30814ca0751SDaniel Borkmann 30914ca0751SDaniel Borkmann /** 31014ca0751SDaniel Borkmann * bpf_skb_[gs]et_tunnel_opt(skb, opt, size) 31114ca0751SDaniel Borkmann * retrieve or populate tunnel options metadata 31214ca0751SDaniel Borkmann * @skb: pointer to skb 31314ca0751SDaniel Borkmann * @opt: pointer to raw tunnel option data 31414ca0751SDaniel Borkmann * @size: size of @opt 31514ca0751SDaniel Borkmann * Return: 0 on success for set, option size for get 31614ca0751SDaniel Borkmann */ 31714ca0751SDaniel Borkmann BPF_FUNC_skb_get_tunnel_opt, 31814ca0751SDaniel Borkmann BPF_FUNC_skb_set_tunnel_opt, 3196578171aSDaniel Borkmann 3206578171aSDaniel Borkmann /** 3216578171aSDaniel Borkmann * bpf_skb_change_proto(skb, proto, flags) 3226578171aSDaniel Borkmann * Change protocol of the skb. Currently supported is 3236578171aSDaniel Borkmann * v4 -> v6, v6 -> v4 transitions. The helper will also 3246578171aSDaniel Borkmann * resize the skb. eBPF program is expected to fill the 3256578171aSDaniel Borkmann * new headers via skb_store_bytes and lX_csum_replace. 3266578171aSDaniel Borkmann * @skb: pointer to skb 3276578171aSDaniel Borkmann * @proto: new skb->protocol type 3286578171aSDaniel Borkmann * @flags: reserved 3296578171aSDaniel Borkmann * Return: 0 on success or negative error 3306578171aSDaniel Borkmann */ 3316578171aSDaniel Borkmann BPF_FUNC_skb_change_proto, 3326578171aSDaniel Borkmann 333d2485c42SDaniel Borkmann /** 334d2485c42SDaniel Borkmann * bpf_skb_change_type(skb, type) 335d2485c42SDaniel Borkmann * Change packet type of skb. 336d2485c42SDaniel Borkmann * @skb: pointer to skb 337d2485c42SDaniel Borkmann * @type: new skb->pkt_type type 338d2485c42SDaniel Borkmann * Return: 0 on success or negative error 339d2485c42SDaniel Borkmann */ 340d2485c42SDaniel Borkmann BPF_FUNC_skb_change_type, 341d2485c42SDaniel Borkmann 3424a482f34SMartin KaFai Lau /** 343747ea55eSDaniel Borkmann * bpf_skb_under_cgroup(skb, map, index) - Check cgroup2 membership of skb 3444a482f34SMartin KaFai Lau * @skb: pointer to skb 3454a482f34SMartin KaFai Lau * @map: pointer to bpf_map in BPF_MAP_TYPE_CGROUP_ARRAY type 3464a482f34SMartin KaFai Lau * @index: index of the cgroup in the bpf_map 3474a482f34SMartin KaFai Lau * Return: 3484a482f34SMartin KaFai Lau * == 0 skb failed the cgroup2 descendant test 3494a482f34SMartin KaFai Lau * == 1 skb succeeded the cgroup2 descendant test 3504a482f34SMartin KaFai Lau * < 0 error 3514a482f34SMartin KaFai Lau */ 352747ea55eSDaniel Borkmann BPF_FUNC_skb_under_cgroup, 35313c5c240SDaniel Borkmann 35413c5c240SDaniel Borkmann /** 35513c5c240SDaniel Borkmann * bpf_get_hash_recalc(skb) 35613c5c240SDaniel Borkmann * Retrieve and possibly recalculate skb->hash. 35713c5c240SDaniel Borkmann * @skb: pointer to skb 35813c5c240SDaniel Borkmann * Return: hash 35913c5c240SDaniel Borkmann */ 36013c5c240SDaniel Borkmann BPF_FUNC_get_hash_recalc, 36113c5c240SDaniel Borkmann 362606274c5SAlexei Starovoitov /** 363606274c5SAlexei Starovoitov * u64 bpf_get_current_task(void) 364606274c5SAlexei Starovoitov * Returns current task_struct 365606274c5SAlexei Starovoitov * Return: current 366606274c5SAlexei Starovoitov */ 367606274c5SAlexei Starovoitov BPF_FUNC_get_current_task, 368606274c5SAlexei Starovoitov 36996ae5227SSargun Dhillon /** 37096ae5227SSargun Dhillon * bpf_probe_write_user(void *dst, void *src, int len) 37196ae5227SSargun Dhillon * safely attempt to write to a location 37296ae5227SSargun Dhillon * @dst: destination address in userspace 37396ae5227SSargun Dhillon * @src: source address on stack 37496ae5227SSargun Dhillon * @len: number of bytes to copy 37596ae5227SSargun Dhillon * Return: 0 on success or negative error 37696ae5227SSargun Dhillon */ 37796ae5227SSargun Dhillon BPF_FUNC_probe_write_user, 37896ae5227SSargun Dhillon 37960d20f91SSargun Dhillon /** 38060d20f91SSargun Dhillon * bpf_current_task_under_cgroup(map, index) - Check cgroup2 membership of current task 38160d20f91SSargun Dhillon * @map: pointer to bpf_map in BPF_MAP_TYPE_CGROUP_ARRAY type 38260d20f91SSargun Dhillon * @index: index of the cgroup in the bpf_map 38360d20f91SSargun Dhillon * Return: 38460d20f91SSargun Dhillon * == 0 current failed the cgroup2 descendant test 38560d20f91SSargun Dhillon * == 1 current succeeded the cgroup2 descendant test 38660d20f91SSargun Dhillon * < 0 error 38760d20f91SSargun Dhillon */ 38860d20f91SSargun Dhillon BPF_FUNC_current_task_under_cgroup, 38960d20f91SSargun Dhillon 3905293efe6SDaniel Borkmann /** 3915293efe6SDaniel Borkmann * bpf_skb_change_tail(skb, len, flags) 3925293efe6SDaniel Borkmann * The helper will resize the skb to the given new size, 3935293efe6SDaniel Borkmann * to be used f.e. with control messages. 3945293efe6SDaniel Borkmann * @skb: pointer to skb 3955293efe6SDaniel Borkmann * @len: new skb length 3965293efe6SDaniel Borkmann * @flags: reserved 3975293efe6SDaniel Borkmann * Return: 0 on success or negative error 3985293efe6SDaniel Borkmann */ 3995293efe6SDaniel Borkmann BPF_FUNC_skb_change_tail, 4005293efe6SDaniel Borkmann 40136bbef52SDaniel Borkmann /** 40236bbef52SDaniel Borkmann * bpf_skb_pull_data(skb, len) 40336bbef52SDaniel Borkmann * The helper will pull in non-linear data in case the 40436bbef52SDaniel Borkmann * skb is non-linear and not all of len are part of the 40536bbef52SDaniel Borkmann * linear section. Only needed for read/write with direct 40636bbef52SDaniel Borkmann * packet access. 40736bbef52SDaniel Borkmann * @skb: pointer to skb 40836bbef52SDaniel Borkmann * @len: len to make read/writeable 40936bbef52SDaniel Borkmann * Return: 0 on success or negative error 41036bbef52SDaniel Borkmann */ 41136bbef52SDaniel Borkmann BPF_FUNC_skb_pull_data, 41236bbef52SDaniel Borkmann 41336bbef52SDaniel Borkmann /** 41436bbef52SDaniel Borkmann * bpf_csum_update(skb, csum) 41536bbef52SDaniel Borkmann * Adds csum into skb->csum in case of CHECKSUM_COMPLETE. 41636bbef52SDaniel Borkmann * @skb: pointer to skb 41736bbef52SDaniel Borkmann * @csum: csum to add 41836bbef52SDaniel Borkmann * Return: csum on success or negative error 41936bbef52SDaniel Borkmann */ 42036bbef52SDaniel Borkmann BPF_FUNC_csum_update, 42136bbef52SDaniel Borkmann 4227a4b28c6SDaniel Borkmann /** 4237a4b28c6SDaniel Borkmann * bpf_set_hash_invalid(skb) 4247a4b28c6SDaniel Borkmann * Invalidate current skb>hash. 4257a4b28c6SDaniel Borkmann * @skb: pointer to skb 4267a4b28c6SDaniel Borkmann */ 4277a4b28c6SDaniel Borkmann BPF_FUNC_set_hash_invalid, 4287a4b28c6SDaniel Borkmann 429*2d0e30c3SDaniel Borkmann /** 430*2d0e30c3SDaniel Borkmann * bpf_get_numa_node_id() 431*2d0e30c3SDaniel Borkmann * Returns the id of the current NUMA node. 432*2d0e30c3SDaniel Borkmann */ 433*2d0e30c3SDaniel Borkmann BPF_FUNC_get_numa_node_id, 434*2d0e30c3SDaniel Borkmann 43509756af4SAlexei Starovoitov __BPF_FUNC_MAX_ID, 43609756af4SAlexei Starovoitov }; 43709756af4SAlexei Starovoitov 438781c53bcSDaniel Borkmann /* All flags used by eBPF helper functions, placed here. */ 439781c53bcSDaniel Borkmann 440781c53bcSDaniel Borkmann /* BPF_FUNC_skb_store_bytes flags. */ 441781c53bcSDaniel Borkmann #define BPF_F_RECOMPUTE_CSUM (1ULL << 0) 4428afd54c8SDaniel Borkmann #define BPF_F_INVALIDATE_HASH (1ULL << 1) 443781c53bcSDaniel Borkmann 444781c53bcSDaniel Borkmann /* BPF_FUNC_l3_csum_replace and BPF_FUNC_l4_csum_replace flags. 445781c53bcSDaniel Borkmann * First 4 bits are for passing the header field size. 446781c53bcSDaniel Borkmann */ 447781c53bcSDaniel Borkmann #define BPF_F_HDR_FIELD_MASK 0xfULL 448781c53bcSDaniel Borkmann 449781c53bcSDaniel Borkmann /* BPF_FUNC_l4_csum_replace flags. */ 450781c53bcSDaniel Borkmann #define BPF_F_PSEUDO_HDR (1ULL << 4) 4512f72959aSDaniel Borkmann #define BPF_F_MARK_MANGLED_0 (1ULL << 5) 452781c53bcSDaniel Borkmann 453781c53bcSDaniel Borkmann /* BPF_FUNC_clone_redirect and BPF_FUNC_redirect flags. */ 454781c53bcSDaniel Borkmann #define BPF_F_INGRESS (1ULL << 0) 455781c53bcSDaniel Borkmann 456c6c33454SDaniel Borkmann /* BPF_FUNC_skb_set_tunnel_key and BPF_FUNC_skb_get_tunnel_key flags. */ 457c6c33454SDaniel Borkmann #define BPF_F_TUNINFO_IPV6 (1ULL << 0) 458c6c33454SDaniel Borkmann 459d5a3b1f6SAlexei Starovoitov /* BPF_FUNC_get_stackid flags. */ 460d5a3b1f6SAlexei Starovoitov #define BPF_F_SKIP_FIELD_MASK 0xffULL 461d5a3b1f6SAlexei Starovoitov #define BPF_F_USER_STACK (1ULL << 8) 462d5a3b1f6SAlexei Starovoitov #define BPF_F_FAST_STACK_CMP (1ULL << 9) 463d5a3b1f6SAlexei Starovoitov #define BPF_F_REUSE_STACKID (1ULL << 10) 464d5a3b1f6SAlexei Starovoitov 4652da897e5SDaniel Borkmann /* BPF_FUNC_skb_set_tunnel_key flags. */ 4662da897e5SDaniel Borkmann #define BPF_F_ZERO_CSUM_TX (1ULL << 1) 46722080870SDaniel Borkmann #define BPF_F_DONT_FRAGMENT (1ULL << 2) 4682da897e5SDaniel Borkmann 4696816a7ffSDaniel Borkmann /* BPF_FUNC_perf_event_output and BPF_FUNC_perf_event_read flags. */ 4701e33759cSDaniel Borkmann #define BPF_F_INDEX_MASK 0xffffffffULL 4711e33759cSDaniel Borkmann #define BPF_F_CURRENT_CPU BPF_F_INDEX_MASK 472555c8a86SDaniel Borkmann /* BPF_FUNC_perf_event_output for sk_buff input context. */ 473555c8a86SDaniel Borkmann #define BPF_F_CTXLEN_MASK (0xfffffULL << 32) 4741e33759cSDaniel Borkmann 4759bac3d6dSAlexei Starovoitov /* user accessible mirror of in-kernel sk_buff. 4769bac3d6dSAlexei Starovoitov * new fields can only be added to the end of this structure 4779bac3d6dSAlexei Starovoitov */ 4789bac3d6dSAlexei Starovoitov struct __sk_buff { 4799bac3d6dSAlexei Starovoitov __u32 len; 4809bac3d6dSAlexei Starovoitov __u32 pkt_type; 4819bac3d6dSAlexei Starovoitov __u32 mark; 4829bac3d6dSAlexei Starovoitov __u32 queue_mapping; 483c2497395SAlexei Starovoitov __u32 protocol; 484c2497395SAlexei Starovoitov __u32 vlan_present; 485c2497395SAlexei Starovoitov __u32 vlan_tci; 48627cd5452SMichal Sekletar __u32 vlan_proto; 487bcad5718SDaniel Borkmann __u32 priority; 48837e82c2fSAlexei Starovoitov __u32 ingress_ifindex; 48937e82c2fSAlexei Starovoitov __u32 ifindex; 490d691f9e8SAlexei Starovoitov __u32 tc_index; 491d691f9e8SAlexei Starovoitov __u32 cb[5]; 492ba7591d8SDaniel Borkmann __u32 hash; 493045efa82SDaniel Borkmann __u32 tc_classid; 494969bf05eSAlexei Starovoitov __u32 data; 495969bf05eSAlexei Starovoitov __u32 data_end; 4969bac3d6dSAlexei Starovoitov }; 4979bac3d6dSAlexei Starovoitov 498d3aa45ceSAlexei Starovoitov struct bpf_tunnel_key { 499d3aa45ceSAlexei Starovoitov __u32 tunnel_id; 500c6c33454SDaniel Borkmann union { 501d3aa45ceSAlexei Starovoitov __u32 remote_ipv4; 502c6c33454SDaniel Borkmann __u32 remote_ipv6[4]; 503c6c33454SDaniel Borkmann }; 504c6c33454SDaniel Borkmann __u8 tunnel_tos; 505c6c33454SDaniel Borkmann __u8 tunnel_ttl; 506c0e760c9SDaniel Borkmann __u16 tunnel_ext; 5074018ab18SDaniel Borkmann __u32 tunnel_label; 508d3aa45ceSAlexei Starovoitov }; 509d3aa45ceSAlexei Starovoitov 5106a773a15SBrenden Blanco /* User return codes for XDP prog type. 5116a773a15SBrenden Blanco * A valid XDP program must return one of these defined values. All other 5126a773a15SBrenden Blanco * return codes are reserved for future use. Unknown return codes will result 5136a773a15SBrenden Blanco * in packet drop. 5146a773a15SBrenden Blanco */ 5156a773a15SBrenden Blanco enum xdp_action { 5166a773a15SBrenden Blanco XDP_ABORTED = 0, 5176a773a15SBrenden Blanco XDP_DROP, 5186a773a15SBrenden Blanco XDP_PASS, 5196ce96ca3SBrenden Blanco XDP_TX, 5206a773a15SBrenden Blanco }; 5216a773a15SBrenden Blanco 5226a773a15SBrenden Blanco /* user accessible metadata for XDP packet hook 5236a773a15SBrenden Blanco * new fields must be added to the end of this structure 5246a773a15SBrenden Blanco */ 5256a773a15SBrenden Blanco struct xdp_md { 5266a773a15SBrenden Blanco __u32 data; 5276a773a15SBrenden Blanco __u32 data_end; 5286a773a15SBrenden Blanco }; 5296a773a15SBrenden Blanco 530daedfb22SAlexei Starovoitov #endif /* _UAPI__LINUX_BPF_H__ */ 531