1 #include <linux/kernel.h>
2 #include <linux/netdevice.h>
3 #include <linux/rtnetlink.h>
4 #include <linux/slab.h>
6 #include "br_private.h"
8 static void __vlan_add_pvid(struct net_port_vlans *v, u16 vid)
17 static void __vlan_delete_pvid(struct net_port_vlans *v, u16 vid)
26 static void __vlan_add_flags(struct net_port_vlans *v, u16 vid, u16 flags)
28 if (flags & BRIDGE_VLAN_INFO_PVID)
29 __vlan_add_pvid(v, vid);
31 if (flags & BRIDGE_VLAN_INFO_UNTAGGED)
32 set_bit(vid, v->untagged_bitmap);
35 static int __vlan_add(struct net_port_vlans *v, u16 vid, u16 flags)
37 struct net_bridge_port *p = NULL;
38 struct net_bridge *br;
39 struct net_device *dev;
42 if (test_bit(vid, v->vlan_bitmap)) {
43 __vlan_add_flags(v, vid, flags);
57 /* Add VLAN to the device filter if it is supported.
58 * This ensures tagged traffic enters the bridge when
59 * promiscuous mode is disabled by br_manage_promisc().
61 err = vlan_vid_add(dev, br->vlan_proto, vid);
66 err = br_fdb_insert(br, p, dev->dev_addr, vid);
68 br_err(br, "failed insert local address into bridge "
69 "forwarding table\n");
73 set_bit(vid, v->vlan_bitmap);
75 __vlan_add_flags(v, vid, flags);
81 vlan_vid_del(dev, br->vlan_proto, vid);
85 static int __vlan_del(struct net_port_vlans *v, u16 vid)
87 if (!test_bit(vid, v->vlan_bitmap))
90 __vlan_delete_pvid(v, vid);
91 clear_bit(vid, v->untagged_bitmap);
94 struct net_bridge_port *p = v->parent.port;
95 vlan_vid_del(p->dev, p->br->vlan_proto, vid);
98 clear_bit(vid, v->vlan_bitmap);
100 if (bitmap_empty(v->vlan_bitmap, VLAN_N_VID)) {
102 RCU_INIT_POINTER(v->parent.port->vlan_info, NULL);
104 RCU_INIT_POINTER(v->parent.br->vlan_info, NULL);
110 static void __vlan_flush(struct net_port_vlans *v)
114 bitmap_zero(v->vlan_bitmap, VLAN_N_VID);
116 RCU_INIT_POINTER(v->parent.port->vlan_info, NULL);
118 RCU_INIT_POINTER(v->parent.br->vlan_info, NULL);
122 struct sk_buff *br_handle_vlan(struct net_bridge *br,
123 const struct net_port_vlans *pv,
128 if (!br->vlan_enabled)
131 /* Vlan filter table must be configured at this point. The
132 * only exception is the bridge is set in promisc mode and the
133 * packet is destined for the bridge device. In this case
134 * pass the packet as is.
137 if ((br->dev->flags & IFF_PROMISC) && skb->dev == br->dev) {
145 /* At this point, we know that the frame was filtered and contains
146 * a valid vlan id. If the vlan id is set in the untagged bitmap,
147 * send untagged; otherwise, send tagged.
149 br_vlan_get_tag(skb, &vid);
150 if (test_bit(vid, pv->untagged_bitmap))
157 /* Called under RCU */
158 bool br_allowed_ingress(struct net_bridge *br, struct net_port_vlans *v,
159 struct sk_buff *skb, u16 *vid)
164 /* If VLAN filtering is disabled on the bridge, all packets are
167 if (!br->vlan_enabled)
170 /* If there are no vlan in the permitted list, all packets are
176 proto = br->vlan_proto;
178 /* If vlan tx offload is disabled on bridge device and frame was
179 * sent from vlan device on the bridge device, it does not have
180 * HW accelerated vlan tag.
182 if (unlikely(!vlan_tx_tag_present(skb) &&
183 skb->protocol == proto)) {
184 skb = skb_vlan_untag(skb);
189 if (!br_vlan_get_tag(skb, vid)) {
191 if (skb->vlan_proto != proto) {
192 /* Protocol-mismatch, empty out vlan_tci for new tag */
193 skb_push(skb, ETH_HLEN);
194 skb = __vlan_put_tag(skb, skb->vlan_proto,
195 vlan_tx_tag_get(skb));
199 skb_pull(skb, ETH_HLEN);
200 skb_reset_mac_len(skb);
212 u16 pvid = br_get_pvid(v);
214 /* Frame had a tag with VID 0 or did not have a tag.
215 * See if pvid is set on this port. That tells us which
216 * vlan untagged or priority-tagged traffic belongs to.
218 if (pvid == VLAN_N_VID)
221 /* PVID is set on this port. Any untagged or priority-tagged
222 * ingress frame is considered to belong to this vlan.
226 /* Untagged Frame. */
227 __vlan_hwaccel_put_tag(skb, proto, pvid);
229 /* Priority-tagged Frame.
230 * At this point, We know that skb->vlan_tci had
231 * VLAN_TAG_PRESENT bit and its VID field was 0x000.
232 * We update only VID field and preserve PCP field.
234 skb->vlan_tci |= pvid;
239 /* Frame had a valid vlan tag. See if vlan is allowed */
240 if (test_bit(*vid, v->vlan_bitmap))
247 /* Called under RCU. */
248 bool br_allowed_egress(struct net_bridge *br,
249 const struct net_port_vlans *v,
250 const struct sk_buff *skb)
254 if (!br->vlan_enabled)
260 br_vlan_get_tag(skb, &vid);
261 if (test_bit(vid, v->vlan_bitmap))
267 /* Called under RCU */
268 bool br_should_learn(struct net_bridge_port *p, struct sk_buff *skb, u16 *vid)
270 struct net_bridge *br = p->br;
271 struct net_port_vlans *v;
273 if (!br->vlan_enabled)
276 v = rcu_dereference(p->vlan_info);
280 if (!br_vlan_get_tag(skb, vid) && skb->vlan_proto != br->vlan_proto)
284 *vid = br_get_pvid(v);
285 if (*vid == VLAN_N_VID)
291 if (test_bit(*vid, v->vlan_bitmap))
297 /* Must be protected by RTNL.
298 * Must be called with vid in range from 1 to 4094 inclusive.
300 int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags)
302 struct net_port_vlans *pv = NULL;
307 pv = rtnl_dereference(br->vlan_info);
309 return __vlan_add(pv, vid, flags);
311 /* Create port vlan infomration
313 pv = kzalloc(sizeof(*pv), GFP_KERNEL);
318 err = __vlan_add(pv, vid, flags);
322 rcu_assign_pointer(br->vlan_info, pv);
329 /* Must be protected by RTNL.
330 * Must be called with vid in range from 1 to 4094 inclusive.
332 int br_vlan_delete(struct net_bridge *br, u16 vid)
334 struct net_port_vlans *pv;
338 pv = rtnl_dereference(br->vlan_info);
342 br_fdb_find_delete_local(br, NULL, br->dev->dev_addr, vid);
348 void br_vlan_flush(struct net_bridge *br)
350 struct net_port_vlans *pv;
353 pv = rtnl_dereference(br->vlan_info);
360 bool br_vlan_find(struct net_bridge *br, u16 vid)
362 struct net_port_vlans *pv;
366 pv = rcu_dereference(br->vlan_info);
371 if (test_bit(vid, pv->vlan_bitmap))
379 /* Must be protected by RTNL. */
380 static void recalculate_group_addr(struct net_bridge *br)
382 if (br->group_addr_set)
385 spin_lock_bh(&br->lock);
386 if (!br->vlan_enabled || br->vlan_proto == htons(ETH_P_8021Q)) {
387 /* Bridge Group Address */
388 br->group_addr[5] = 0x00;
389 } else { /* vlan_enabled && ETH_P_8021AD */
390 /* Provider Bridge Group Address */
391 br->group_addr[5] = 0x08;
393 spin_unlock_bh(&br->lock);
396 /* Must be protected by RTNL. */
397 void br_recalculate_fwd_mask(struct net_bridge *br)
399 if (!br->vlan_enabled || br->vlan_proto == htons(ETH_P_8021Q))
400 br->group_fwd_mask_required = BR_GROUPFWD_DEFAULT;
401 else /* vlan_enabled && ETH_P_8021AD */
402 br->group_fwd_mask_required = BR_GROUPFWD_8021AD &
403 ~(1u << br->group_addr[5]);
406 int br_vlan_filter_toggle(struct net_bridge *br, unsigned long val)
409 return restart_syscall();
411 if (br->vlan_enabled == val)
414 br->vlan_enabled = val;
415 br_manage_promisc(br);
416 recalculate_group_addr(br);
417 br_recalculate_fwd_mask(br);
424 int br_vlan_set_proto(struct net_bridge *br, unsigned long val)
427 struct net_bridge_port *p;
428 struct net_port_vlans *pv;
429 __be16 proto, oldproto;
432 if (val != ETH_P_8021Q && val != ETH_P_8021AD)
433 return -EPROTONOSUPPORT;
436 return restart_syscall();
439 if (br->vlan_proto == proto)
442 /* Add VLANs for the new proto to the device filter. */
443 list_for_each_entry(p, &br->port_list, list) {
444 pv = rtnl_dereference(p->vlan_info);
448 for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) {
449 err = vlan_vid_add(p->dev, proto, vid);
455 oldproto = br->vlan_proto;
456 br->vlan_proto = proto;
458 recalculate_group_addr(br);
459 br_recalculate_fwd_mask(br);
461 /* Delete VLANs for the old proto from the device filter. */
462 list_for_each_entry(p, &br->port_list, list) {
463 pv = rtnl_dereference(p->vlan_info);
467 for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
468 vlan_vid_del(p->dev, oldproto, vid);
477 for_each_set_bit(vid, pv->vlan_bitmap, errvid)
478 vlan_vid_del(p->dev, proto, vid);
480 list_for_each_entry_continue_reverse(p, &br->port_list, list) {
481 pv = rtnl_dereference(p->vlan_info);
485 for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
486 vlan_vid_del(p->dev, proto, vid);
492 void br_vlan_init(struct net_bridge *br)
494 br->vlan_proto = htons(ETH_P_8021Q);
497 /* Must be protected by RTNL.
498 * Must be called with vid in range from 1 to 4094 inclusive.
500 int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags)
502 struct net_port_vlans *pv = NULL;
507 pv = rtnl_dereference(port->vlan_info);
509 return __vlan_add(pv, vid, flags);
511 /* Create port vlan infomration
513 pv = kzalloc(sizeof(*pv), GFP_KERNEL);
519 pv->port_idx = port->port_no;
520 pv->parent.port = port;
521 err = __vlan_add(pv, vid, flags);
525 rcu_assign_pointer(port->vlan_info, pv);
533 /* Must be protected by RTNL.
534 * Must be called with vid in range from 1 to 4094 inclusive.
536 int nbp_vlan_delete(struct net_bridge_port *port, u16 vid)
538 struct net_port_vlans *pv;
542 pv = rtnl_dereference(port->vlan_info);
546 br_fdb_find_delete_local(port->br, port, port->dev->dev_addr, vid);
548 return __vlan_del(pv, vid);
551 void nbp_vlan_flush(struct net_bridge_port *port)
553 struct net_port_vlans *pv;
558 pv = rtnl_dereference(port->vlan_info);
562 for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
563 vlan_vid_del(port->dev, port->br->vlan_proto, vid);
568 bool nbp_vlan_find(struct net_bridge_port *port, u16 vid)
570 struct net_port_vlans *pv;
574 pv = rcu_dereference(port->vlan_info);
579 if (test_bit(vid, pv->vlan_bitmap))