Blame view
net/netfilter/xt_rateest.c
3.68 KB
50c164a81 [NETFILTER]: x_ta... |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 |
/* * (C) 2007 Patrick McHardy <kaber@trash.net> * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 as * published by the Free Software Foundation. */ #include <linux/module.h> #include <linux/skbuff.h> #include <linux/gen_stats.h> #include <linux/netfilter/x_tables.h> #include <linux/netfilter/xt_rateest.h> #include <net/netfilter/xt_rateest.h> |
f7108a20d netfilter: xtable... |
15 16 |
static bool xt_rateest_mt(const struct sk_buff *skb, const struct xt_match_param *par) |
50c164a81 [NETFILTER]: x_ta... |
17 |
{ |
f7108a20d netfilter: xtable... |
18 |
const struct xt_rateest_match_info *info = par->matchinfo; |
50c164a81 [NETFILTER]: x_ta... |
19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 |
struct gnet_stats_rate_est *r; u_int32_t bps1, bps2, pps1, pps2; bool ret = true; spin_lock_bh(&info->est1->lock); r = &info->est1->rstats; if (info->flags & XT_RATEEST_MATCH_DELTA) { bps1 = info->bps1 >= r->bps ? info->bps1 - r->bps : 0; pps1 = info->pps1 >= r->pps ? info->pps1 - r->pps : 0; } else { bps1 = r->bps; pps1 = r->pps; } spin_unlock_bh(&info->est1->lock); if (info->flags & XT_RATEEST_MATCH_ABS) { bps2 = info->bps2; pps2 = info->pps2; } else { spin_lock_bh(&info->est2->lock); r = &info->est2->rstats; if (info->flags & XT_RATEEST_MATCH_DELTA) { bps2 = info->bps2 >= r->bps ? info->bps2 - r->bps : 0; pps2 = info->pps2 >= r->pps ? info->pps2 - r->pps : 0; } else { bps2 = r->bps; pps2 = r->pps; } spin_unlock_bh(&info->est2->lock); } switch (info->mode) { case XT_RATEEST_MATCH_LT: if (info->flags & XT_RATEEST_MATCH_BPS) ret &= bps1 < bps2; if (info->flags & XT_RATEEST_MATCH_PPS) ret &= pps1 < pps2; break; case XT_RATEEST_MATCH_GT: if (info->flags & XT_RATEEST_MATCH_BPS) ret &= bps1 > bps2; if (info->flags & XT_RATEEST_MATCH_PPS) ret &= pps1 > pps2; break; case XT_RATEEST_MATCH_EQ: if (info->flags & XT_RATEEST_MATCH_BPS) ret &= bps1 == bps2; if (info->flags & XT_RATEEST_MATCH_PPS) |
4d900f9df netfilter: xt_rat... |
67 |
ret &= pps1 == pps2; |
50c164a81 [NETFILTER]: x_ta... |
68 69 70 71 72 73 |
break; } ret ^= info->flags & XT_RATEEST_MATCH_INVERT ? true : false; return ret; } |
9b4fce7a3 netfilter: xtable... |
74 |
static bool xt_rateest_mt_checkentry(const struct xt_mtchk_param *par) |
50c164a81 [NETFILTER]: x_ta... |
75 |
{ |
9b4fce7a3 netfilter: xtable... |
76 |
struct xt_rateest_match_info *info = par->matchinfo; |
50c164a81 [NETFILTER]: x_ta... |
77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 |
struct xt_rateest *est1, *est2; if (hweight32(info->flags & (XT_RATEEST_MATCH_ABS | XT_RATEEST_MATCH_REL)) != 1) goto err1; if (!(info->flags & (XT_RATEEST_MATCH_BPS | XT_RATEEST_MATCH_PPS))) goto err1; switch (info->mode) { case XT_RATEEST_MATCH_EQ: case XT_RATEEST_MATCH_LT: case XT_RATEEST_MATCH_GT: break; default: goto err1; } est1 = xt_rateest_lookup(info->name1); if (!est1) goto err1; if (info->flags & XT_RATEEST_MATCH_REL) { est2 = xt_rateest_lookup(info->name2); if (!est2) goto err2; } else est2 = NULL; info->est1 = est1; info->est2 = est2; return true; err2: xt_rateest_put(est1); err1: return false; } |
6be3d8598 netfilter: xtable... |
116 |
static void xt_rateest_mt_destroy(const struct xt_mtdtor_param *par) |
50c164a81 [NETFILTER]: x_ta... |
117 |
{ |
6be3d8598 netfilter: xtable... |
118 |
struct xt_rateest_match_info *info = par->matchinfo; |
50c164a81 [NETFILTER]: x_ta... |
119 120 121 122 123 |
xt_rateest_put(info->est1); if (info->est2) xt_rateest_put(info->est2); } |
55b69e910 netfilter: implem... |
124 125 126 127 128 129 130 131 132 |
static struct xt_match xt_rateest_mt_reg __read_mostly = { .name = "rateest", .revision = 0, .family = NFPROTO_UNSPEC, .match = xt_rateest_mt, .checkentry = xt_rateest_mt_checkentry, .destroy = xt_rateest_mt_destroy, .matchsize = sizeof(struct xt_rateest_match_info), .me = THIS_MODULE, |
50c164a81 [NETFILTER]: x_ta... |
133 134 135 136 |
}; static int __init xt_rateest_mt_init(void) { |
55b69e910 netfilter: implem... |
137 |
return xt_register_match(&xt_rateest_mt_reg); |
50c164a81 [NETFILTER]: x_ta... |
138 139 140 141 |
} static void __exit xt_rateest_mt_fini(void) { |
55b69e910 netfilter: implem... |
142 |
xt_unregister_match(&xt_rateest_mt_reg); |
50c164a81 [NETFILTER]: x_ta... |
143 144 145 146 147 148 149 150 151 |
} MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>"); MODULE_LICENSE("GPL"); MODULE_DESCRIPTION("xtables rate estimator match"); MODULE_ALIAS("ipt_rateest"); MODULE_ALIAS("ip6t_rateest"); module_init(xt_rateest_mt_init); module_exit(xt_rateest_mt_fini); |