filter-mirror.c 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457
  1. /*
  2. * Copyright (c) 2016 HUAWEI TECHNOLOGIES CO., LTD.
  3. * Copyright (c) 2016 FUJITSU LIMITED
  4. * Copyright (c) 2016 Intel Corporation
  5. *
  6. * Author: Zhang Chen <zhangchen.fnst@cn.fujitsu.com>
  7. *
  8. * This work is licensed under the terms of the GNU GPL, version 2 or
  9. * later. See the COPYING file in the top-level directory.
  10. */
  11. #include "qemu/osdep.h"
  12. #include "net/filter.h"
  13. #include "net/net.h"
  14. #include "qapi/error.h"
  15. #include "qom/object.h"
  16. #include "qemu/main-loop.h"
  17. #include "qemu/error-report.h"
  18. #include "trace.h"
  19. #include "chardev/char-fe.h"
  20. #include "qemu/iov.h"
  21. #include "qemu/sockets.h"
  22. #define FILTER_MIRROR(obj) \
  23. OBJECT_CHECK(MirrorState, (obj), TYPE_FILTER_MIRROR)
  24. #define FILTER_REDIRECTOR(obj) \
  25. OBJECT_CHECK(MirrorState, (obj), TYPE_FILTER_REDIRECTOR)
  26. #define TYPE_FILTER_MIRROR "filter-mirror"
  27. #define TYPE_FILTER_REDIRECTOR "filter-redirector"
  28. #define REDIRECTOR_MAX_LEN NET_BUFSIZE
  29. typedef struct MirrorState {
  30. NetFilterState parent_obj;
  31. char *indev;
  32. char *outdev;
  33. CharBackend chr_in;
  34. CharBackend chr_out;
  35. SocketReadState rs;
  36. bool vnet_hdr;
  37. } MirrorState;
  38. static int filter_send(MirrorState *s,
  39. const struct iovec *iov,
  40. int iovcnt)
  41. {
  42. NetFilterState *nf = NETFILTER(s);
  43. int ret = 0;
  44. ssize_t size = 0;
  45. uint32_t len = 0;
  46. char *buf;
  47. size = iov_size(iov, iovcnt);
  48. if (!size) {
  49. return 0;
  50. }
  51. len = htonl(size);
  52. ret = qemu_chr_fe_write_all(&s->chr_out, (uint8_t *)&len, sizeof(len));
  53. if (ret != sizeof(len)) {
  54. goto err;
  55. }
  56. if (s->vnet_hdr) {
  57. /*
  58. * If vnet_hdr = on, we send vnet header len to make other
  59. * module(like colo-compare) know how to parse net
  60. * packet correctly.
  61. */
  62. ssize_t vnet_hdr_len;
  63. vnet_hdr_len = nf->netdev->vnet_hdr_len;
  64. len = htonl(vnet_hdr_len);
  65. ret = qemu_chr_fe_write_all(&s->chr_out, (uint8_t *)&len, sizeof(len));
  66. if (ret != sizeof(len)) {
  67. goto err;
  68. }
  69. }
  70. buf = g_malloc(size);
  71. iov_to_buf(iov, iovcnt, 0, buf, size);
  72. ret = qemu_chr_fe_write_all(&s->chr_out, (uint8_t *)buf, size);
  73. g_free(buf);
  74. if (ret != size) {
  75. goto err;
  76. }
  77. return 0;
  78. err:
  79. return ret < 0 ? ret : -EIO;
  80. }
  81. static void redirector_to_filter(NetFilterState *nf,
  82. const uint8_t *buf,
  83. int len)
  84. {
  85. struct iovec iov = {
  86. .iov_base = (void *)buf,
  87. .iov_len = len,
  88. };
  89. if (nf->direction == NET_FILTER_DIRECTION_ALL ||
  90. nf->direction == NET_FILTER_DIRECTION_TX) {
  91. qemu_netfilter_pass_to_next(nf->netdev, 0, &iov, 1, nf);
  92. }
  93. if (nf->direction == NET_FILTER_DIRECTION_ALL ||
  94. nf->direction == NET_FILTER_DIRECTION_RX) {
  95. qemu_netfilter_pass_to_next(nf->netdev->peer, 0, &iov, 1, nf);
  96. }
  97. }
  98. static int redirector_chr_can_read(void *opaque)
  99. {
  100. return REDIRECTOR_MAX_LEN;
  101. }
  102. static void redirector_chr_read(void *opaque, const uint8_t *buf, int size)
  103. {
  104. NetFilterState *nf = opaque;
  105. MirrorState *s = FILTER_REDIRECTOR(nf);
  106. int ret;
  107. ret = net_fill_rstate(&s->rs, buf, size);
  108. if (ret == -1) {
  109. qemu_chr_fe_set_handlers(&s->chr_in, NULL, NULL, NULL,
  110. NULL, NULL, NULL, true);
  111. }
  112. }
  113. static void redirector_chr_event(void *opaque, QEMUChrEvent event)
  114. {
  115. NetFilterState *nf = opaque;
  116. MirrorState *s = FILTER_REDIRECTOR(nf);
  117. switch (event) {
  118. case CHR_EVENT_CLOSED:
  119. qemu_chr_fe_set_handlers(&s->chr_in, NULL, NULL, NULL,
  120. NULL, NULL, NULL, true);
  121. break;
  122. default:
  123. break;
  124. }
  125. }
  126. static ssize_t filter_mirror_receive_iov(NetFilterState *nf,
  127. NetClientState *sender,
  128. unsigned flags,
  129. const struct iovec *iov,
  130. int iovcnt,
  131. NetPacketSent *sent_cb)
  132. {
  133. MirrorState *s = FILTER_MIRROR(nf);
  134. int ret;
  135. ret = filter_send(s, iov, iovcnt);
  136. if (ret) {
  137. error_report("filter mirror send failed(%s)", strerror(-ret));
  138. }
  139. /*
  140. * we don't hope this error interrupt the normal
  141. * path of net packet, so we always return zero.
  142. */
  143. return 0;
  144. }
  145. static ssize_t filter_redirector_receive_iov(NetFilterState *nf,
  146. NetClientState *sender,
  147. unsigned flags,
  148. const struct iovec *iov,
  149. int iovcnt,
  150. NetPacketSent *sent_cb)
  151. {
  152. MirrorState *s = FILTER_REDIRECTOR(nf);
  153. int ret;
  154. if (qemu_chr_fe_backend_connected(&s->chr_out)) {
  155. ret = filter_send(s, iov, iovcnt);
  156. if (ret) {
  157. error_report("filter redirector send failed(%s)", strerror(-ret));
  158. }
  159. return iov_size(iov, iovcnt);
  160. } else {
  161. return 0;
  162. }
  163. }
  164. static void filter_mirror_cleanup(NetFilterState *nf)
  165. {
  166. MirrorState *s = FILTER_MIRROR(nf);
  167. qemu_chr_fe_deinit(&s->chr_out, false);
  168. }
  169. static void filter_redirector_cleanup(NetFilterState *nf)
  170. {
  171. MirrorState *s = FILTER_REDIRECTOR(nf);
  172. qemu_chr_fe_deinit(&s->chr_in, false);
  173. qemu_chr_fe_deinit(&s->chr_out, false);
  174. }
  175. static void filter_mirror_setup(NetFilterState *nf, Error **errp)
  176. {
  177. MirrorState *s = FILTER_MIRROR(nf);
  178. Chardev *chr;
  179. if (s->outdev == NULL) {
  180. error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND, "filter-mirror parameter"\
  181. " 'outdev' cannot be empty");
  182. return;
  183. }
  184. chr = qemu_chr_find(s->outdev);
  185. if (chr == NULL) {
  186. error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND,
  187. "Device '%s' not found", s->outdev);
  188. return;
  189. }
  190. qemu_chr_fe_init(&s->chr_out, chr, errp);
  191. }
  192. static void redirector_rs_finalize(SocketReadState *rs)
  193. {
  194. MirrorState *s = container_of(rs, MirrorState, rs);
  195. NetFilterState *nf = NETFILTER(s);
  196. redirector_to_filter(nf, rs->buf, rs->packet_len);
  197. }
  198. static void filter_redirector_setup(NetFilterState *nf, Error **errp)
  199. {
  200. MirrorState *s = FILTER_REDIRECTOR(nf);
  201. Chardev *chr;
  202. if (!s->indev && !s->outdev) {
  203. error_setg(errp, "filter redirector needs 'indev' or "
  204. "'outdev' at least one property set");
  205. return;
  206. } else if (s->indev && s->outdev) {
  207. if (!strcmp(s->indev, s->outdev)) {
  208. error_setg(errp, "'indev' and 'outdev' could not be same "
  209. "for filter redirector");
  210. return;
  211. }
  212. }
  213. net_socket_rs_init(&s->rs, redirector_rs_finalize, s->vnet_hdr);
  214. if (s->indev) {
  215. chr = qemu_chr_find(s->indev);
  216. if (chr == NULL) {
  217. error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND,
  218. "IN Device '%s' not found", s->indev);
  219. return;
  220. }
  221. if (!qemu_chr_fe_init(&s->chr_in, chr, errp)) {
  222. return;
  223. }
  224. qemu_chr_fe_set_handlers(&s->chr_in, redirector_chr_can_read,
  225. redirector_chr_read, redirector_chr_event,
  226. NULL, nf, NULL, true);
  227. }
  228. if (s->outdev) {
  229. chr = qemu_chr_find(s->outdev);
  230. if (chr == NULL) {
  231. error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND,
  232. "OUT Device '%s' not found", s->outdev);
  233. return;
  234. }
  235. if (!qemu_chr_fe_init(&s->chr_out, chr, errp)) {
  236. return;
  237. }
  238. }
  239. }
  240. static void filter_mirror_class_init(ObjectClass *oc, void *data)
  241. {
  242. NetFilterClass *nfc = NETFILTER_CLASS(oc);
  243. nfc->setup = filter_mirror_setup;
  244. nfc->cleanup = filter_mirror_cleanup;
  245. nfc->receive_iov = filter_mirror_receive_iov;
  246. }
  247. static void filter_redirector_class_init(ObjectClass *oc, void *data)
  248. {
  249. NetFilterClass *nfc = NETFILTER_CLASS(oc);
  250. nfc->setup = filter_redirector_setup;
  251. nfc->cleanup = filter_redirector_cleanup;
  252. nfc->receive_iov = filter_redirector_receive_iov;
  253. }
  254. static char *filter_redirector_get_indev(Object *obj, Error **errp)
  255. {
  256. MirrorState *s = FILTER_REDIRECTOR(obj);
  257. return g_strdup(s->indev);
  258. }
  259. static void filter_redirector_set_indev(Object *obj,
  260. const char *value,
  261. Error **errp)
  262. {
  263. MirrorState *s = FILTER_REDIRECTOR(obj);
  264. g_free(s->indev);
  265. s->indev = g_strdup(value);
  266. }
  267. static char *filter_mirror_get_outdev(Object *obj, Error **errp)
  268. {
  269. MirrorState *s = FILTER_MIRROR(obj);
  270. return g_strdup(s->outdev);
  271. }
  272. static void filter_mirror_set_outdev(Object *obj,
  273. const char *value,
  274. Error **errp)
  275. {
  276. MirrorState *s = FILTER_MIRROR(obj);
  277. g_free(s->outdev);
  278. s->outdev = g_strdup(value);
  279. if (!s->outdev) {
  280. error_setg(errp, "filter mirror needs 'outdev' "
  281. "property set");
  282. return;
  283. }
  284. }
  285. static bool filter_mirror_get_vnet_hdr(Object *obj, Error **errp)
  286. {
  287. MirrorState *s = FILTER_MIRROR(obj);
  288. return s->vnet_hdr;
  289. }
  290. static void filter_mirror_set_vnet_hdr(Object *obj, bool value, Error **errp)
  291. {
  292. MirrorState *s = FILTER_MIRROR(obj);
  293. s->vnet_hdr = value;
  294. }
  295. static char *filter_redirector_get_outdev(Object *obj, Error **errp)
  296. {
  297. MirrorState *s = FILTER_REDIRECTOR(obj);
  298. return g_strdup(s->outdev);
  299. }
  300. static void filter_redirector_set_outdev(Object *obj,
  301. const char *value,
  302. Error **errp)
  303. {
  304. MirrorState *s = FILTER_REDIRECTOR(obj);
  305. g_free(s->outdev);
  306. s->outdev = g_strdup(value);
  307. }
  308. static bool filter_redirector_get_vnet_hdr(Object *obj, Error **errp)
  309. {
  310. MirrorState *s = FILTER_REDIRECTOR(obj);
  311. return s->vnet_hdr;
  312. }
  313. static void filter_redirector_set_vnet_hdr(Object *obj,
  314. bool value,
  315. Error **errp)
  316. {
  317. MirrorState *s = FILTER_REDIRECTOR(obj);
  318. s->vnet_hdr = value;
  319. }
  320. static void filter_mirror_init(Object *obj)
  321. {
  322. MirrorState *s = FILTER_MIRROR(obj);
  323. object_property_add_str(obj, "outdev", filter_mirror_get_outdev,
  324. filter_mirror_set_outdev);
  325. s->vnet_hdr = false;
  326. object_property_add_bool(obj, "vnet_hdr_support",
  327. filter_mirror_get_vnet_hdr,
  328. filter_mirror_set_vnet_hdr);
  329. }
  330. static void filter_redirector_init(Object *obj)
  331. {
  332. MirrorState *s = FILTER_REDIRECTOR(obj);
  333. object_property_add_str(obj, "indev", filter_redirector_get_indev,
  334. filter_redirector_set_indev);
  335. object_property_add_str(obj, "outdev", filter_redirector_get_outdev,
  336. filter_redirector_set_outdev);
  337. s->vnet_hdr = false;
  338. object_property_add_bool(obj, "vnet_hdr_support",
  339. filter_redirector_get_vnet_hdr,
  340. filter_redirector_set_vnet_hdr);
  341. }
  342. static void filter_mirror_fini(Object *obj)
  343. {
  344. MirrorState *s = FILTER_MIRROR(obj);
  345. g_free(s->outdev);
  346. }
  347. static void filter_redirector_fini(Object *obj)
  348. {
  349. MirrorState *s = FILTER_REDIRECTOR(obj);
  350. g_free(s->indev);
  351. g_free(s->outdev);
  352. }
  353. static const TypeInfo filter_redirector_info = {
  354. .name = TYPE_FILTER_REDIRECTOR,
  355. .parent = TYPE_NETFILTER,
  356. .class_init = filter_redirector_class_init,
  357. .instance_init = filter_redirector_init,
  358. .instance_finalize = filter_redirector_fini,
  359. .instance_size = sizeof(MirrorState),
  360. };
  361. static const TypeInfo filter_mirror_info = {
  362. .name = TYPE_FILTER_MIRROR,
  363. .parent = TYPE_NETFILTER,
  364. .class_init = filter_mirror_class_init,
  365. .instance_init = filter_mirror_init,
  366. .instance_finalize = filter_mirror_fini,
  367. .instance_size = sizeof(MirrorState),
  368. };
  369. static void register_types(void)
  370. {
  371. type_register_static(&filter_mirror_info);
  372. type_register_static(&filter_redirector_info);
  373. }
  374. type_init(register_types);