filter-mirror.c 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498
  1. /*
  2. * Copyright (c) 2016 HUAWEI TECHNOLOGIES CO., LTD.
  3. * Copyright (c) 2016 FUJITSU LIMITED
  4. * Copyright (c) 2016 Intel Corporation
  5. *
  6. * Author: Zhang Chen <zhangchen.fnst@cn.fujitsu.com>
  7. *
  8. * This work is licensed under the terms of the GNU GPL, version 2 or
  9. * later. See the COPYING file in the top-level directory.
  10. */
  11. #include "qemu/osdep.h"
  12. #include "net/filter.h"
  13. #include "net/net.h"
  14. #include "qapi/error.h"
  15. #include "qom/object.h"
  16. #include "qemu/main-loop.h"
  17. #include "qemu/error-report.h"
  18. #include "trace.h"
  19. #include "chardev/char-fe.h"
  20. #include "qemu/iov.h"
  21. #include "qemu/sockets.h"
  22. #include "block/aio-wait.h"
  23. #define TYPE_FILTER_MIRROR "filter-mirror"
  24. typedef struct MirrorState MirrorState;
  25. DECLARE_INSTANCE_CHECKER(MirrorState, FILTER_MIRROR,
  26. TYPE_FILTER_MIRROR)
  27. #define TYPE_FILTER_REDIRECTOR "filter-redirector"
  28. DECLARE_INSTANCE_CHECKER(MirrorState, FILTER_REDIRECTOR,
  29. TYPE_FILTER_REDIRECTOR)
  30. #define REDIRECTOR_MAX_LEN NET_BUFSIZE
  31. struct MirrorState {
  32. NetFilterState parent_obj;
  33. char *indev;
  34. char *outdev;
  35. CharBackend chr_in;
  36. CharBackend chr_out;
  37. SocketReadState rs;
  38. bool vnet_hdr;
  39. };
  40. typedef struct FilterSendCo {
  41. MirrorState *s;
  42. char *buf;
  43. ssize_t size;
  44. bool done;
  45. int ret;
  46. } FilterSendCo;
  47. static int _filter_send(MirrorState *s,
  48. char *buf,
  49. ssize_t size)
  50. {
  51. NetFilterState *nf = NETFILTER(s);
  52. int ret = 0;
  53. uint32_t len = 0;
  54. len = htonl(size);
  55. ret = qemu_chr_fe_write_all(&s->chr_out, (uint8_t *)&len, sizeof(len));
  56. if (ret != sizeof(len)) {
  57. goto err;
  58. }
  59. if (s->vnet_hdr) {
  60. /*
  61. * If vnet_hdr = on, we send vnet header len to make other
  62. * module(like colo-compare) know how to parse net
  63. * packet correctly.
  64. */
  65. ssize_t vnet_hdr_len;
  66. vnet_hdr_len = nf->netdev->vnet_hdr_len;
  67. len = htonl(vnet_hdr_len);
  68. ret = qemu_chr_fe_write_all(&s->chr_out, (uint8_t *)&len, sizeof(len));
  69. if (ret != sizeof(len)) {
  70. goto err;
  71. }
  72. }
  73. ret = qemu_chr_fe_write_all(&s->chr_out, (uint8_t *)buf, size);
  74. if (ret != size) {
  75. goto err;
  76. }
  77. return size;
  78. err:
  79. return ret < 0 ? ret : -EIO;
  80. }
  81. static void coroutine_fn filter_send_co(void *opaque)
  82. {
  83. FilterSendCo *data = opaque;
  84. data->ret = _filter_send(data->s, data->buf, data->size);
  85. data->done = true;
  86. g_free(data->buf);
  87. aio_wait_kick();
  88. }
  89. static int filter_send(MirrorState *s,
  90. const struct iovec *iov,
  91. int iovcnt)
  92. {
  93. ssize_t size = iov_size(iov, iovcnt);
  94. char *buf = NULL;
  95. if (!size) {
  96. return 0;
  97. }
  98. buf = g_malloc(size);
  99. iov_to_buf(iov, iovcnt, 0, buf, size);
  100. FilterSendCo data = {
  101. .s = s,
  102. .size = size,
  103. .buf = buf,
  104. .ret = 0,
  105. };
  106. Coroutine *co = qemu_coroutine_create(filter_send_co, &data);
  107. qemu_coroutine_enter(co);
  108. while (!data.done) {
  109. aio_poll(qemu_get_aio_context(), true);
  110. }
  111. return data.ret;
  112. }
  113. static void redirector_to_filter(NetFilterState *nf,
  114. const uint8_t *buf,
  115. int len)
  116. {
  117. struct iovec iov = {
  118. .iov_base = (void *)buf,
  119. .iov_len = len,
  120. };
  121. if (nf->direction == NET_FILTER_DIRECTION_ALL ||
  122. nf->direction == NET_FILTER_DIRECTION_TX) {
  123. qemu_netfilter_pass_to_next(nf->netdev, 0, &iov, 1, nf);
  124. }
  125. if (nf->direction == NET_FILTER_DIRECTION_ALL ||
  126. nf->direction == NET_FILTER_DIRECTION_RX) {
  127. qemu_netfilter_pass_to_next(nf->netdev->peer, 0, &iov, 1, nf);
  128. }
  129. }
  130. static int redirector_chr_can_read(void *opaque)
  131. {
  132. return REDIRECTOR_MAX_LEN;
  133. }
  134. static void redirector_chr_read(void *opaque, const uint8_t *buf, int size)
  135. {
  136. NetFilterState *nf = opaque;
  137. MirrorState *s = FILTER_REDIRECTOR(nf);
  138. int ret;
  139. ret = net_fill_rstate(&s->rs, buf, size);
  140. if (ret == -1) {
  141. qemu_chr_fe_set_handlers(&s->chr_in, NULL, NULL, NULL,
  142. NULL, NULL, NULL, true);
  143. }
  144. }
  145. static void redirector_chr_event(void *opaque, QEMUChrEvent event)
  146. {
  147. NetFilterState *nf = opaque;
  148. MirrorState *s = FILTER_REDIRECTOR(nf);
  149. switch (event) {
  150. case CHR_EVENT_CLOSED:
  151. qemu_chr_fe_set_handlers(&s->chr_in, NULL, NULL, NULL,
  152. NULL, NULL, NULL, true);
  153. break;
  154. default:
  155. break;
  156. }
  157. }
  158. static ssize_t filter_mirror_receive_iov(NetFilterState *nf,
  159. NetClientState *sender,
  160. unsigned flags,
  161. const struct iovec *iov,
  162. int iovcnt,
  163. NetPacketSent *sent_cb)
  164. {
  165. MirrorState *s = FILTER_MIRROR(nf);
  166. int ret;
  167. ret = filter_send(s, iov, iovcnt);
  168. if (ret < 0) {
  169. error_report("filter mirror send failed(%s)", strerror(-ret));
  170. }
  171. /*
  172. * we don't hope this error interrupt the normal
  173. * path of net packet, so we always return zero.
  174. */
  175. return 0;
  176. }
  177. static ssize_t filter_redirector_receive_iov(NetFilterState *nf,
  178. NetClientState *sender,
  179. unsigned flags,
  180. const struct iovec *iov,
  181. int iovcnt,
  182. NetPacketSent *sent_cb)
  183. {
  184. MirrorState *s = FILTER_REDIRECTOR(nf);
  185. int ret;
  186. if (qemu_chr_fe_backend_connected(&s->chr_out)) {
  187. ret = filter_send(s, iov, iovcnt);
  188. if (ret < 0) {
  189. error_report("filter redirector send failed(%s)", strerror(-ret));
  190. }
  191. return ret;
  192. } else {
  193. return 0;
  194. }
  195. }
  196. static void filter_mirror_cleanup(NetFilterState *nf)
  197. {
  198. MirrorState *s = FILTER_MIRROR(nf);
  199. qemu_chr_fe_deinit(&s->chr_out, false);
  200. }
  201. static void filter_redirector_cleanup(NetFilterState *nf)
  202. {
  203. MirrorState *s = FILTER_REDIRECTOR(nf);
  204. qemu_chr_fe_deinit(&s->chr_in, false);
  205. qemu_chr_fe_deinit(&s->chr_out, false);
  206. }
  207. static void filter_mirror_setup(NetFilterState *nf, Error **errp)
  208. {
  209. MirrorState *s = FILTER_MIRROR(nf);
  210. Chardev *chr;
  211. if (s->outdev == NULL) {
  212. error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND, "filter-mirror parameter"\
  213. " 'outdev' cannot be empty");
  214. return;
  215. }
  216. chr = qemu_chr_find(s->outdev);
  217. if (chr == NULL) {
  218. error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND,
  219. "Device '%s' not found", s->outdev);
  220. return;
  221. }
  222. qemu_chr_fe_init(&s->chr_out, chr, errp);
  223. }
  224. static void redirector_rs_finalize(SocketReadState *rs)
  225. {
  226. MirrorState *s = container_of(rs, MirrorState, rs);
  227. NetFilterState *nf = NETFILTER(s);
  228. redirector_to_filter(nf, rs->buf, rs->packet_len);
  229. }
  230. static void filter_redirector_setup(NetFilterState *nf, Error **errp)
  231. {
  232. MirrorState *s = FILTER_REDIRECTOR(nf);
  233. Chardev *chr;
  234. if (!s->indev && !s->outdev) {
  235. error_setg(errp, "filter redirector needs 'indev' or "
  236. "'outdev' at least one property set");
  237. return;
  238. } else if (s->indev && s->outdev) {
  239. if (!strcmp(s->indev, s->outdev)) {
  240. error_setg(errp, "'indev' and 'outdev' could not be same "
  241. "for filter redirector");
  242. return;
  243. }
  244. }
  245. net_socket_rs_init(&s->rs, redirector_rs_finalize, s->vnet_hdr);
  246. if (s->indev) {
  247. chr = qemu_chr_find(s->indev);
  248. if (chr == NULL) {
  249. error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND,
  250. "IN Device '%s' not found", s->indev);
  251. return;
  252. }
  253. if (!qemu_chr_fe_init(&s->chr_in, chr, errp)) {
  254. return;
  255. }
  256. qemu_chr_fe_set_handlers(&s->chr_in, redirector_chr_can_read,
  257. redirector_chr_read, redirector_chr_event,
  258. NULL, nf, NULL, true);
  259. }
  260. if (s->outdev) {
  261. chr = qemu_chr_find(s->outdev);
  262. if (chr == NULL) {
  263. error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND,
  264. "OUT Device '%s' not found", s->outdev);
  265. return;
  266. }
  267. if (!qemu_chr_fe_init(&s->chr_out, chr, errp)) {
  268. return;
  269. }
  270. }
  271. }
  272. static char *filter_redirector_get_indev(Object *obj, Error **errp)
  273. {
  274. MirrorState *s = FILTER_REDIRECTOR(obj);
  275. return g_strdup(s->indev);
  276. }
  277. static void filter_redirector_set_indev(Object *obj,
  278. const char *value,
  279. Error **errp)
  280. {
  281. MirrorState *s = FILTER_REDIRECTOR(obj);
  282. g_free(s->indev);
  283. s->indev = g_strdup(value);
  284. }
  285. static char *filter_mirror_get_outdev(Object *obj, Error **errp)
  286. {
  287. MirrorState *s = FILTER_MIRROR(obj);
  288. return g_strdup(s->outdev);
  289. }
  290. static void filter_mirror_set_outdev(Object *obj,
  291. const char *value,
  292. Error **errp)
  293. {
  294. MirrorState *s = FILTER_MIRROR(obj);
  295. g_free(s->outdev);
  296. s->outdev = g_strdup(value);
  297. if (!s->outdev) {
  298. error_setg(errp, "filter mirror needs 'outdev' "
  299. "property set");
  300. return;
  301. }
  302. }
  303. static bool filter_mirror_get_vnet_hdr(Object *obj, Error **errp)
  304. {
  305. MirrorState *s = FILTER_MIRROR(obj);
  306. return s->vnet_hdr;
  307. }
  308. static void filter_mirror_set_vnet_hdr(Object *obj, bool value, Error **errp)
  309. {
  310. MirrorState *s = FILTER_MIRROR(obj);
  311. s->vnet_hdr = value;
  312. }
  313. static char *filter_redirector_get_outdev(Object *obj, Error **errp)
  314. {
  315. MirrorState *s = FILTER_REDIRECTOR(obj);
  316. return g_strdup(s->outdev);
  317. }
  318. static void filter_redirector_set_outdev(Object *obj,
  319. const char *value,
  320. Error **errp)
  321. {
  322. MirrorState *s = FILTER_REDIRECTOR(obj);
  323. g_free(s->outdev);
  324. s->outdev = g_strdup(value);
  325. }
  326. static bool filter_redirector_get_vnet_hdr(Object *obj, Error **errp)
  327. {
  328. MirrorState *s = FILTER_REDIRECTOR(obj);
  329. return s->vnet_hdr;
  330. }
  331. static void filter_redirector_set_vnet_hdr(Object *obj,
  332. bool value,
  333. Error **errp)
  334. {
  335. MirrorState *s = FILTER_REDIRECTOR(obj);
  336. s->vnet_hdr = value;
  337. }
  338. static void filter_mirror_class_init(ObjectClass *oc, void *data)
  339. {
  340. NetFilterClass *nfc = NETFILTER_CLASS(oc);
  341. object_class_property_add_str(oc, "outdev", filter_mirror_get_outdev,
  342. filter_mirror_set_outdev);
  343. object_class_property_add_bool(oc, "vnet_hdr_support",
  344. filter_mirror_get_vnet_hdr,
  345. filter_mirror_set_vnet_hdr);
  346. nfc->setup = filter_mirror_setup;
  347. nfc->cleanup = filter_mirror_cleanup;
  348. nfc->receive_iov = filter_mirror_receive_iov;
  349. }
  350. static void filter_redirector_class_init(ObjectClass *oc, void *data)
  351. {
  352. NetFilterClass *nfc = NETFILTER_CLASS(oc);
  353. object_class_property_add_str(oc, "indev", filter_redirector_get_indev,
  354. filter_redirector_set_indev);
  355. object_class_property_add_str(oc, "outdev", filter_redirector_get_outdev,
  356. filter_redirector_set_outdev);
  357. object_class_property_add_bool(oc, "vnet_hdr_support",
  358. filter_redirector_get_vnet_hdr,
  359. filter_redirector_set_vnet_hdr);
  360. nfc->setup = filter_redirector_setup;
  361. nfc->cleanup = filter_redirector_cleanup;
  362. nfc->receive_iov = filter_redirector_receive_iov;
  363. }
  364. static void filter_mirror_init(Object *obj)
  365. {
  366. MirrorState *s = FILTER_MIRROR(obj);
  367. s->vnet_hdr = false;
  368. }
  369. static void filter_redirector_init(Object *obj)
  370. {
  371. MirrorState *s = FILTER_REDIRECTOR(obj);
  372. s->vnet_hdr = false;
  373. }
  374. static void filter_mirror_fini(Object *obj)
  375. {
  376. MirrorState *s = FILTER_MIRROR(obj);
  377. g_free(s->outdev);
  378. }
  379. static void filter_redirector_fini(Object *obj)
  380. {
  381. MirrorState *s = FILTER_REDIRECTOR(obj);
  382. g_free(s->indev);
  383. g_free(s->outdev);
  384. }
  385. static const TypeInfo filter_redirector_info = {
  386. .name = TYPE_FILTER_REDIRECTOR,
  387. .parent = TYPE_NETFILTER,
  388. .class_init = filter_redirector_class_init,
  389. .instance_init = filter_redirector_init,
  390. .instance_finalize = filter_redirector_fini,
  391. .instance_size = sizeof(MirrorState),
  392. };
  393. static const TypeInfo filter_mirror_info = {
  394. .name = TYPE_FILTER_MIRROR,
  395. .parent = TYPE_NETFILTER,
  396. .class_init = filter_mirror_class_init,
  397. .instance_init = filter_mirror_init,
  398. .instance_finalize = filter_mirror_fini,
  399. .instance_size = sizeof(MirrorState),
  400. };
  401. static void register_types(void)
  402. {
  403. type_register_static(&filter_mirror_info);
  404. type_register_static(&filter_redirector_info);
  405. }
  406. type_init(register_types);