1 // SPDX-License-Identifier: GPL-2.0-or-later
3 * Bridge netlink control interface
6 * Stephen Hemminger <shemminger@osdl.org>
9 #include <linux/kernel.h>
10 #include <linux/slab.h>
11 #include <linux/etherdevice.h>
12 #include <net/rtnetlink.h>
13 #include <net/net_namespace.h>
15 #include <uapi/linux/if_bridge.h>
17 #include "br_private.h"
18 #include "br_private_stp.h"
19 #include "br_private_tunnel.h"
21 static int __get_num_vlan_infos(struct net_bridge_vlan_group
*vg
,
24 struct net_bridge_vlan
*v
;
25 u16 vid_range_start
= 0, vid_range_end
= 0, vid_range_flags
= 0;
29 if (!(filter_mask
& RTEXT_FILTER_BRVLAN_COMPRESSED
))
32 pvid
= br_get_pvid(vg
);
33 /* Count number of vlan infos */
34 list_for_each_entry_rcu(v
, &vg
->vlan_list
, vlist
) {
36 /* only a context, bridge vlan not activated */
37 if (!br_vlan_should_use(v
))
40 flags
|= BRIDGE_VLAN_INFO_PVID
;
42 if (v
->flags
& BRIDGE_VLAN_INFO_UNTAGGED
)
43 flags
|= BRIDGE_VLAN_INFO_UNTAGGED
;
45 if (vid_range_start
== 0) {
47 } else if ((v
->vid
- vid_range_end
) == 1 &&
48 flags
== vid_range_flags
) {
49 vid_range_end
= v
->vid
;
52 if ((vid_range_end
- vid_range_start
) > 0)
58 vid_range_start
= v
->vid
;
59 vid_range_end
= v
->vid
;
60 vid_range_flags
= flags
;
63 if (vid_range_start
!= 0) {
64 if ((vid_range_end
- vid_range_start
) > 0)
73 static int br_get_num_vlan_infos(struct net_bridge_vlan_group
*vg
,
81 if (filter_mask
& RTEXT_FILTER_BRVLAN
)
85 num_vlans
= __get_num_vlan_infos(vg
, filter_mask
);
91 static size_t br_get_link_af_size_filtered(const struct net_device
*dev
,
94 struct net_bridge_vlan_group
*vg
= NULL
;
95 struct net_bridge_port
*p
= NULL
;
96 struct net_bridge
*br
;
101 if (netif_is_bridge_port(dev
)) {
102 p
= br_port_get_rcu(dev
);
103 vg
= nbp_vlan_group_rcu(p
);
104 } else if (dev
->priv_flags
& IFF_EBRIDGE
) {
105 br
= netdev_priv(dev
);
106 vg
= br_vlan_group_rcu(br
);
108 num_vlan_infos
= br_get_num_vlan_infos(vg
, filter_mask
);
111 if (p
&& (p
->flags
& BR_VLAN_TUNNEL
))
112 vinfo_sz
+= br_get_vlan_tunnel_info_size(vg
);
114 /* Each VLAN is returned in bridge_vlan_info along with flags */
115 vinfo_sz
+= num_vlan_infos
* nla_total_size(sizeof(struct bridge_vlan_info
));
120 static inline size_t br_port_info_size(void)
122 return nla_total_size(1) /* IFLA_BRPORT_STATE */
123 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */
124 + nla_total_size(4) /* IFLA_BRPORT_COST */
125 + nla_total_size(1) /* IFLA_BRPORT_MODE */
126 + nla_total_size(1) /* IFLA_BRPORT_GUARD */
127 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */
128 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */
129 + nla_total_size(1) /* IFLA_BRPORT_MCAST_TO_UCAST */
130 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */
131 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */
132 + nla_total_size(1) /* IFLA_BRPORT_MCAST_FLOOD */
133 + nla_total_size(1) /* IFLA_BRPORT_BCAST_FLOOD */
134 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP */
135 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP_WIFI */
136 + nla_total_size(1) /* IFLA_BRPORT_VLAN_TUNNEL */
137 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_SUPPRESS */
138 + nla_total_size(1) /* IFLA_BRPORT_ISOLATED */
139 + nla_total_size(sizeof(struct ifla_bridge_id
)) /* IFLA_BRPORT_ROOT_ID */
140 + nla_total_size(sizeof(struct ifla_bridge_id
)) /* IFLA_BRPORT_BRIDGE_ID */
141 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_DESIGNATED_PORT */
142 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_DESIGNATED_COST */
143 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_ID */
144 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_NO */
145 + nla_total_size(sizeof(u8
)) /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
146 + nla_total_size(sizeof(u8
)) /* IFLA_BRPORT_CONFIG_PENDING */
147 + nla_total_size_64bit(sizeof(u64
)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
148 + nla_total_size_64bit(sizeof(u64
)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
149 + nla_total_size_64bit(sizeof(u64
)) /* IFLA_BRPORT_HOLD_TIMER */
150 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
151 + nla_total_size(sizeof(u8
)) /* IFLA_BRPORT_MULTICAST_ROUTER */
153 + nla_total_size(sizeof(u16
)) /* IFLA_BRPORT_GROUP_FWD_MASK */
157 static inline size_t br_nlmsg_size(struct net_device
*dev
, u32 filter_mask
)
159 return NLMSG_ALIGN(sizeof(struct ifinfomsg
))
160 + nla_total_size(IFNAMSIZ
) /* IFLA_IFNAME */
161 + nla_total_size(MAX_ADDR_LEN
) /* IFLA_ADDRESS */
162 + nla_total_size(4) /* IFLA_MASTER */
163 + nla_total_size(4) /* IFLA_MTU */
164 + nla_total_size(4) /* IFLA_LINK */
165 + nla_total_size(1) /* IFLA_OPERSTATE */
166 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
167 + nla_total_size(br_get_link_af_size_filtered(dev
,
168 filter_mask
)) /* IFLA_AF_SPEC */
169 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
172 static int br_port_fill_attrs(struct sk_buff
*skb
,
173 const struct net_bridge_port
*p
)
175 u8 mode
= !!(p
->flags
& BR_HAIRPIN_MODE
);
176 struct net_bridge_port
*backup_p
;
179 if (nla_put_u8(skb
, IFLA_BRPORT_STATE
, p
->state
) ||
180 nla_put_u16(skb
, IFLA_BRPORT_PRIORITY
, p
->priority
) ||
181 nla_put_u32(skb
, IFLA_BRPORT_COST
, p
->path_cost
) ||
182 nla_put_u8(skb
, IFLA_BRPORT_MODE
, mode
) ||
183 nla_put_u8(skb
, IFLA_BRPORT_GUARD
, !!(p
->flags
& BR_BPDU_GUARD
)) ||
184 nla_put_u8(skb
, IFLA_BRPORT_PROTECT
,
185 !!(p
->flags
& BR_ROOT_BLOCK
)) ||
186 nla_put_u8(skb
, IFLA_BRPORT_FAST_LEAVE
,
187 !!(p
->flags
& BR_MULTICAST_FAST_LEAVE
)) ||
188 nla_put_u8(skb
, IFLA_BRPORT_MCAST_TO_UCAST
,
189 !!(p
->flags
& BR_MULTICAST_TO_UNICAST
)) ||
190 nla_put_u8(skb
, IFLA_BRPORT_LEARNING
, !!(p
->flags
& BR_LEARNING
)) ||
191 nla_put_u8(skb
, IFLA_BRPORT_UNICAST_FLOOD
,
192 !!(p
->flags
& BR_FLOOD
)) ||
193 nla_put_u8(skb
, IFLA_BRPORT_MCAST_FLOOD
,
194 !!(p
->flags
& BR_MCAST_FLOOD
)) ||
195 nla_put_u8(skb
, IFLA_BRPORT_BCAST_FLOOD
,
196 !!(p
->flags
& BR_BCAST_FLOOD
)) ||
197 nla_put_u8(skb
, IFLA_BRPORT_PROXYARP
, !!(p
->flags
& BR_PROXYARP
)) ||
198 nla_put_u8(skb
, IFLA_BRPORT_PROXYARP_WIFI
,
199 !!(p
->flags
& BR_PROXYARP_WIFI
)) ||
200 nla_put(skb
, IFLA_BRPORT_ROOT_ID
, sizeof(struct ifla_bridge_id
),
201 &p
->designated_root
) ||
202 nla_put(skb
, IFLA_BRPORT_BRIDGE_ID
, sizeof(struct ifla_bridge_id
),
203 &p
->designated_bridge
) ||
204 nla_put_u16(skb
, IFLA_BRPORT_DESIGNATED_PORT
, p
->designated_port
) ||
205 nla_put_u16(skb
, IFLA_BRPORT_DESIGNATED_COST
, p
->designated_cost
) ||
206 nla_put_u16(skb
, IFLA_BRPORT_ID
, p
->port_id
) ||
207 nla_put_u16(skb
, IFLA_BRPORT_NO
, p
->port_no
) ||
208 nla_put_u8(skb
, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK
,
209 p
->topology_change_ack
) ||
210 nla_put_u8(skb
, IFLA_BRPORT_CONFIG_PENDING
, p
->config_pending
) ||
211 nla_put_u8(skb
, IFLA_BRPORT_VLAN_TUNNEL
, !!(p
->flags
&
213 nla_put_u16(skb
, IFLA_BRPORT_GROUP_FWD_MASK
, p
->group_fwd_mask
) ||
214 nla_put_u8(skb
, IFLA_BRPORT_NEIGH_SUPPRESS
,
215 !!(p
->flags
& BR_NEIGH_SUPPRESS
)) ||
216 nla_put_u8(skb
, IFLA_BRPORT_ISOLATED
, !!(p
->flags
& BR_ISOLATED
)))
219 timerval
= br_timer_value(&p
->message_age_timer
);
220 if (nla_put_u64_64bit(skb
, IFLA_BRPORT_MESSAGE_AGE_TIMER
, timerval
,
223 timerval
= br_timer_value(&p
->forward_delay_timer
);
224 if (nla_put_u64_64bit(skb
, IFLA_BRPORT_FORWARD_DELAY_TIMER
, timerval
,
227 timerval
= br_timer_value(&p
->hold_timer
);
228 if (nla_put_u64_64bit(skb
, IFLA_BRPORT_HOLD_TIMER
, timerval
,
232 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
233 if (nla_put_u8(skb
, IFLA_BRPORT_MULTICAST_ROUTER
,
234 p
->multicast_router
))
238 /* we might be called only with br->lock */
240 backup_p
= rcu_dereference(p
->backup_port
);
242 nla_put_u32(skb
, IFLA_BRPORT_BACKUP_PORT
,
243 backup_p
->dev
->ifindex
);
249 static int br_fill_ifvlaninfo_range(struct sk_buff
*skb
, u16 vid_start
,
250 u16 vid_end
, u16 flags
)
252 struct bridge_vlan_info vinfo
;
254 if ((vid_end
- vid_start
) > 0) {
255 /* add range to skb */
256 vinfo
.vid
= vid_start
;
257 vinfo
.flags
= flags
| BRIDGE_VLAN_INFO_RANGE_BEGIN
;
258 if (nla_put(skb
, IFLA_BRIDGE_VLAN_INFO
,
259 sizeof(vinfo
), &vinfo
))
260 goto nla_put_failure
;
263 vinfo
.flags
= flags
| BRIDGE_VLAN_INFO_RANGE_END
;
264 if (nla_put(skb
, IFLA_BRIDGE_VLAN_INFO
,
265 sizeof(vinfo
), &vinfo
))
266 goto nla_put_failure
;
268 vinfo
.vid
= vid_start
;
270 if (nla_put(skb
, IFLA_BRIDGE_VLAN_INFO
,
271 sizeof(vinfo
), &vinfo
))
272 goto nla_put_failure
;
281 static int br_fill_ifvlaninfo_compressed(struct sk_buff
*skb
,
282 struct net_bridge_vlan_group
*vg
)
284 struct net_bridge_vlan
*v
;
285 u16 vid_range_start
= 0, vid_range_end
= 0, vid_range_flags
= 0;
289 /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
290 * and mark vlan info with begin and end flags
291 * if vlaninfo represents a range
293 pvid
= br_get_pvid(vg
);
294 list_for_each_entry_rcu(v
, &vg
->vlan_list
, vlist
) {
296 if (!br_vlan_should_use(v
))
299 flags
|= BRIDGE_VLAN_INFO_PVID
;
301 if (v
->flags
& BRIDGE_VLAN_INFO_UNTAGGED
)
302 flags
|= BRIDGE_VLAN_INFO_UNTAGGED
;
304 if (vid_range_start
== 0) {
306 } else if ((v
->vid
- vid_range_end
) == 1 &&
307 flags
== vid_range_flags
) {
308 vid_range_end
= v
->vid
;
311 err
= br_fill_ifvlaninfo_range(skb
, vid_range_start
,
319 vid_range_start
= v
->vid
;
320 vid_range_end
= v
->vid
;
321 vid_range_flags
= flags
;
324 if (vid_range_start
!= 0) {
325 /* Call it once more to send any left over vlans */
326 err
= br_fill_ifvlaninfo_range(skb
, vid_range_start
,
336 static int br_fill_ifvlaninfo(struct sk_buff
*skb
,
337 struct net_bridge_vlan_group
*vg
)
339 struct bridge_vlan_info vinfo
;
340 struct net_bridge_vlan
*v
;
343 pvid
= br_get_pvid(vg
);
344 list_for_each_entry_rcu(v
, &vg
->vlan_list
, vlist
) {
345 if (!br_vlan_should_use(v
))
351 vinfo
.flags
|= BRIDGE_VLAN_INFO_PVID
;
353 if (v
->flags
& BRIDGE_VLAN_INFO_UNTAGGED
)
354 vinfo
.flags
|= BRIDGE_VLAN_INFO_UNTAGGED
;
356 if (nla_put(skb
, IFLA_BRIDGE_VLAN_INFO
,
357 sizeof(vinfo
), &vinfo
))
358 goto nla_put_failure
;
368 * Create one netlink message for one interface
369 * Contains port and master info as well as carrier and bridge state.
371 static int br_fill_ifinfo(struct sk_buff
*skb
,
372 const struct net_bridge_port
*port
,
373 u32 pid
, u32 seq
, int event
, unsigned int flags
,
374 u32 filter_mask
, const struct net_device
*dev
)
376 u8 operstate
= netif_running(dev
) ? dev
->operstate
: IF_OPER_DOWN
;
377 struct net_bridge
*br
;
378 struct ifinfomsg
*hdr
;
379 struct nlmsghdr
*nlh
;
384 br
= netdev_priv(dev
);
386 br_debug(br
, "br_fill_info event %d port %s master %s\n",
387 event
, dev
->name
, br
->dev
->name
);
389 nlh
= nlmsg_put(skb
, pid
, seq
, event
, sizeof(*hdr
), flags
);
393 hdr
= nlmsg_data(nlh
);
394 hdr
->ifi_family
= AF_BRIDGE
;
396 hdr
->ifi_type
= dev
->type
;
397 hdr
->ifi_index
= dev
->ifindex
;
398 hdr
->ifi_flags
= dev_get_flags(dev
);
401 if (nla_put_string(skb
, IFLA_IFNAME
, dev
->name
) ||
402 nla_put_u32(skb
, IFLA_MASTER
, br
->dev
->ifindex
) ||
403 nla_put_u32(skb
, IFLA_MTU
, dev
->mtu
) ||
404 nla_put_u8(skb
, IFLA_OPERSTATE
, operstate
) ||
406 nla_put(skb
, IFLA_ADDRESS
, dev
->addr_len
, dev
->dev_addr
)) ||
407 (dev
->ifindex
!= dev_get_iflink(dev
) &&
408 nla_put_u32(skb
, IFLA_LINK
, dev_get_iflink(dev
))))
409 goto nla_put_failure
;
411 if (event
== RTM_NEWLINK
&& port
) {
414 nest
= nla_nest_start(skb
, IFLA_PROTINFO
);
415 if (nest
== NULL
|| br_port_fill_attrs(skb
, port
) < 0)
416 goto nla_put_failure
;
417 nla_nest_end(skb
, nest
);
420 /* Check if the VID information is requested */
421 if ((filter_mask
& RTEXT_FILTER_BRVLAN
) ||
422 (filter_mask
& RTEXT_FILTER_BRVLAN_COMPRESSED
)) {
423 struct net_bridge_vlan_group
*vg
;
427 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */
430 vg
= nbp_vlan_group_rcu(port
);
432 vg
= br_vlan_group_rcu(br
);
434 if (!vg
|| !vg
->num_vlans
) {
438 af
= nla_nest_start_noflag(skb
, IFLA_AF_SPEC
);
441 goto nla_put_failure
;
443 if (filter_mask
& RTEXT_FILTER_BRVLAN_COMPRESSED
)
444 err
= br_fill_ifvlaninfo_compressed(skb
, vg
);
446 err
= br_fill_ifvlaninfo(skb
, vg
);
448 if (port
&& (port
->flags
& BR_VLAN_TUNNEL
))
449 err
= br_fill_vlan_tunnel_info(skb
, vg
);
452 goto nla_put_failure
;
453 nla_nest_end(skb
, af
);
461 nlmsg_cancel(skb
, nlh
);
465 /* Notify listeners of a change in bridge or port information */
466 void br_ifinfo_notify(int event
, const struct net_bridge
*br
,
467 const struct net_bridge_port
*port
)
469 u32 filter
= RTEXT_FILTER_BRVLAN_COMPRESSED
;
470 struct net_device
*dev
;
476 if (WARN_ON(!port
&& !br
))
482 port_no
= port
->port_no
;
488 br_debug(br
, "port %u(%s) event %d\n", port_no
, dev
->name
, event
);
490 skb
= nlmsg_new(br_nlmsg_size(dev
, filter
), GFP_ATOMIC
);
494 err
= br_fill_ifinfo(skb
, port
, 0, 0, event
, 0, filter
, dev
);
496 /* -EMSGSIZE implies BUG in br_nlmsg_size() */
497 WARN_ON(err
== -EMSGSIZE
);
501 rtnl_notify(skb
, net
, 0, RTNLGRP_LINK
, NULL
, GFP_ATOMIC
);
504 rtnl_set_sk_err(net
, RTNLGRP_LINK
, err
);
508 * Dump information about all ports, in response to GETLINK
510 int br_getlink(struct sk_buff
*skb
, u32 pid
, u32 seq
,
511 struct net_device
*dev
, u32 filter_mask
, int nlflags
)
513 struct net_bridge_port
*port
= br_port_get_rtnl(dev
);
515 if (!port
&& !(filter_mask
& RTEXT_FILTER_BRVLAN
) &&
516 !(filter_mask
& RTEXT_FILTER_BRVLAN_COMPRESSED
))
519 return br_fill_ifinfo(skb
, port
, pid
, seq
, RTM_NEWLINK
, nlflags
,
523 static int br_vlan_info(struct net_bridge
*br
, struct net_bridge_port
*p
,
524 int cmd
, struct bridge_vlan_info
*vinfo
, bool *changed
,
525 struct netlink_ext_ack
*extack
)
533 /* if the MASTER flag is set this will act on the global
534 * per-VLAN entry as well
536 err
= nbp_vlan_add(p
, vinfo
->vid
, vinfo
->flags
,
537 &curr_change
, extack
);
539 vinfo
->flags
|= BRIDGE_VLAN_INFO_BRENTRY
;
540 err
= br_vlan_add(br
, vinfo
->vid
, vinfo
->flags
,
541 &curr_change
, extack
);
549 if (!nbp_vlan_delete(p
, vinfo
->vid
))
552 if ((vinfo
->flags
& BRIDGE_VLAN_INFO_MASTER
) &&
553 !br_vlan_delete(p
->br
, vinfo
->vid
))
555 } else if (!br_vlan_delete(br
, vinfo
->vid
)) {
564 int br_process_vlan_info(struct net_bridge
*br
,
565 struct net_bridge_port
*p
, int cmd
,
566 struct bridge_vlan_info
*vinfo_curr
,
567 struct bridge_vlan_info
**vinfo_last
,
569 struct netlink_ext_ack
*extack
)
573 if (!br_vlan_valid_id(vinfo_curr
->vid
, extack
))
576 /* needed for vlan-only NEWVLAN/DELVLAN notifications */
577 rtm_cmd
= br_afspec_cmd_to_rtm(cmd
);
579 if (vinfo_curr
->flags
& BRIDGE_VLAN_INFO_RANGE_BEGIN
) {
580 if (!br_vlan_valid_range(vinfo_curr
, *vinfo_last
, extack
))
582 *vinfo_last
= vinfo_curr
;
587 struct bridge_vlan_info tmp_vinfo
;
588 int v
, v_change_start
= 0;
590 if (!br_vlan_valid_range(vinfo_curr
, *vinfo_last
, extack
))
593 memcpy(&tmp_vinfo
, *vinfo_last
,
594 sizeof(struct bridge_vlan_info
));
595 for (v
= (*vinfo_last
)->vid
; v
<= vinfo_curr
->vid
; v
++) {
596 bool curr_change
= false;
599 err
= br_vlan_info(br
, p
, cmd
, &tmp_vinfo
, &curr_change
,
604 *changed
= curr_change
;
608 /* nothing to notify yet */
611 br_vlan_notify(br
, p
, v_change_start
,
617 /* v_change_start is set only if the last/whole range changed */
619 br_vlan_notify(br
, p
, v_change_start
,
627 err
= br_vlan_info(br
, p
, cmd
, vinfo_curr
, changed
, extack
);
629 br_vlan_notify(br
, p
, vinfo_curr
->vid
, 0, rtm_cmd
);
634 static int br_afspec(struct net_bridge
*br
,
635 struct net_bridge_port
*p
,
636 struct nlattr
*af_spec
,
637 int cmd
, bool *changed
,
638 struct netlink_ext_ack
*extack
)
640 struct bridge_vlan_info
*vinfo_curr
= NULL
;
641 struct bridge_vlan_info
*vinfo_last
= NULL
;
643 struct vtunnel_info tinfo_last
= {};
644 struct vtunnel_info tinfo_curr
= {};
647 nla_for_each_nested(attr
, af_spec
, rem
) {
649 switch (nla_type(attr
)) {
650 case IFLA_BRIDGE_VLAN_TUNNEL_INFO
:
651 if (!p
|| !(p
->flags
& BR_VLAN_TUNNEL
))
653 err
= br_parse_vlan_tunnel_info(attr
, &tinfo_curr
);
656 err
= br_process_vlan_tunnel_info(br
, p
, cmd
,
663 case IFLA_BRIDGE_VLAN_INFO
:
664 if (nla_len(attr
) != sizeof(struct bridge_vlan_info
))
666 vinfo_curr
= nla_data(attr
);
667 err
= br_process_vlan_info(br
, p
, cmd
, vinfo_curr
,
668 &vinfo_last
, changed
,
679 static const struct nla_policy br_port_policy
[IFLA_BRPORT_MAX
+ 1] = {
680 [IFLA_BRPORT_STATE
] = { .type
= NLA_U8
},
681 [IFLA_BRPORT_COST
] = { .type
= NLA_U32
},
682 [IFLA_BRPORT_PRIORITY
] = { .type
= NLA_U16
},
683 [IFLA_BRPORT_MODE
] = { .type
= NLA_U8
},
684 [IFLA_BRPORT_GUARD
] = { .type
= NLA_U8
},
685 [IFLA_BRPORT_PROTECT
] = { .type
= NLA_U8
},
686 [IFLA_BRPORT_FAST_LEAVE
]= { .type
= NLA_U8
},
687 [IFLA_BRPORT_LEARNING
] = { .type
= NLA_U8
},
688 [IFLA_BRPORT_UNICAST_FLOOD
] = { .type
= NLA_U8
},
689 [IFLA_BRPORT_PROXYARP
] = { .type
= NLA_U8
},
690 [IFLA_BRPORT_PROXYARP_WIFI
] = { .type
= NLA_U8
},
691 [IFLA_BRPORT_MULTICAST_ROUTER
] = { .type
= NLA_U8
},
692 [IFLA_BRPORT_MCAST_TO_UCAST
] = { .type
= NLA_U8
},
693 [IFLA_BRPORT_MCAST_FLOOD
] = { .type
= NLA_U8
},
694 [IFLA_BRPORT_BCAST_FLOOD
] = { .type
= NLA_U8
},
695 [IFLA_BRPORT_VLAN_TUNNEL
] = { .type
= NLA_U8
},
696 [IFLA_BRPORT_GROUP_FWD_MASK
] = { .type
= NLA_U16
},
697 [IFLA_BRPORT_NEIGH_SUPPRESS
] = { .type
= NLA_U8
},
698 [IFLA_BRPORT_ISOLATED
] = { .type
= NLA_U8
},
699 [IFLA_BRPORT_BACKUP_PORT
] = { .type
= NLA_U32
},
702 /* Change the state of the port and notify spanning tree */
703 static int br_set_port_state(struct net_bridge_port
*p
, u8 state
)
705 if (state
> BR_STATE_BLOCKING
)
708 /* if kernel STP is running, don't allow changes */
709 if (p
->br
->stp_enabled
== BR_KERNEL_STP
)
712 /* if device is not up, change is not allowed
713 * if link is not present, only allowable state is disabled
715 if (!netif_running(p
->dev
) ||
716 (!netif_oper_up(p
->dev
) && state
!= BR_STATE_DISABLED
))
719 br_set_state(p
, state
);
720 br_port_state_selection(p
->br
);
724 /* Set/clear or port flags based on attribute */
725 static int br_set_port_flag(struct net_bridge_port
*p
, struct nlattr
*tb
[],
726 int attrtype
, unsigned long mask
)
734 if (nla_get_u8(tb
[attrtype
]))
735 flags
= p
->flags
| mask
;
737 flags
= p
->flags
& ~mask
;
739 err
= br_switchdev_set_port_flag(p
, flags
, mask
);
747 /* Process bridge protocol info on port */
748 static int br_setport(struct net_bridge_port
*p
, struct nlattr
*tb
[])
750 unsigned long old_flags
= p
->flags
;
751 bool br_vlan_tunnel_old
= false;
754 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_MODE
, BR_HAIRPIN_MODE
);
758 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_GUARD
, BR_BPDU_GUARD
);
762 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_FAST_LEAVE
, BR_MULTICAST_FAST_LEAVE
);
766 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_PROTECT
, BR_ROOT_BLOCK
);
770 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_LEARNING
, BR_LEARNING
);
774 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_UNICAST_FLOOD
, BR_FLOOD
);
778 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_MCAST_FLOOD
, BR_MCAST_FLOOD
);
782 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_MCAST_TO_UCAST
, BR_MULTICAST_TO_UNICAST
);
786 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_BCAST_FLOOD
, BR_BCAST_FLOOD
);
790 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_PROXYARP
, BR_PROXYARP
);
794 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_PROXYARP_WIFI
, BR_PROXYARP_WIFI
);
798 br_vlan_tunnel_old
= (p
->flags
& BR_VLAN_TUNNEL
) ? true : false;
799 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_VLAN_TUNNEL
, BR_VLAN_TUNNEL
);
803 if (br_vlan_tunnel_old
&& !(p
->flags
& BR_VLAN_TUNNEL
))
804 nbp_vlan_tunnel_info_flush(p
);
806 if (tb
[IFLA_BRPORT_COST
]) {
807 err
= br_stp_set_path_cost(p
, nla_get_u32(tb
[IFLA_BRPORT_COST
]));
812 if (tb
[IFLA_BRPORT_PRIORITY
]) {
813 err
= br_stp_set_port_priority(p
, nla_get_u16(tb
[IFLA_BRPORT_PRIORITY
]));
818 if (tb
[IFLA_BRPORT_STATE
]) {
819 err
= br_set_port_state(p
, nla_get_u8(tb
[IFLA_BRPORT_STATE
]));
824 if (tb
[IFLA_BRPORT_FLUSH
])
825 br_fdb_delete_by_port(p
->br
, p
, 0, 0);
827 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
828 if (tb
[IFLA_BRPORT_MULTICAST_ROUTER
]) {
829 u8 mcast_router
= nla_get_u8(tb
[IFLA_BRPORT_MULTICAST_ROUTER
]);
831 err
= br_multicast_set_port_router(p
, mcast_router
);
837 if (tb
[IFLA_BRPORT_GROUP_FWD_MASK
]) {
838 u16 fwd_mask
= nla_get_u16(tb
[IFLA_BRPORT_GROUP_FWD_MASK
]);
840 if (fwd_mask
& BR_GROUPFWD_MACPAUSE
)
842 p
->group_fwd_mask
= fwd_mask
;
845 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_NEIGH_SUPPRESS
,
850 err
= br_set_port_flag(p
, tb
, IFLA_BRPORT_ISOLATED
, BR_ISOLATED
);
854 if (tb
[IFLA_BRPORT_BACKUP_PORT
]) {
855 struct net_device
*backup_dev
= NULL
;
858 backup_ifindex
= nla_get_u32(tb
[IFLA_BRPORT_BACKUP_PORT
]);
859 if (backup_ifindex
) {
860 backup_dev
= __dev_get_by_index(dev_net(p
->dev
),
866 err
= nbp_backup_change(p
, backup_dev
);
871 br_port_flags_change(p
, old_flags
^ p
->flags
);
875 /* Change state and parameters on port. */
876 int br_setlink(struct net_device
*dev
, struct nlmsghdr
*nlh
, u16 flags
,
877 struct netlink_ext_ack
*extack
)
879 struct net_bridge
*br
= (struct net_bridge
*)netdev_priv(dev
);
880 struct nlattr
*tb
[IFLA_BRPORT_MAX
+ 1];
881 struct net_bridge_port
*p
;
882 struct nlattr
*protinfo
;
883 struct nlattr
*afspec
;
884 bool changed
= false;
887 protinfo
= nlmsg_find_attr(nlh
, sizeof(struct ifinfomsg
), IFLA_PROTINFO
);
888 afspec
= nlmsg_find_attr(nlh
, sizeof(struct ifinfomsg
), IFLA_AF_SPEC
);
889 if (!protinfo
&& !afspec
)
892 p
= br_port_get_rtnl(dev
);
893 /* We want to accept dev as bridge itself if the AF_SPEC
894 * is set to see if someone is setting vlan info on the bridge
900 if (protinfo
->nla_type
& NLA_F_NESTED
) {
901 err
= nla_parse_nested_deprecated(tb
, IFLA_BRPORT_MAX
,
908 spin_lock_bh(&p
->br
->lock
);
909 err
= br_setport(p
, tb
);
910 spin_unlock_bh(&p
->br
->lock
);
912 /* Binary compatibility with old RSTP */
913 if (nla_len(protinfo
) < sizeof(u8
))
916 spin_lock_bh(&p
->br
->lock
);
917 err
= br_set_port_state(p
, nla_get_u8(protinfo
));
918 spin_unlock_bh(&p
->br
->lock
);
926 err
= br_afspec(br
, p
, afspec
, RTM_SETLINK
, &changed
, extack
);
929 br_ifinfo_notify(RTM_NEWLINK
, br
, p
);
934 /* Delete port information */
935 int br_dellink(struct net_device
*dev
, struct nlmsghdr
*nlh
, u16 flags
)
937 struct net_bridge
*br
= (struct net_bridge
*)netdev_priv(dev
);
938 struct net_bridge_port
*p
;
939 struct nlattr
*afspec
;
940 bool changed
= false;
943 afspec
= nlmsg_find_attr(nlh
, sizeof(struct ifinfomsg
), IFLA_AF_SPEC
);
947 p
= br_port_get_rtnl(dev
);
948 /* We want to accept dev as bridge itself as well */
949 if (!p
&& !(dev
->priv_flags
& IFF_EBRIDGE
))
952 err
= br_afspec(br
, p
, afspec
, RTM_DELLINK
, &changed
, NULL
);
954 /* Send RTM_NEWLINK because userspace
955 * expects RTM_NEWLINK for vlan dels
957 br_ifinfo_notify(RTM_NEWLINK
, br
, p
);
962 static int br_validate(struct nlattr
*tb
[], struct nlattr
*data
[],
963 struct netlink_ext_ack
*extack
)
965 if (tb
[IFLA_ADDRESS
]) {
966 if (nla_len(tb
[IFLA_ADDRESS
]) != ETH_ALEN
)
968 if (!is_valid_ether_addr(nla_data(tb
[IFLA_ADDRESS
])))
969 return -EADDRNOTAVAIL
;
975 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
976 if (data
[IFLA_BR_VLAN_PROTOCOL
]) {
977 switch (nla_get_be16(data
[IFLA_BR_VLAN_PROTOCOL
])) {
978 case htons(ETH_P_8021Q
):
979 case htons(ETH_P_8021AD
):
982 return -EPROTONOSUPPORT
;
986 if (data
[IFLA_BR_VLAN_DEFAULT_PVID
]) {
987 __u16 defpvid
= nla_get_u16(data
[IFLA_BR_VLAN_DEFAULT_PVID
]);
989 if (defpvid
>= VLAN_VID_MASK
)
997 static int br_port_slave_changelink(struct net_device
*brdev
,
998 struct net_device
*dev
,
1000 struct nlattr
*data
[],
1001 struct netlink_ext_ack
*extack
)
1003 struct net_bridge
*br
= netdev_priv(brdev
);
1009 spin_lock_bh(&br
->lock
);
1010 ret
= br_setport(br_port_get_rtnl(dev
), data
);
1011 spin_unlock_bh(&br
->lock
);
1016 static int br_port_fill_slave_info(struct sk_buff
*skb
,
1017 const struct net_device
*brdev
,
1018 const struct net_device
*dev
)
1020 return br_port_fill_attrs(skb
, br_port_get_rtnl(dev
));
1023 static size_t br_port_get_slave_size(const struct net_device
*brdev
,
1024 const struct net_device
*dev
)
1026 return br_port_info_size();
1029 static const struct nla_policy br_policy
[IFLA_BR_MAX
+ 1] = {
1030 [IFLA_BR_FORWARD_DELAY
] = { .type
= NLA_U32
},
1031 [IFLA_BR_HELLO_TIME
] = { .type
= NLA_U32
},
1032 [IFLA_BR_MAX_AGE
] = { .type
= NLA_U32
},
1033 [IFLA_BR_AGEING_TIME
] = { .type
= NLA_U32
},
1034 [IFLA_BR_STP_STATE
] = { .type
= NLA_U32
},
1035 [IFLA_BR_PRIORITY
] = { .type
= NLA_U16
},
1036 [IFLA_BR_VLAN_FILTERING
] = { .type
= NLA_U8
},
1037 [IFLA_BR_VLAN_PROTOCOL
] = { .type
= NLA_U16
},
1038 [IFLA_BR_GROUP_FWD_MASK
] = { .type
= NLA_U16
},
1039 [IFLA_BR_GROUP_ADDR
] = { .type
= NLA_BINARY
,
1041 [IFLA_BR_MCAST_ROUTER
] = { .type
= NLA_U8
},
1042 [IFLA_BR_MCAST_SNOOPING
] = { .type
= NLA_U8
},
1043 [IFLA_BR_MCAST_QUERY_USE_IFADDR
] = { .type
= NLA_U8
},
1044 [IFLA_BR_MCAST_QUERIER
] = { .type
= NLA_U8
},
1045 [IFLA_BR_MCAST_HASH_ELASTICITY
] = { .type
= NLA_U32
},
1046 [IFLA_BR_MCAST_HASH_MAX
] = { .type
= NLA_U32
},
1047 [IFLA_BR_MCAST_LAST_MEMBER_CNT
] = { .type
= NLA_U32
},
1048 [IFLA_BR_MCAST_STARTUP_QUERY_CNT
] = { .type
= NLA_U32
},
1049 [IFLA_BR_MCAST_LAST_MEMBER_INTVL
] = { .type
= NLA_U64
},
1050 [IFLA_BR_MCAST_MEMBERSHIP_INTVL
] = { .type
= NLA_U64
},
1051 [IFLA_BR_MCAST_QUERIER_INTVL
] = { .type
= NLA_U64
},
1052 [IFLA_BR_MCAST_QUERY_INTVL
] = { .type
= NLA_U64
},
1053 [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
] = { .type
= NLA_U64
},
1054 [IFLA_BR_MCAST_STARTUP_QUERY_INTVL
] = { .type
= NLA_U64
},
1055 [IFLA_BR_NF_CALL_IPTABLES
] = { .type
= NLA_U8
},
1056 [IFLA_BR_NF_CALL_IP6TABLES
] = { .type
= NLA_U8
},
1057 [IFLA_BR_NF_CALL_ARPTABLES
] = { .type
= NLA_U8
},
1058 [IFLA_BR_VLAN_DEFAULT_PVID
] = { .type
= NLA_U16
},
1059 [IFLA_BR_VLAN_STATS_ENABLED
] = { .type
= NLA_U8
},
1060 [IFLA_BR_MCAST_STATS_ENABLED
] = { .type
= NLA_U8
},
1061 [IFLA_BR_MCAST_IGMP_VERSION
] = { .type
= NLA_U8
},
1062 [IFLA_BR_MCAST_MLD_VERSION
] = { .type
= NLA_U8
},
1063 [IFLA_BR_VLAN_STATS_PER_PORT
] = { .type
= NLA_U8
},
1064 [IFLA_BR_MULTI_BOOLOPT
] = { .type
= NLA_EXACT_LEN
,
1065 .len
= sizeof(struct br_boolopt_multi
) },
1068 static int br_changelink(struct net_device
*brdev
, struct nlattr
*tb
[],
1069 struct nlattr
*data
[],
1070 struct netlink_ext_ack
*extack
)
1072 struct net_bridge
*br
= netdev_priv(brdev
);
1078 if (data
[IFLA_BR_FORWARD_DELAY
]) {
1079 err
= br_set_forward_delay(br
, nla_get_u32(data
[IFLA_BR_FORWARD_DELAY
]));
1084 if (data
[IFLA_BR_HELLO_TIME
]) {
1085 err
= br_set_hello_time(br
, nla_get_u32(data
[IFLA_BR_HELLO_TIME
]));
1090 if (data
[IFLA_BR_MAX_AGE
]) {
1091 err
= br_set_max_age(br
, nla_get_u32(data
[IFLA_BR_MAX_AGE
]));
1096 if (data
[IFLA_BR_AGEING_TIME
]) {
1097 err
= br_set_ageing_time(br
, nla_get_u32(data
[IFLA_BR_AGEING_TIME
]));
1102 if (data
[IFLA_BR_STP_STATE
]) {
1103 u32 stp_enabled
= nla_get_u32(data
[IFLA_BR_STP_STATE
]);
1105 br_stp_set_enabled(br
, stp_enabled
);
1108 if (data
[IFLA_BR_PRIORITY
]) {
1109 u32 priority
= nla_get_u16(data
[IFLA_BR_PRIORITY
]);
1111 br_stp_set_bridge_priority(br
, priority
);
1114 if (data
[IFLA_BR_VLAN_FILTERING
]) {
1115 u8 vlan_filter
= nla_get_u8(data
[IFLA_BR_VLAN_FILTERING
]);
1117 err
= __br_vlan_filter_toggle(br
, vlan_filter
);
1122 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1123 if (data
[IFLA_BR_VLAN_PROTOCOL
]) {
1124 __be16 vlan_proto
= nla_get_be16(data
[IFLA_BR_VLAN_PROTOCOL
]);
1126 err
= __br_vlan_set_proto(br
, vlan_proto
);
1131 if (data
[IFLA_BR_VLAN_DEFAULT_PVID
]) {
1132 __u16 defpvid
= nla_get_u16(data
[IFLA_BR_VLAN_DEFAULT_PVID
]);
1134 err
= __br_vlan_set_default_pvid(br
, defpvid
, extack
);
1139 if (data
[IFLA_BR_VLAN_STATS_ENABLED
]) {
1140 __u8 vlan_stats
= nla_get_u8(data
[IFLA_BR_VLAN_STATS_ENABLED
]);
1142 err
= br_vlan_set_stats(br
, vlan_stats
);
1147 if (data
[IFLA_BR_VLAN_STATS_PER_PORT
]) {
1148 __u8 per_port
= nla_get_u8(data
[IFLA_BR_VLAN_STATS_PER_PORT
]);
1150 err
= br_vlan_set_stats_per_port(br
, per_port
);
1156 if (data
[IFLA_BR_GROUP_FWD_MASK
]) {
1157 u16 fwd_mask
= nla_get_u16(data
[IFLA_BR_GROUP_FWD_MASK
]);
1159 if (fwd_mask
& BR_GROUPFWD_RESTRICTED
)
1161 br
->group_fwd_mask
= fwd_mask
;
1164 if (data
[IFLA_BR_GROUP_ADDR
]) {
1165 u8 new_addr
[ETH_ALEN
];
1167 if (nla_len(data
[IFLA_BR_GROUP_ADDR
]) != ETH_ALEN
)
1169 memcpy(new_addr
, nla_data(data
[IFLA_BR_GROUP_ADDR
]), ETH_ALEN
);
1170 if (!is_link_local_ether_addr(new_addr
))
1172 if (new_addr
[5] == 1 || /* 802.3x Pause address */
1173 new_addr
[5] == 2 || /* 802.3ad Slow protocols */
1174 new_addr
[5] == 3) /* 802.1X PAE address */
1176 spin_lock_bh(&br
->lock
);
1177 memcpy(br
->group_addr
, new_addr
, sizeof(br
->group_addr
));
1178 spin_unlock_bh(&br
->lock
);
1179 br_opt_toggle(br
, BROPT_GROUP_ADDR_SET
, true);
1180 br_recalculate_fwd_mask(br
);
1183 if (data
[IFLA_BR_FDB_FLUSH
])
1186 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1187 if (data
[IFLA_BR_MCAST_ROUTER
]) {
1188 u8 multicast_router
= nla_get_u8(data
[IFLA_BR_MCAST_ROUTER
]);
1190 err
= br_multicast_set_router(br
, multicast_router
);
1195 if (data
[IFLA_BR_MCAST_SNOOPING
]) {
1196 u8 mcast_snooping
= nla_get_u8(data
[IFLA_BR_MCAST_SNOOPING
]);
1198 br_multicast_toggle(br
, mcast_snooping
);
1201 if (data
[IFLA_BR_MCAST_QUERY_USE_IFADDR
]) {
1204 val
= nla_get_u8(data
[IFLA_BR_MCAST_QUERY_USE_IFADDR
]);
1205 br_opt_toggle(br
, BROPT_MULTICAST_QUERY_USE_IFADDR
, !!val
);
1208 if (data
[IFLA_BR_MCAST_QUERIER
]) {
1209 u8 mcast_querier
= nla_get_u8(data
[IFLA_BR_MCAST_QUERIER
]);
1211 err
= br_multicast_set_querier(br
, mcast_querier
);
1216 if (data
[IFLA_BR_MCAST_HASH_ELASTICITY
])
1217 br_warn(br
, "the hash_elasticity option has been deprecated and is always %u\n",
1220 if (data
[IFLA_BR_MCAST_HASH_MAX
])
1221 br
->hash_max
= nla_get_u32(data
[IFLA_BR_MCAST_HASH_MAX
]);
1223 if (data
[IFLA_BR_MCAST_LAST_MEMBER_CNT
]) {
1224 u32 val
= nla_get_u32(data
[IFLA_BR_MCAST_LAST_MEMBER_CNT
]);
1226 br
->multicast_last_member_count
= val
;
1229 if (data
[IFLA_BR_MCAST_STARTUP_QUERY_CNT
]) {
1230 u32 val
= nla_get_u32(data
[IFLA_BR_MCAST_STARTUP_QUERY_CNT
]);
1232 br
->multicast_startup_query_count
= val
;
1235 if (data
[IFLA_BR_MCAST_LAST_MEMBER_INTVL
]) {
1236 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_LAST_MEMBER_INTVL
]);
1238 br
->multicast_last_member_interval
= clock_t_to_jiffies(val
);
1241 if (data
[IFLA_BR_MCAST_MEMBERSHIP_INTVL
]) {
1242 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_MEMBERSHIP_INTVL
]);
1244 br
->multicast_membership_interval
= clock_t_to_jiffies(val
);
1247 if (data
[IFLA_BR_MCAST_QUERIER_INTVL
]) {
1248 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_QUERIER_INTVL
]);
1250 br
->multicast_querier_interval
= clock_t_to_jiffies(val
);
1253 if (data
[IFLA_BR_MCAST_QUERY_INTVL
]) {
1254 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_QUERY_INTVL
]);
1256 br
->multicast_query_interval
= clock_t_to_jiffies(val
);
1259 if (data
[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
]) {
1260 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
]);
1262 br
->multicast_query_response_interval
= clock_t_to_jiffies(val
);
1265 if (data
[IFLA_BR_MCAST_STARTUP_QUERY_INTVL
]) {
1266 u64 val
= nla_get_u64(data
[IFLA_BR_MCAST_STARTUP_QUERY_INTVL
]);
1268 br
->multicast_startup_query_interval
= clock_t_to_jiffies(val
);
1271 if (data
[IFLA_BR_MCAST_STATS_ENABLED
]) {
1274 mcast_stats
= nla_get_u8(data
[IFLA_BR_MCAST_STATS_ENABLED
]);
1275 br_opt_toggle(br
, BROPT_MULTICAST_STATS_ENABLED
, !!mcast_stats
);
1278 if (data
[IFLA_BR_MCAST_IGMP_VERSION
]) {
1281 igmp_version
= nla_get_u8(data
[IFLA_BR_MCAST_IGMP_VERSION
]);
1282 err
= br_multicast_set_igmp_version(br
, igmp_version
);
1287 #if IS_ENABLED(CONFIG_IPV6)
1288 if (data
[IFLA_BR_MCAST_MLD_VERSION
]) {
1291 mld_version
= nla_get_u8(data
[IFLA_BR_MCAST_MLD_VERSION
]);
1292 err
= br_multicast_set_mld_version(br
, mld_version
);
1298 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1299 if (data
[IFLA_BR_NF_CALL_IPTABLES
]) {
1300 u8 val
= nla_get_u8(data
[IFLA_BR_NF_CALL_IPTABLES
]);
1302 br_opt_toggle(br
, BROPT_NF_CALL_IPTABLES
, !!val
);
1305 if (data
[IFLA_BR_NF_CALL_IP6TABLES
]) {
1306 u8 val
= nla_get_u8(data
[IFLA_BR_NF_CALL_IP6TABLES
]);
1308 br_opt_toggle(br
, BROPT_NF_CALL_IP6TABLES
, !!val
);
1311 if (data
[IFLA_BR_NF_CALL_ARPTABLES
]) {
1312 u8 val
= nla_get_u8(data
[IFLA_BR_NF_CALL_ARPTABLES
]);
1314 br_opt_toggle(br
, BROPT_NF_CALL_ARPTABLES
, !!val
);
1318 if (data
[IFLA_BR_MULTI_BOOLOPT
]) {
1319 struct br_boolopt_multi
*bm
;
1321 bm
= nla_data(data
[IFLA_BR_MULTI_BOOLOPT
]);
1322 err
= br_boolopt_multi_toggle(br
, bm
, extack
);
1330 static int br_dev_newlink(struct net
*src_net
, struct net_device
*dev
,
1331 struct nlattr
*tb
[], struct nlattr
*data
[],
1332 struct netlink_ext_ack
*extack
)
1334 struct net_bridge
*br
= netdev_priv(dev
);
1337 err
= register_netdevice(dev
);
1341 if (tb
[IFLA_ADDRESS
]) {
1342 spin_lock_bh(&br
->lock
);
1343 br_stp_change_bridge_id(br
, nla_data(tb
[IFLA_ADDRESS
]));
1344 spin_unlock_bh(&br
->lock
);
1347 err
= br_changelink(dev
, tb
, data
, extack
);
1349 br_dev_delete(dev
, NULL
);
1354 static size_t br_get_size(const struct net_device
*brdev
)
1356 return nla_total_size(sizeof(u32
)) + /* IFLA_BR_FORWARD_DELAY */
1357 nla_total_size(sizeof(u32
)) + /* IFLA_BR_HELLO_TIME */
1358 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MAX_AGE */
1359 nla_total_size(sizeof(u32
)) + /* IFLA_BR_AGEING_TIME */
1360 nla_total_size(sizeof(u32
)) + /* IFLA_BR_STP_STATE */
1361 nla_total_size(sizeof(u16
)) + /* IFLA_BR_PRIORITY */
1362 nla_total_size(sizeof(u8
)) + /* IFLA_BR_VLAN_FILTERING */
1363 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1364 nla_total_size(sizeof(__be16
)) + /* IFLA_BR_VLAN_PROTOCOL */
1365 nla_total_size(sizeof(u16
)) + /* IFLA_BR_VLAN_DEFAULT_PVID */
1366 nla_total_size(sizeof(u8
)) + /* IFLA_BR_VLAN_STATS_ENABLED */
1367 nla_total_size(sizeof(u8
)) + /* IFLA_BR_VLAN_STATS_PER_PORT */
1369 nla_total_size(sizeof(u16
)) + /* IFLA_BR_GROUP_FWD_MASK */
1370 nla_total_size(sizeof(struct ifla_bridge_id
)) + /* IFLA_BR_ROOT_ID */
1371 nla_total_size(sizeof(struct ifla_bridge_id
)) + /* IFLA_BR_BRIDGE_ID */
1372 nla_total_size(sizeof(u16
)) + /* IFLA_BR_ROOT_PORT */
1373 nla_total_size(sizeof(u32
)) + /* IFLA_BR_ROOT_PATH_COST */
1374 nla_total_size(sizeof(u8
)) + /* IFLA_BR_TOPOLOGY_CHANGE */
1375 nla_total_size(sizeof(u8
)) + /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1376 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_HELLO_TIMER */
1377 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_TCN_TIMER */
1378 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1379 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_GC_TIMER */
1380 nla_total_size(ETH_ALEN
) + /* IFLA_BR_GROUP_ADDR */
1381 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1382 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_ROUTER */
1383 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_SNOOPING */
1384 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1385 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_QUERIER */
1386 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_STATS_ENABLED */
1387 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MCAST_HASH_ELASTICITY */
1388 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MCAST_HASH_MAX */
1389 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1390 nla_total_size(sizeof(u32
)) + /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1391 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1392 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1393 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1394 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1395 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1396 nla_total_size_64bit(sizeof(u64
)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1397 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_IGMP_VERSION */
1398 nla_total_size(sizeof(u8
)) + /* IFLA_BR_MCAST_MLD_VERSION */
1400 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1401 nla_total_size(sizeof(u8
)) + /* IFLA_BR_NF_CALL_IPTABLES */
1402 nla_total_size(sizeof(u8
)) + /* IFLA_BR_NF_CALL_IP6TABLES */
1403 nla_total_size(sizeof(u8
)) + /* IFLA_BR_NF_CALL_ARPTABLES */
1405 nla_total_size(sizeof(struct br_boolopt_multi
)) + /* IFLA_BR_MULTI_BOOLOPT */
1409 static int br_fill_info(struct sk_buff
*skb
, const struct net_device
*brdev
)
1411 struct net_bridge
*br
= netdev_priv(brdev
);
1412 u32 forward_delay
= jiffies_to_clock_t(br
->forward_delay
);
1413 u32 hello_time
= jiffies_to_clock_t(br
->hello_time
);
1414 u32 age_time
= jiffies_to_clock_t(br
->max_age
);
1415 u32 ageing_time
= jiffies_to_clock_t(br
->ageing_time
);
1416 u32 stp_enabled
= br
->stp_enabled
;
1417 u16 priority
= (br
->bridge_id
.prio
[0] << 8) | br
->bridge_id
.prio
[1];
1418 u8 vlan_enabled
= br_vlan_enabled(br
->dev
);
1419 struct br_boolopt_multi bm
;
1422 clockval
= br_timer_value(&br
->hello_timer
);
1423 if (nla_put_u64_64bit(skb
, IFLA_BR_HELLO_TIMER
, clockval
, IFLA_BR_PAD
))
1425 clockval
= br_timer_value(&br
->tcn_timer
);
1426 if (nla_put_u64_64bit(skb
, IFLA_BR_TCN_TIMER
, clockval
, IFLA_BR_PAD
))
1428 clockval
= br_timer_value(&br
->topology_change_timer
);
1429 if (nla_put_u64_64bit(skb
, IFLA_BR_TOPOLOGY_CHANGE_TIMER
, clockval
,
1432 clockval
= br_timer_value(&br
->gc_work
.timer
);
1433 if (nla_put_u64_64bit(skb
, IFLA_BR_GC_TIMER
, clockval
, IFLA_BR_PAD
))
1436 br_boolopt_multi_get(br
, &bm
);
1437 if (nla_put_u32(skb
, IFLA_BR_FORWARD_DELAY
, forward_delay
) ||
1438 nla_put_u32(skb
, IFLA_BR_HELLO_TIME
, hello_time
) ||
1439 nla_put_u32(skb
, IFLA_BR_MAX_AGE
, age_time
) ||
1440 nla_put_u32(skb
, IFLA_BR_AGEING_TIME
, ageing_time
) ||
1441 nla_put_u32(skb
, IFLA_BR_STP_STATE
, stp_enabled
) ||
1442 nla_put_u16(skb
, IFLA_BR_PRIORITY
, priority
) ||
1443 nla_put_u8(skb
, IFLA_BR_VLAN_FILTERING
, vlan_enabled
) ||
1444 nla_put_u16(skb
, IFLA_BR_GROUP_FWD_MASK
, br
->group_fwd_mask
) ||
1445 nla_put(skb
, IFLA_BR_BRIDGE_ID
, sizeof(struct ifla_bridge_id
),
1447 nla_put(skb
, IFLA_BR_ROOT_ID
, sizeof(struct ifla_bridge_id
),
1448 &br
->designated_root
) ||
1449 nla_put_u16(skb
, IFLA_BR_ROOT_PORT
, br
->root_port
) ||
1450 nla_put_u32(skb
, IFLA_BR_ROOT_PATH_COST
, br
->root_path_cost
) ||
1451 nla_put_u8(skb
, IFLA_BR_TOPOLOGY_CHANGE
, br
->topology_change
) ||
1452 nla_put_u8(skb
, IFLA_BR_TOPOLOGY_CHANGE_DETECTED
,
1453 br
->topology_change_detected
) ||
1454 nla_put(skb
, IFLA_BR_GROUP_ADDR
, ETH_ALEN
, br
->group_addr
) ||
1455 nla_put(skb
, IFLA_BR_MULTI_BOOLOPT
, sizeof(bm
), &bm
))
1458 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1459 if (nla_put_be16(skb
, IFLA_BR_VLAN_PROTOCOL
, br
->vlan_proto
) ||
1460 nla_put_u16(skb
, IFLA_BR_VLAN_DEFAULT_PVID
, br
->default_pvid
) ||
1461 nla_put_u8(skb
, IFLA_BR_VLAN_STATS_ENABLED
,
1462 br_opt_get(br
, BROPT_VLAN_STATS_ENABLED
)) ||
1463 nla_put_u8(skb
, IFLA_BR_VLAN_STATS_PER_PORT
,
1464 br_opt_get(br
, BROPT_VLAN_STATS_PER_PORT
)))
1467 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1468 if (nla_put_u8(skb
, IFLA_BR_MCAST_ROUTER
, br
->multicast_router
) ||
1469 nla_put_u8(skb
, IFLA_BR_MCAST_SNOOPING
,
1470 br_opt_get(br
, BROPT_MULTICAST_ENABLED
)) ||
1471 nla_put_u8(skb
, IFLA_BR_MCAST_QUERY_USE_IFADDR
,
1472 br_opt_get(br
, BROPT_MULTICAST_QUERY_USE_IFADDR
)) ||
1473 nla_put_u8(skb
, IFLA_BR_MCAST_QUERIER
,
1474 br_opt_get(br
, BROPT_MULTICAST_QUERIER
)) ||
1475 nla_put_u8(skb
, IFLA_BR_MCAST_STATS_ENABLED
,
1476 br_opt_get(br
, BROPT_MULTICAST_STATS_ENABLED
)) ||
1477 nla_put_u32(skb
, IFLA_BR_MCAST_HASH_ELASTICITY
, RHT_ELASTICITY
) ||
1478 nla_put_u32(skb
, IFLA_BR_MCAST_HASH_MAX
, br
->hash_max
) ||
1479 nla_put_u32(skb
, IFLA_BR_MCAST_LAST_MEMBER_CNT
,
1480 br
->multicast_last_member_count
) ||
1481 nla_put_u32(skb
, IFLA_BR_MCAST_STARTUP_QUERY_CNT
,
1482 br
->multicast_startup_query_count
) ||
1483 nla_put_u8(skb
, IFLA_BR_MCAST_IGMP_VERSION
,
1484 br
->multicast_igmp_version
))
1486 #if IS_ENABLED(CONFIG_IPV6)
1487 if (nla_put_u8(skb
, IFLA_BR_MCAST_MLD_VERSION
,
1488 br
->multicast_mld_version
))
1491 clockval
= jiffies_to_clock_t(br
->multicast_last_member_interval
);
1492 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_LAST_MEMBER_INTVL
, clockval
,
1495 clockval
= jiffies_to_clock_t(br
->multicast_membership_interval
);
1496 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_MEMBERSHIP_INTVL
, clockval
,
1499 clockval
= jiffies_to_clock_t(br
->multicast_querier_interval
);
1500 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_QUERIER_INTVL
, clockval
,
1503 clockval
= jiffies_to_clock_t(br
->multicast_query_interval
);
1504 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_QUERY_INTVL
, clockval
,
1507 clockval
= jiffies_to_clock_t(br
->multicast_query_response_interval
);
1508 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL
, clockval
,
1511 clockval
= jiffies_to_clock_t(br
->multicast_startup_query_interval
);
1512 if (nla_put_u64_64bit(skb
, IFLA_BR_MCAST_STARTUP_QUERY_INTVL
, clockval
,
1516 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1517 if (nla_put_u8(skb
, IFLA_BR_NF_CALL_IPTABLES
,
1518 br_opt_get(br
, BROPT_NF_CALL_IPTABLES
) ? 1 : 0) ||
1519 nla_put_u8(skb
, IFLA_BR_NF_CALL_IP6TABLES
,
1520 br_opt_get(br
, BROPT_NF_CALL_IP6TABLES
) ? 1 : 0) ||
1521 nla_put_u8(skb
, IFLA_BR_NF_CALL_ARPTABLES
,
1522 br_opt_get(br
, BROPT_NF_CALL_ARPTABLES
) ? 1 : 0))
1529 static size_t br_get_linkxstats_size(const struct net_device
*dev
, int attr
)
1531 struct net_bridge_port
*p
= NULL
;
1532 struct net_bridge_vlan_group
*vg
;
1533 struct net_bridge_vlan
*v
;
1534 struct net_bridge
*br
;
1538 case IFLA_STATS_LINK_XSTATS
:
1539 br
= netdev_priv(dev
);
1540 vg
= br_vlan_group(br
);
1542 case IFLA_STATS_LINK_XSTATS_SLAVE
:
1543 p
= br_port_get_rtnl(dev
);
1547 vg
= nbp_vlan_group(p
);
1554 /* we need to count all, even placeholder entries */
1555 list_for_each_entry(v
, &vg
->vlan_list
, vlist
)
1559 return numvls
* nla_total_size(sizeof(struct bridge_vlan_xstats
)) +
1560 nla_total_size(sizeof(struct br_mcast_stats
)) +
1564 static int br_fill_linkxstats(struct sk_buff
*skb
,
1565 const struct net_device
*dev
,
1566 int *prividx
, int attr
)
1568 struct nlattr
*nla __maybe_unused
;
1569 struct net_bridge_port
*p
= NULL
;
1570 struct net_bridge_vlan_group
*vg
;
1571 struct net_bridge_vlan
*v
;
1572 struct net_bridge
*br
;
1573 struct nlattr
*nest
;
1577 case IFLA_STATS_LINK_XSTATS
:
1578 br
= netdev_priv(dev
);
1579 vg
= br_vlan_group(br
);
1581 case IFLA_STATS_LINK_XSTATS_SLAVE
:
1582 p
= br_port_get_rtnl(dev
);
1586 vg
= nbp_vlan_group(p
);
1592 nest
= nla_nest_start_noflag(skb
, LINK_XSTATS_TYPE_BRIDGE
);
1599 pvid
= br_get_pvid(vg
);
1600 list_for_each_entry(v
, &vg
->vlan_list
, vlist
) {
1601 struct bridge_vlan_xstats vxi
;
1602 struct br_vlan_stats stats
;
1604 if (++vl_idx
< *prividx
)
1606 memset(&vxi
, 0, sizeof(vxi
));
1608 vxi
.flags
= v
->flags
;
1610 vxi
.flags
|= BRIDGE_VLAN_INFO_PVID
;
1611 br_vlan_get_stats(v
, &stats
);
1612 vxi
.rx_bytes
= stats
.rx_bytes
;
1613 vxi
.rx_packets
= stats
.rx_packets
;
1614 vxi
.tx_bytes
= stats
.tx_bytes
;
1615 vxi
.tx_packets
= stats
.tx_packets
;
1617 if (nla_put(skb
, BRIDGE_XSTATS_VLAN
, sizeof(vxi
), &vxi
))
1618 goto nla_put_failure
;
1622 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1623 if (++vl_idx
>= *prividx
) {
1624 nla
= nla_reserve_64bit(skb
, BRIDGE_XSTATS_MCAST
,
1625 sizeof(struct br_mcast_stats
),
1628 goto nla_put_failure
;
1629 br_multicast_get_stats(br
, p
, nla_data(nla
));
1634 nla
= nla_reserve_64bit(skb
, BRIDGE_XSTATS_STP
,
1635 sizeof(p
->stp_xstats
),
1638 goto nla_put_failure
;
1640 spin_lock_bh(&br
->lock
);
1641 memcpy(nla_data(nla
), &p
->stp_xstats
, sizeof(p
->stp_xstats
));
1642 spin_unlock_bh(&br
->lock
);
1645 nla_nest_end(skb
, nest
);
1651 nla_nest_end(skb
, nest
);
1657 static struct rtnl_af_ops br_af_ops __read_mostly
= {
1658 .family
= AF_BRIDGE
,
1659 .get_link_af_size
= br_get_link_af_size_filtered
,
1662 struct rtnl_link_ops br_link_ops __read_mostly
= {
1664 .priv_size
= sizeof(struct net_bridge
),
1665 .setup
= br_dev_setup
,
1666 .maxtype
= IFLA_BR_MAX
,
1667 .policy
= br_policy
,
1668 .validate
= br_validate
,
1669 .newlink
= br_dev_newlink
,
1670 .changelink
= br_changelink
,
1671 .dellink
= br_dev_delete
,
1672 .get_size
= br_get_size
,
1673 .fill_info
= br_fill_info
,
1674 .fill_linkxstats
= br_fill_linkxstats
,
1675 .get_linkxstats_size
= br_get_linkxstats_size
,
1677 .slave_maxtype
= IFLA_BRPORT_MAX
,
1678 .slave_policy
= br_port_policy
,
1679 .slave_changelink
= br_port_slave_changelink
,
1680 .get_slave_size
= br_port_get_slave_size
,
1681 .fill_slave_info
= br_port_fill_slave_info
,
1684 int __init
br_netlink_init(void)
1689 br_vlan_rtnl_init();
1690 rtnl_af_register(&br_af_ops
);
1692 err
= rtnl_link_register(&br_link_ops
);
1699 rtnl_af_unregister(&br_af_ops
);
1704 void br_netlink_fini(void)
1707 br_vlan_rtnl_uninit();
1708 rtnl_af_unregister(&br_af_ops
);
1709 rtnl_link_unregister(&br_link_ops
);