|
version 1.6, 2022/07/15 09:19:25
|
version 1.9, 2022/08/10 00:03:50
|
|
Line 6
|
Line 6
|
| |
|
| |
|
| static int |
static int |
| fwsync_add_state_4(const struct fws_proto *pkt) | fwsync_add_state_4(struct ipfw_flow_id *fid, u_int ruleid, u_short rulenum, |
| | u_short kidx, u_char cmdtype) |
| { |
{ |
| |
struct ip_fw *rule = NULL; |
| |
|
| DTRACE(); |
DTRACE(); |
| |
|
| return 0; | return ipfw_dyn_install_sync_state(fid, rule, ruleid, rulenum, kidx, cmdtype); |
| } |
} |
| |
|
| static int |
static int |
| fwsync_add_state_6(const struct fws_proto *pkt) | fwsync_add_state_6(struct ipfw_flow_id *fid, u_int ruleid, u_short rulenum, |
| | u_short kidx, u_char cmdtype) |
| { |
{ |
| DTRACE(); |
DTRACE(); |
| |
|
|
Line 24 fwsync_add_state_6(const struct fws_proto *pkt)
|
Line 28 fwsync_add_state_6(const struct fws_proto *pkt)
|
| int |
int |
| fwsync_add_state(const struct fws_proto *pkt) |
fwsync_add_state(const struct fws_proto *pkt) |
| { |
{ |
| |
struct fws_sndpkt *p; |
| |
|
| DTRACE(); |
DTRACE(); |
| |
|
| if (pkt->fws_addrtype == 4) | if (!pkt || pkt->fws_addrtype == 1) |
| fwsync_add_state_4(pkt); | return 0; /* skip ethernet packet */ |
| else if (pkt->fws_addrtype == 6) | |
| fwsync_add_state_6(pkt); | |
| else | |
| return EINVAL; | |
| |
|
| |
p = malloc(sizeof(struct fws_sndpkt), M_FWSYNC, M_NOWAIT | M_ZERO); |
| |
if (!p) { |
| |
return ENOMEM; |
| |
} else |
| |
memcpy(&p->sp_proto, pkt, sizeof(struct fws_proto)); |
| |
|
| |
mtx_lock(&fws_mtx_u); |
| |
TAILQ_INSERT_TAIL(&fwsync_updpkt, p, sp_next); |
| |
mtx_unlock(&fws_mtx_u); |
| return 0; |
return 0; |
| } |
} |
| |
|
| |
|
| int |
int |
| fwsync_add_alias(const struct fws_proto *pkt) |
fwsync_add_alias(const struct fws_proto *pkt) |
| { |
{ |
|
Line 54 fwsync_sndpkt_handler(void *context, int pending)
|
Line 66 fwsync_sndpkt_handler(void *context, int pending)
|
| |
|
| DTRACE(); |
DTRACE(); |
| |
|
| printf("pending=%d\n", pending); |
|
| |
|
| do { |
do { |
| mtx_lock(&fws_mtx_c); |
mtx_lock(&fws_mtx_c); |
| pkt = TAILQ_FIRST(&fwsync_sndpkt); |
pkt = TAILQ_FIRST(&fwsync_sndpkt); |
|
Line 115 out:
|
Line 125 out:
|
| } |
} |
| |
|
| int |
int |
| fwsync_state_handler(const void *arg) | fwsync_state_handler(const void *arg, const void *extdata) |
| { |
{ |
| const struct ipfw_flow_id *pkt = arg; |
const struct ipfw_flow_id *pkt = arg; |
| |
const struct ipfw_dyn_hook_extdata *edata = extdata; |
| struct fws_proto *spkt; |
struct fws_proto *spkt; |
| struct fws_sndpkt *p; |
struct fws_sndpkt *p; |
| |
|
|
Line 137 fwsync_state_handler(const void *arg)
|
Line 148 fwsync_state_handler(const void *arg)
|
| |
|
| spkt->fws_version = FWS_PKTVER_STATE; |
spkt->fws_version = FWS_PKTVER_STATE; |
| spkt->fws_fib = pkt->fib; |
spkt->fws_fib = pkt->fib; |
| |
spkt->fws_cmdtype = edata->cmdtype; |
| |
spkt->fws_kidx = edata->kidx; |
| |
spkt->fws_ruleid = edata->ruleid; |
| |
spkt->fws_rulenum = edata->rulenum; |
| spkt->fws_proto = pkt->proto; |
spkt->fws_proto = pkt->proto; |
| spkt->fws_addrtype = pkt->addr_type; |
spkt->fws_addrtype = pkt->addr_type; |
| spkt->fws_sport = pkt->src_port; |
spkt->fws_sport = pkt->src_port; |
|
Line 168 fwsync_state_handler(const void *arg)
|
Line 183 fwsync_state_handler(const void *arg)
|
| } |
} |
| |
|
| int |
int |
| fwsync_alias_handler(const void *arg) | fwsync_alias_handler(const void *arg, const void *extdata) |
| { |
{ |
| const struct alias_link *lnk = arg; |
const struct alias_link *lnk = arg; |
| struct fws_proto *spkt; |
struct fws_proto *spkt; |
|
Line 205 fwsync_alias_handler(const void *arg)
|
Line 220 fwsync_alias_handler(const void *arg)
|
| mtx_unlock(&fws_mtx_c); |
mtx_unlock(&fws_mtx_c); |
| |
|
| taskqueue_enqueue(fws_tq, &fws_sndpkt_task); |
taskqueue_enqueue(fws_tq, &fws_sndpkt_task); |
| |
return 0; |
| |
} |
| |
|
| |
int |
| |
fwsync_state_sync(const void *arg, const void *extdata) |
| |
{ |
| |
struct fws_sndpkt *pkt; |
| |
struct ipfw_flow_id fid; |
| |
|
| |
DTRACE(); |
| |
|
| |
mtx_lock(&fws_mtx_u); |
| |
pkt = TAILQ_FIRST(&fwsync_updpkt); |
| |
if (pkt) |
| |
TAILQ_REMOVE(&fwsync_updpkt, pkt, sp_next); |
| |
mtx_unlock(&fws_mtx_u); |
| |
|
| |
if (!pkt) /* update queue is empty */ |
| |
return 0; |
| |
|
| |
if (!(fws_cfg.cfg.on & CFG_SYNC_EDGE)) { |
| |
free(pkt, M_FWSYNC); |
| |
return EAGAIN; |
| |
} |
| |
|
| |
memset(&fid, 0, sizeof fid); |
| |
fid.fib = pkt->sp_proto.fws_fib; |
| |
fid.proto = pkt->sp_proto.fws_proto; |
| |
fid.addr_type = pkt->sp_proto.fws_addrtype; |
| |
fid.src_port = pkt->sp_proto.fws_sport; |
| |
fid.dst_port = pkt->sp_proto.fws_dport; |
| |
switch (pkt->sp_proto.fws_addrtype) { |
| |
case 4: |
| |
fid.src_ip = pkt->sp_proto.fws_saddr.s_addr; |
| |
fid.dst_ip = pkt->sp_proto.fws_daddr.s_addr; |
| |
break; |
| |
case 6: |
| |
memcpy(&fid.src_ip6, &pkt->sp_proto.fws_saddr6, sizeof fid.src_ip6); |
| |
memcpy(&fid.dst_ip6, &pkt->sp_proto.fws_daddr6, sizeof fid.dst_ip6); |
| |
fid.flow_id6 = pkt->sp_proto.fws_scopeid; |
| |
break; |
| |
default: |
| |
free(pkt, M_FWSYNC); |
| |
return EINVAL; |
| |
} |
| |
|
| |
if (pkt->sp_proto.fws_addrtype == 4) |
| |
fwsync_add_state_4(&fid, pkt->sp_proto.fws_ruleid, pkt->sp_proto.fws_rulenum, |
| |
pkt->sp_proto.fws_kidx, pkt->sp_proto.fws_cmdtype); |
| |
else if (pkt->sp_proto.fws_addrtype == 6) |
| |
fwsync_add_state_6(&fid, pkt->sp_proto.fws_ruleid, pkt->sp_proto.fws_rulenum, |
| |
pkt->sp_proto.fws_kidx, pkt->sp_proto.fws_cmdtype); |
| |
|
| |
free(pkt, M_FWSYNC); |
| return 0; |
return 0; |
| } |
} |