sysctl_net_core.c 9.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436
  1. /* -*- linux-c -*-
  2. * sysctl_net_core.c: sysctl interface to net core subsystem.
  3. *
  4. * Begun April 1, 1996, Mike Shaver.
  5. * Added /proc/sys/net/core directory entry (empty =) ). [MS]
  6. */
  7. #include <linux/mm.h>
  8. #include <linux/sysctl.h>
  9. #include <linux/module.h>
  10. #include <linux/socket.h>
  11. #include <linux/netdevice.h>
  12. #include <linux/ratelimit.h>
  13. #include <linux/vmalloc.h>
  14. #include <linux/init.h>
  15. #include <linux/slab.h>
  16. #include <linux/kmemleak.h>
  17. #include <net/ip.h>
  18. #include <net/sock.h>
  19. #include <net/net_ratelimit.h>
  20. #include <net/busy_poll.h>
  21. #include <net/pkt_sched.h>
  22. static int zero = 0;
  23. static int one = 1;
  24. static int ushort_max = USHRT_MAX;
  25. static int min_sndbuf = SOCK_MIN_SNDBUF;
  26. static int min_rcvbuf = SOCK_MIN_RCVBUF;
  27. #ifdef CONFIG_RPS
  28. static int rps_sock_flow_sysctl(struct ctl_table *table, int write,
  29. void __user *buffer, size_t *lenp, loff_t *ppos)
  30. {
  31. unsigned int orig_size, size;
  32. int ret, i;
  33. struct ctl_table tmp = {
  34. .data = &size,
  35. .maxlen = sizeof(size),
  36. .mode = table->mode
  37. };
  38. struct rps_sock_flow_table *orig_sock_table, *sock_table;
  39. static DEFINE_MUTEX(sock_flow_mutex);
  40. mutex_lock(&sock_flow_mutex);
  41. orig_sock_table = rcu_dereference_protected(rps_sock_flow_table,
  42. lockdep_is_held(&sock_flow_mutex));
  43. size = orig_size = orig_sock_table ? orig_sock_table->mask + 1 : 0;
  44. ret = proc_dointvec(&tmp, write, buffer, lenp, ppos);
  45. if (write) {
  46. if (size) {
  47. if (size > 1<<30) {
  48. /* Enforce limit to prevent overflow */
  49. mutex_unlock(&sock_flow_mutex);
  50. return -EINVAL;
  51. }
  52. size = roundup_pow_of_two(size);
  53. if (size != orig_size) {
  54. sock_table =
  55. vmalloc(RPS_SOCK_FLOW_TABLE_SIZE(size));
  56. if (!sock_table) {
  57. mutex_unlock(&sock_flow_mutex);
  58. return -ENOMEM;
  59. }
  60. sock_table->mask = size - 1;
  61. } else
  62. sock_table = orig_sock_table;
  63. for (i = 0; i < size; i++)
  64. sock_table->ents[i] = RPS_NO_CPU;
  65. } else
  66. sock_table = NULL;
  67. if (sock_table != orig_sock_table) {
  68. rcu_assign_pointer(rps_sock_flow_table, sock_table);
  69. if (sock_table)
  70. static_key_slow_inc(&rps_needed);
  71. if (orig_sock_table) {
  72. static_key_slow_dec(&rps_needed);
  73. synchronize_rcu();
  74. vfree(orig_sock_table);
  75. }
  76. }
  77. }
  78. mutex_unlock(&sock_flow_mutex);
  79. return ret;
  80. }
  81. #endif /* CONFIG_RPS */
  82. #ifdef CONFIG_NET_FLOW_LIMIT
  83. static DEFINE_MUTEX(flow_limit_update_mutex);
  84. static int flow_limit_cpu_sysctl(struct ctl_table *table, int write,
  85. void __user *buffer, size_t *lenp,
  86. loff_t *ppos)
  87. {
  88. struct sd_flow_limit *cur;
  89. struct softnet_data *sd;
  90. cpumask_var_t mask;
  91. int i, len, ret = 0;
  92. if (!alloc_cpumask_var(&mask, GFP_KERNEL))
  93. return -ENOMEM;
  94. if (write) {
  95. ret = cpumask_parse_user(buffer, *lenp, mask);
  96. if (ret)
  97. goto done;
  98. mutex_lock(&flow_limit_update_mutex);
  99. len = sizeof(*cur) + netdev_flow_limit_table_len;
  100. for_each_possible_cpu(i) {
  101. sd = &per_cpu(softnet_data, i);
  102. cur = rcu_dereference_protected(sd->flow_limit,
  103. lockdep_is_held(&flow_limit_update_mutex));
  104. if (cur && !cpumask_test_cpu(i, mask)) {
  105. RCU_INIT_POINTER(sd->flow_limit, NULL);
  106. synchronize_rcu();
  107. kfree(cur);
  108. } else if (!cur && cpumask_test_cpu(i, mask)) {
  109. cur = kzalloc_node(len, GFP_KERNEL,
  110. cpu_to_node(i));
  111. if (!cur) {
  112. /* not unwinding previous changes */
  113. ret = -ENOMEM;
  114. goto write_unlock;
  115. }
  116. cur->num_buckets = netdev_flow_limit_table_len;
  117. rcu_assign_pointer(sd->flow_limit, cur);
  118. }
  119. }
  120. write_unlock:
  121. mutex_unlock(&flow_limit_update_mutex);
  122. } else {
  123. char kbuf[128];
  124. if (*ppos || !*lenp) {
  125. *lenp = 0;
  126. goto done;
  127. }
  128. cpumask_clear(mask);
  129. rcu_read_lock();
  130. for_each_possible_cpu(i) {
  131. sd = &per_cpu(softnet_data, i);
  132. if (rcu_dereference(sd->flow_limit))
  133. cpumask_set_cpu(i, mask);
  134. }
  135. rcu_read_unlock();
  136. len = min(sizeof(kbuf) - 1, *lenp);
  137. len = cpumask_scnprintf(kbuf, len, mask);
  138. if (!len) {
  139. *lenp = 0;
  140. goto done;
  141. }
  142. if (len < *lenp)
  143. kbuf[len++] = '\n';
  144. if (copy_to_user(buffer, kbuf, len)) {
  145. ret = -EFAULT;
  146. goto done;
  147. }
  148. *lenp = len;
  149. *ppos += len;
  150. }
  151. done:
  152. free_cpumask_var(mask);
  153. return ret;
  154. }
  155. static int flow_limit_table_len_sysctl(struct ctl_table *table, int write,
  156. void __user *buffer, size_t *lenp,
  157. loff_t *ppos)
  158. {
  159. unsigned int old, *ptr;
  160. int ret;
  161. mutex_lock(&flow_limit_update_mutex);
  162. ptr = table->data;
  163. old = *ptr;
  164. ret = proc_dointvec(table, write, buffer, lenp, ppos);
  165. if (!ret && write && !is_power_of_2(*ptr)) {
  166. *ptr = old;
  167. ret = -EINVAL;
  168. }
  169. mutex_unlock(&flow_limit_update_mutex);
  170. return ret;
  171. }
  172. #endif /* CONFIG_NET_FLOW_LIMIT */
  173. #ifdef CONFIG_NET_SCHED
  174. static int set_default_qdisc(struct ctl_table *table, int write,
  175. void __user *buffer, size_t *lenp, loff_t *ppos)
  176. {
  177. char id[IFNAMSIZ];
  178. struct ctl_table tbl = {
  179. .data = id,
  180. .maxlen = IFNAMSIZ,
  181. };
  182. int ret;
  183. qdisc_get_default(id, IFNAMSIZ);
  184. ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
  185. if (write && ret == 0)
  186. ret = qdisc_set_default(id);
  187. return ret;
  188. }
  189. #endif
  190. static struct ctl_table net_core_table[] = {
  191. #ifdef CONFIG_NET
  192. {
  193. .procname = "wmem_max",
  194. .data = &sysctl_wmem_max,
  195. .maxlen = sizeof(int),
  196. .mode = 0644,
  197. .proc_handler = proc_dointvec_minmax,
  198. .extra1 = &min_sndbuf,
  199. },
  200. {
  201. .procname = "rmem_max",
  202. .data = &sysctl_rmem_max,
  203. .maxlen = sizeof(int),
  204. .mode = 0644,
  205. .proc_handler = proc_dointvec_minmax,
  206. .extra1 = &min_rcvbuf,
  207. },
  208. {
  209. .procname = "wmem_default",
  210. .data = &sysctl_wmem_default,
  211. .maxlen = sizeof(int),
  212. .mode = 0644,
  213. .proc_handler = proc_dointvec_minmax,
  214. .extra1 = &min_sndbuf,
  215. },
  216. {
  217. .procname = "rmem_default",
  218. .data = &sysctl_rmem_default,
  219. .maxlen = sizeof(int),
  220. .mode = 0644,
  221. .proc_handler = proc_dointvec_minmax,
  222. .extra1 = &min_rcvbuf,
  223. },
  224. {
  225. .procname = "dev_weight",
  226. .data = &weight_p,
  227. .maxlen = sizeof(int),
  228. .mode = 0644,
  229. .proc_handler = proc_dointvec
  230. },
  231. {
  232. .procname = "netdev_max_backlog",
  233. .data = &netdev_max_backlog,
  234. .maxlen = sizeof(int),
  235. .mode = 0644,
  236. .proc_handler = proc_dointvec
  237. },
  238. #ifdef CONFIG_BPF_JIT
  239. {
  240. .procname = "bpf_jit_enable",
  241. .data = &bpf_jit_enable,
  242. .maxlen = sizeof(int),
  243. .mode = 0644,
  244. .proc_handler = proc_dointvec
  245. },
  246. #endif
  247. {
  248. .procname = "netdev_tstamp_prequeue",
  249. .data = &netdev_tstamp_prequeue,
  250. .maxlen = sizeof(int),
  251. .mode = 0644,
  252. .proc_handler = proc_dointvec
  253. },
  254. {
  255. .procname = "message_cost",
  256. .data = &net_ratelimit_state.interval,
  257. .maxlen = sizeof(int),
  258. .mode = 0644,
  259. .proc_handler = proc_dointvec_jiffies,
  260. },
  261. {
  262. .procname = "message_burst",
  263. .data = &net_ratelimit_state.burst,
  264. .maxlen = sizeof(int),
  265. .mode = 0644,
  266. .proc_handler = proc_dointvec,
  267. },
  268. {
  269. .procname = "optmem_max",
  270. .data = &sysctl_optmem_max,
  271. .maxlen = sizeof(int),
  272. .mode = 0644,
  273. .proc_handler = proc_dointvec
  274. },
  275. #ifdef CONFIG_RPS
  276. {
  277. .procname = "rps_sock_flow_entries",
  278. .maxlen = sizeof(int),
  279. .mode = 0644,
  280. .proc_handler = rps_sock_flow_sysctl
  281. },
  282. #endif
  283. #ifdef CONFIG_NET_FLOW_LIMIT
  284. {
  285. .procname = "flow_limit_cpu_bitmap",
  286. .mode = 0644,
  287. .proc_handler = flow_limit_cpu_sysctl
  288. },
  289. {
  290. .procname = "flow_limit_table_len",
  291. .data = &netdev_flow_limit_table_len,
  292. .maxlen = sizeof(int),
  293. .mode = 0644,
  294. .proc_handler = flow_limit_table_len_sysctl
  295. },
  296. #endif /* CONFIG_NET_FLOW_LIMIT */
  297. #ifdef CONFIG_NET_RX_BUSY_POLL
  298. {
  299. .procname = "busy_poll",
  300. .data = &sysctl_net_busy_poll,
  301. .maxlen = sizeof(unsigned int),
  302. .mode = 0644,
  303. .proc_handler = proc_dointvec
  304. },
  305. {
  306. .procname = "busy_read",
  307. .data = &sysctl_net_busy_read,
  308. .maxlen = sizeof(unsigned int),
  309. .mode = 0644,
  310. .proc_handler = proc_dointvec
  311. },
  312. #endif
  313. #ifdef CONFIG_NET_SCHED
  314. {
  315. .procname = "default_qdisc",
  316. .mode = 0644,
  317. .maxlen = IFNAMSIZ,
  318. .proc_handler = set_default_qdisc
  319. },
  320. #endif
  321. #endif /* CONFIG_NET */
  322. {
  323. .procname = "netdev_budget",
  324. .data = &netdev_budget,
  325. .maxlen = sizeof(int),
  326. .mode = 0644,
  327. .proc_handler = proc_dointvec
  328. },
  329. {
  330. .procname = "warnings",
  331. .data = &net_msg_warn,
  332. .maxlen = sizeof(int),
  333. .mode = 0644,
  334. .proc_handler = proc_dointvec
  335. },
  336. { }
  337. };
  338. static struct ctl_table netns_core_table[] = {
  339. {
  340. .procname = "somaxconn",
  341. .data = &init_net.core.sysctl_somaxconn,
  342. .maxlen = sizeof(int),
  343. .mode = 0644,
  344. .extra1 = &zero,
  345. .extra2 = &ushort_max,
  346. .proc_handler = proc_dointvec_minmax
  347. },
  348. { }
  349. };
  350. static __net_init int sysctl_core_net_init(struct net *net)
  351. {
  352. struct ctl_table *tbl;
  353. net->core.sysctl_somaxconn = SOMAXCONN;
  354. tbl = netns_core_table;
  355. if (!net_eq(net, &init_net)) {
  356. tbl = kmemdup(tbl, sizeof(netns_core_table), GFP_KERNEL);
  357. if (tbl == NULL)
  358. goto err_dup;
  359. tbl[0].data = &net->core.sysctl_somaxconn;
  360. /* Don't export any sysctls to unprivileged users */
  361. if (net->user_ns != &init_user_ns) {
  362. tbl[0].procname = NULL;
  363. }
  364. }
  365. net->core.sysctl_hdr = register_net_sysctl(net, "net/core", tbl);
  366. if (net->core.sysctl_hdr == NULL)
  367. goto err_reg;
  368. return 0;
  369. err_reg:
  370. if (tbl != netns_core_table)
  371. kfree(tbl);
  372. err_dup:
  373. return -ENOMEM;
  374. }
  375. static __net_exit void sysctl_core_net_exit(struct net *net)
  376. {
  377. struct ctl_table *tbl;
  378. tbl = net->core.sysctl_hdr->ctl_table_arg;
  379. unregister_net_sysctl_table(net->core.sysctl_hdr);
  380. BUG_ON(tbl == netns_core_table);
  381. kfree(tbl);
  382. }
  383. static __net_initdata struct pernet_operations sysctl_core_ops = {
  384. .init = sysctl_core_net_init,
  385. .exit = sysctl_core_net_exit,
  386. };
  387. static __init int sysctl_core_init(void)
  388. {
  389. register_net_sysctl(&init_net, "net/core", net_core_table);
  390. return register_pernet_subsys(&sysctl_core_ops);
  391. }
  392. fs_initcall(sysctl_core_init);