108 lines
2.5 KiB
C
108 lines
2.5 KiB
C
|
||
#ifndef LKH_HOOK_H
|
||
#define LKH_HOOK_H
|
||
|
||
static DEFINE_MUTEX(lkh_hook_mutex);
|
||
|
||
#define MAX_HOOK_COUNT 1024
|
||
|
||
/* 多核信息同步处理 */
|
||
#define lkh_entry_dereference(e) rcu_dereference_protected(e, lockdep_is_held(&lkh_hook_mutex))
|
||
|
||
/* 执行HOOK处理后的返回值 */
|
||
#define LKH_DROP 0
|
||
#define LKH_ACCEPT 1
|
||
#define LKH_STOLEN 2
|
||
#define LKH_QUEUE 3
|
||
#define LKH_REPEAT 4
|
||
#define LKH_STOP 5 /* Deprecated, for userspace nf_queue compatibility. */
|
||
|
||
/* 钩子函数调用位置 */
|
||
enum lkh_inet_hooks
|
||
{
|
||
LKH_INET_PRE_FORWARD,
|
||
LKH_INET_NUMHOOKS
|
||
};
|
||
|
||
|
||
/* 支持的协议类型 */
|
||
enum
|
||
{
|
||
LKH_PROTO_UNSPEC = 0,
|
||
LKH_PROTO_IPV4 = 1,
|
||
LKH_PROTO_IPV6 = 2,
|
||
LKH_PROTO_NUMPROTO,
|
||
};
|
||
|
||
struct lkh_hook_entries_rcu_head
|
||
{
|
||
struct rcu_head head;
|
||
void *allocation;
|
||
};
|
||
|
||
struct lkh_hook_state
|
||
{
|
||
unsigned int hook_stage;
|
||
u_int8_t pf;
|
||
struct net_device *in;
|
||
struct net_device *out;
|
||
struct sock *sk;
|
||
struct net *net;
|
||
};
|
||
|
||
typedef unsigned int lkh_hookfn(void *priv, struct sk_buff *skb, const struct lkh_hook_state *state);
|
||
|
||
struct lkh_hook_ops
|
||
{
|
||
/* User fills in from here down. */
|
||
lkh_hookfn *hook; /* 钩子函数 */
|
||
void *priv;
|
||
u_int8_t pf; /* 协议类型 IPv4、IPv6、brigde等 */
|
||
unsigned int hook_stage; /* 阶段ID，比如PRE_FORWARD等*/
|
||
int priority; /* 优先级 */
|
||
};
|
||
|
||
struct lkh_hook_entry
|
||
{
|
||
lkh_hookfn *hook;
|
||
void *priv;
|
||
};
|
||
|
||
/* 一种协议类型的hook集合，包括多个处理阶段 */
|
||
struct lkh_hook_entries
|
||
{
|
||
u_int8_t num_hook_entries;
|
||
struct lkh_hook_entry hooks[];
|
||
};
|
||
|
||
struct lkh_hook
|
||
{
|
||
struct list_head list;
|
||
void * net_ptr; /* 记录struct net 结构指针，用来查找对应的hook */
|
||
struct lkh_hook_entries __rcu *hooks_ipv4[LKH_INET_NUMHOOKS];
|
||
struct lkh_hook_entries __rcu *hooks_ipv6[LKH_INET_NUMHOOKS];
|
||
};
|
||
|
||
|
||
/* 句柄 */
|
||
struct lkh_hook_handle
|
||
{
|
||
struct list_head list;
|
||
unsigned int net_num; /* 网络命名空间数量 */
|
||
};
|
||
|
||
extern struct lkh_hook_handle g_lkh_hook_handle;
|
||
extern void lkh_hash_struct_show(void);
|
||
extern int lkh_register_net_hooks(struct net *net, const struct lkh_hook_ops *reg, unsigned int hookcount);
|
||
extern void lkh_unregister_net_hooks(struct net *net, const struct lkh_hook_ops *reg, unsigned int hookcount);
|
||
extern int lkh_hook(u_int8_t pf,
|
||
unsigned int hook_stage,
|
||
struct net *net,
|
||
struct sock *sk,
|
||
struct sk_buff *skb,
|
||
struct net_device *indev,
|
||
struct net_device *outdev);
|
||
|
||
#endif
|
||
|