1 #include <linux/kernel.h>
2 #include <linux/netdevice.h>
3 #include <linux/rtnetlink.h>
4 #include <linux/slab.h>
5 #include <net/switchdev.h>
7 #include "br_private.h"
8 #include "br_private_tunnel.h"
10 static inline int br_vlan_cmp(struct rhashtable_compare_arg *arg,
13 const struct net_bridge_vlan *vle = ptr;
14 u16 vid = *(u16 *)arg->key;
16 return vle->vid != vid;
19 static const struct rhashtable_params br_vlan_rht_params = {
20 .head_offset = offsetof(struct net_bridge_vlan, vnode),
21 .key_offset = offsetof(struct net_bridge_vlan, vid),
22 .key_len = sizeof(u16),
25 .max_size = VLAN_N_VID,
26 .obj_cmpfn = br_vlan_cmp,
27 .automatic_shrinking = true,
30 static struct net_bridge_vlan *br_vlan_lookup(struct rhashtable *tbl, u16 vid)
32 return rhashtable_lookup_fast(tbl, &vid, br_vlan_rht_params);
35 static bool __vlan_add_pvid(struct net_bridge_vlan_group *vg, u16 vid)
46 static bool __vlan_delete_pvid(struct net_bridge_vlan_group *vg, u16 vid)
57 /* return true if anything changed, false otherwise */
58 static bool __vlan_add_flags(struct net_bridge_vlan *v, u16 flags)
60 struct net_bridge_vlan_group *vg;
61 u16 old_flags = v->flags;
64 if (br_vlan_is_master(v))
65 vg = br_vlan_group(v->br);
67 vg = nbp_vlan_group(v->port);
69 if (flags & BRIDGE_VLAN_INFO_PVID)
70 ret = __vlan_add_pvid(vg, v->vid);
72 ret = __vlan_delete_pvid(vg, v->vid);
74 if (flags & BRIDGE_VLAN_INFO_UNTAGGED)
75 v->flags |= BRIDGE_VLAN_INFO_UNTAGGED;
77 v->flags &= ~BRIDGE_VLAN_INFO_UNTAGGED;
79 return ret || !!(old_flags ^ v->flags);
82 static int __vlan_vid_add(struct net_device *dev, struct net_bridge *br,
87 /* Try switchdev op first. In case it is not supported, fallback to
90 err = br_switchdev_port_vlan_add(dev, vid, flags);
91 if (err == -EOPNOTSUPP)
92 return vlan_vid_add(dev, br->vlan_proto, vid);
96 static void __vlan_add_list(struct net_bridge_vlan *v)
98 struct net_bridge_vlan_group *vg;
99 struct list_head *headp, *hpos;
100 struct net_bridge_vlan *vent;
102 if (br_vlan_is_master(v))
103 vg = br_vlan_group(v->br);
105 vg = nbp_vlan_group(v->port);
107 headp = &vg->vlan_list;
108 list_for_each_prev(hpos, headp) {
109 vent = list_entry(hpos, struct net_bridge_vlan, vlist);
110 if (v->vid < vent->vid)
115 list_add_rcu(&v->vlist, hpos);
118 static void __vlan_del_list(struct net_bridge_vlan *v)
120 list_del_rcu(&v->vlist);
123 static int __vlan_vid_del(struct net_device *dev, struct net_bridge *br,
128 /* Try switchdev op first. In case it is not supported, fallback to
131 err = br_switchdev_port_vlan_del(dev, vid);
132 if (err == -EOPNOTSUPP) {
133 vlan_vid_del(dev, br->vlan_proto, vid);
139 /* Returns a master vlan, if it didn't exist it gets created. In all cases a
140 * a reference is taken to the master vlan before returning.
142 static struct net_bridge_vlan *br_vlan_get_master(struct net_bridge *br, u16 vid)
144 struct net_bridge_vlan_group *vg;
145 struct net_bridge_vlan *masterv;
147 vg = br_vlan_group(br);
148 masterv = br_vlan_find(vg, vid);
152 /* missing global ctx, create it now */
153 if (br_vlan_add(br, vid, 0, &changed))
155 masterv = br_vlan_find(vg, vid);
156 if (WARN_ON(!masterv))
158 refcount_set(&masterv->refcnt, 1);
161 refcount_inc(&masterv->refcnt);
166 static void br_master_vlan_rcu_free(struct rcu_head *rcu)
168 struct net_bridge_vlan *v;
170 v = container_of(rcu, struct net_bridge_vlan, rcu);
171 WARN_ON(!br_vlan_is_master(v));
172 free_percpu(v->stats);
177 static void br_vlan_put_master(struct net_bridge_vlan *masterv)
179 struct net_bridge_vlan_group *vg;
181 if (!br_vlan_is_master(masterv))
184 vg = br_vlan_group(masterv->br);
185 if (refcount_dec_and_test(&masterv->refcnt)) {
186 rhashtable_remove_fast(&vg->vlan_hash,
187 &masterv->vnode, br_vlan_rht_params);
188 __vlan_del_list(masterv);
189 call_rcu(&masterv->rcu, br_master_vlan_rcu_free);
193 static void nbp_vlan_rcu_free(struct rcu_head *rcu)
195 struct net_bridge_vlan *v;
197 v = container_of(rcu, struct net_bridge_vlan, rcu);
198 WARN_ON(br_vlan_is_master(v));
199 /* if we had per-port stats configured then free them here */
200 if (v->brvlan->stats != v->stats)
201 free_percpu(v->stats);
206 /* This is the shared VLAN add function which works for both ports and bridge
207 * devices. There are four possible calls to this function in terms of the
209 * 1. vlan is being added on a port (no master flags, global entry exists)
210 * 2. vlan is being added on a bridge (both master and brentry flags)
211 * 3. vlan is being added on a port, but a global entry didn't exist which
212 * is being created right now (master flag set, brentry flag unset), the
213 * global entry is used for global per-vlan features, but not for filtering
214 * 4. same as 3 but with both master and brentry flags set so the entry
215 * will be used for filtering in both the port and the bridge
217 static int __vlan_add(struct net_bridge_vlan *v, u16 flags)
219 struct net_bridge_vlan *masterv = NULL;
220 struct net_bridge_port *p = NULL;
221 struct net_bridge_vlan_group *vg;
222 struct net_device *dev;
223 struct net_bridge *br;
226 if (br_vlan_is_master(v)) {
229 vg = br_vlan_group(br);
234 vg = nbp_vlan_group(p);
238 /* Add VLAN to the device filter if it is supported.
239 * This ensures tagged traffic enters the bridge when
240 * promiscuous mode is disabled by br_manage_promisc().
242 err = __vlan_vid_add(dev, br, v->vid, flags);
246 /* need to work on the master vlan too */
247 if (flags & BRIDGE_VLAN_INFO_MASTER) {
250 err = br_vlan_add(br, v->vid,
251 flags | BRIDGE_VLAN_INFO_BRENTRY,
257 masterv = br_vlan_get_master(br, v->vid);
261 if (br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)) {
262 v->stats = netdev_alloc_pcpu_stats(struct br_vlan_stats);
268 v->stats = masterv->stats;
271 err = br_switchdev_port_vlan_add(dev, v->vid, flags);
272 if (err && err != -EOPNOTSUPP)
276 /* Add the dev mac and count the vlan only if it's usable */
277 if (br_vlan_should_use(v)) {
278 err = br_fdb_insert(br, p, dev->dev_addr, v->vid);
280 br_err(br, "failed insert local address into bridge forwarding table\n");
286 err = rhashtable_lookup_insert_fast(&vg->vlan_hash, &v->vnode,
292 __vlan_add_flags(v, flags);
297 if (br_vlan_should_use(v)) {
298 br_fdb_find_delete_local(br, p, dev->dev_addr, v->vid);
304 __vlan_vid_del(dev, br, v->vid);
306 br_vlan_put_master(masterv);
310 br_switchdev_port_vlan_del(dev, v->vid);
316 static int __vlan_del(struct net_bridge_vlan *v)
318 struct net_bridge_vlan *masterv = v;
319 struct net_bridge_vlan_group *vg;
320 struct net_bridge_port *p = NULL;
323 if (br_vlan_is_master(v)) {
324 vg = br_vlan_group(v->br);
327 vg = nbp_vlan_group(v->port);
331 __vlan_delete_pvid(vg, v->vid);
333 err = __vlan_vid_del(p->dev, p->br, v->vid);
337 err = br_switchdev_port_vlan_del(v->br->dev, v->vid);
338 if (err && err != -EOPNOTSUPP)
343 if (br_vlan_should_use(v)) {
344 v->flags &= ~BRIDGE_VLAN_INFO_BRENTRY;
349 vlan_tunnel_info_del(vg, v);
350 rhashtable_remove_fast(&vg->vlan_hash, &v->vnode,
353 call_rcu(&v->rcu, nbp_vlan_rcu_free);
356 br_vlan_put_master(masterv);
361 static void __vlan_group_free(struct net_bridge_vlan_group *vg)
363 WARN_ON(!list_empty(&vg->vlan_list));
364 rhashtable_destroy(&vg->vlan_hash);
365 vlan_tunnel_deinit(vg);
369 static void __vlan_flush(struct net_bridge_vlan_group *vg)
371 struct net_bridge_vlan *vlan, *tmp;
373 __vlan_delete_pvid(vg, vg->pvid);
374 list_for_each_entry_safe(vlan, tmp, &vg->vlan_list, vlist)
378 struct sk_buff *br_handle_vlan(struct net_bridge *br,
379 const struct net_bridge_port *p,
380 struct net_bridge_vlan_group *vg,
383 struct br_vlan_stats *stats;
384 struct net_bridge_vlan *v;
387 /* If this packet was not filtered at input, let it pass */
388 if (!BR_INPUT_SKB_CB(skb)->vlan_filtered)
391 /* At this point, we know that the frame was filtered and contains
392 * a valid vlan id. If the vlan id has untagged flag set,
393 * send untagged; otherwise, send tagged.
395 br_vlan_get_tag(skb, &vid);
396 v = br_vlan_find(vg, vid);
397 /* Vlan entry must be configured at this point. The
398 * only exception is the bridge is set in promisc mode and the
399 * packet is destined for the bridge device. In this case
400 * pass the packet as is.
402 if (!v || !br_vlan_should_use(v)) {
403 if ((br->dev->flags & IFF_PROMISC) && skb->dev == br->dev) {
410 if (br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) {
411 stats = this_cpu_ptr(v->stats);
412 u64_stats_update_begin(&stats->syncp);
413 stats->tx_bytes += skb->len;
415 u64_stats_update_end(&stats->syncp);
418 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
421 if (p && (p->flags & BR_VLAN_TUNNEL) &&
422 br_handle_egress_vlan_tunnel(skb, v)) {
430 /* Called under RCU */
431 static bool __allowed_ingress(const struct net_bridge *br,
432 struct net_bridge_vlan_group *vg,
433 struct sk_buff *skb, u16 *vid)
435 struct br_vlan_stats *stats;
436 struct net_bridge_vlan *v;
439 BR_INPUT_SKB_CB(skb)->vlan_filtered = true;
440 /* If vlan tx offload is disabled on bridge device and frame was
441 * sent from vlan device on the bridge device, it does not have
442 * HW accelerated vlan tag.
444 if (unlikely(!skb_vlan_tag_present(skb) &&
445 skb->protocol == br->vlan_proto)) {
446 skb = skb_vlan_untag(skb);
451 if (!br_vlan_get_tag(skb, vid)) {
453 if (skb->vlan_proto != br->vlan_proto) {
454 /* Protocol-mismatch, empty out vlan_tci for new tag */
455 skb_push(skb, ETH_HLEN);
456 skb = vlan_insert_tag_set_proto(skb, skb->vlan_proto,
457 skb_vlan_tag_get(skb));
461 skb_pull(skb, ETH_HLEN);
462 skb_reset_mac_len(skb);
474 u16 pvid = br_get_pvid(vg);
476 /* Frame had a tag with VID 0 or did not have a tag.
477 * See if pvid is set on this port. That tells us which
478 * vlan untagged or priority-tagged traffic belongs to.
483 /* PVID is set on this port. Any untagged or priority-tagged
484 * ingress frame is considered to belong to this vlan.
488 /* Untagged Frame. */
489 __vlan_hwaccel_put_tag(skb, br->vlan_proto, pvid);
491 /* Priority-tagged Frame.
492 * At this point, We know that skb->vlan_tci had
493 * VLAN_TAG_PRESENT bit and its VID field was 0x000.
494 * We update only VID field and preserve PCP field.
496 skb->vlan_tci |= pvid;
498 /* if stats are disabled we can avoid the lookup */
499 if (!br_opt_get(br, BROPT_VLAN_STATS_ENABLED))
502 v = br_vlan_find(vg, *vid);
503 if (!v || !br_vlan_should_use(v))
506 if (br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) {
507 stats = this_cpu_ptr(v->stats);
508 u64_stats_update_begin(&stats->syncp);
509 stats->rx_bytes += skb->len;
511 u64_stats_update_end(&stats->syncp);
521 bool br_allowed_ingress(const struct net_bridge *br,
522 struct net_bridge_vlan_group *vg, struct sk_buff *skb,
525 /* If VLAN filtering is disabled on the bridge, all packets are
528 if (!br_opt_get(br, BROPT_VLAN_ENABLED)) {
529 BR_INPUT_SKB_CB(skb)->vlan_filtered = false;
533 return __allowed_ingress(br, vg, skb, vid);
536 /* Called under RCU. */
537 bool br_allowed_egress(struct net_bridge_vlan_group *vg,
538 const struct sk_buff *skb)
540 const struct net_bridge_vlan *v;
543 /* If this packet was not filtered at input, let it pass */
544 if (!BR_INPUT_SKB_CB(skb)->vlan_filtered)
547 br_vlan_get_tag(skb, &vid);
548 v = br_vlan_find(vg, vid);
549 if (v && br_vlan_should_use(v))
555 /* Called under RCU */
556 bool br_should_learn(struct net_bridge_port *p, struct sk_buff *skb, u16 *vid)
558 struct net_bridge_vlan_group *vg;
559 struct net_bridge *br = p->br;
561 /* If filtering was disabled at input, let it pass. */
562 if (!br_opt_get(br, BROPT_VLAN_ENABLED))
565 vg = nbp_vlan_group_rcu(p);
566 if (!vg || !vg->num_vlans)
569 if (!br_vlan_get_tag(skb, vid) && skb->vlan_proto != br->vlan_proto)
573 *vid = br_get_pvid(vg);
580 if (br_vlan_find(vg, *vid))
586 static int br_vlan_add_existing(struct net_bridge *br,
587 struct net_bridge_vlan_group *vg,
588 struct net_bridge_vlan *vlan,
589 u16 flags, bool *changed)
593 err = br_switchdev_port_vlan_add(br->dev, vlan->vid, flags);
594 if (err && err != -EOPNOTSUPP)
597 if (!br_vlan_is_brentry(vlan)) {
598 /* Trying to change flags of non-existent bridge vlan */
599 if (!(flags & BRIDGE_VLAN_INFO_BRENTRY)) {
603 /* It was only kept for port vlans, now make it real */
604 err = br_fdb_insert(br, NULL, br->dev->dev_addr,
607 br_err(br, "failed to insert local address into bridge forwarding table\n");
611 refcount_inc(&vlan->refcnt);
612 vlan->flags |= BRIDGE_VLAN_INFO_BRENTRY;
617 if (__vlan_add_flags(vlan, flags))
624 br_switchdev_port_vlan_del(br->dev, vlan->vid);
628 /* Must be protected by RTNL.
629 * Must be called with vid in range from 1 to 4094 inclusive.
630 * changed must be true only if the vlan was created or updated
632 int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags, bool *changed)
634 struct net_bridge_vlan_group *vg;
635 struct net_bridge_vlan *vlan;
641 vg = br_vlan_group(br);
642 vlan = br_vlan_find(vg, vid);
644 return br_vlan_add_existing(br, vg, vlan, flags, changed);
646 vlan = kzalloc(sizeof(*vlan), GFP_KERNEL);
650 vlan->stats = netdev_alloc_pcpu_stats(struct br_vlan_stats);
656 vlan->flags = flags | BRIDGE_VLAN_INFO_MASTER;
657 vlan->flags &= ~BRIDGE_VLAN_INFO_PVID;
659 if (flags & BRIDGE_VLAN_INFO_BRENTRY)
660 refcount_set(&vlan->refcnt, 1);
661 ret = __vlan_add(vlan, flags);
663 free_percpu(vlan->stats);
672 /* Must be protected by RTNL.
673 * Must be called with vid in range from 1 to 4094 inclusive.
675 int br_vlan_delete(struct net_bridge *br, u16 vid)
677 struct net_bridge_vlan_group *vg;
678 struct net_bridge_vlan *v;
682 vg = br_vlan_group(br);
683 v = br_vlan_find(vg, vid);
684 if (!v || !br_vlan_is_brentry(v))
687 br_fdb_find_delete_local(br, NULL, br->dev->dev_addr, vid);
688 br_fdb_delete_by_port(br, NULL, vid, 0);
690 vlan_tunnel_info_del(vg, v);
692 return __vlan_del(v);
695 void br_vlan_flush(struct net_bridge *br)
697 struct net_bridge_vlan_group *vg;
701 vg = br_vlan_group(br);
703 RCU_INIT_POINTER(br->vlgrp, NULL);
705 __vlan_group_free(vg);
708 struct net_bridge_vlan *br_vlan_find(struct net_bridge_vlan_group *vg, u16 vid)
713 return br_vlan_lookup(&vg->vlan_hash, vid);
716 /* Must be protected by RTNL. */
717 static void recalculate_group_addr(struct net_bridge *br)
719 if (br_opt_get(br, BROPT_GROUP_ADDR_SET))
722 spin_lock_bh(&br->lock);
723 if (!br_opt_get(br, BROPT_VLAN_ENABLED) ||
724 br->vlan_proto == htons(ETH_P_8021Q)) {
725 /* Bridge Group Address */
726 br->group_addr[5] = 0x00;
727 } else { /* vlan_enabled && ETH_P_8021AD */
728 /* Provider Bridge Group Address */
729 br->group_addr[5] = 0x08;
731 spin_unlock_bh(&br->lock);
734 /* Must be protected by RTNL. */
735 void br_recalculate_fwd_mask(struct net_bridge *br)
737 if (!br_opt_get(br, BROPT_VLAN_ENABLED) ||
738 br->vlan_proto == htons(ETH_P_8021Q))
739 br->group_fwd_mask_required = BR_GROUPFWD_DEFAULT;
740 else /* vlan_enabled && ETH_P_8021AD */
741 br->group_fwd_mask_required = BR_GROUPFWD_8021AD &
742 ~(1u << br->group_addr[5]);
745 int __br_vlan_filter_toggle(struct net_bridge *br, unsigned long val)
747 struct switchdev_attr attr = {
749 .id = SWITCHDEV_ATTR_ID_BRIDGE_VLAN_FILTERING,
750 .flags = SWITCHDEV_F_SKIP_EOPNOTSUPP,
751 .u.vlan_filtering = val,
755 if (br_opt_get(br, BROPT_VLAN_ENABLED) == !!val)
758 err = switchdev_port_attr_set(br->dev, &attr);
759 if (err && err != -EOPNOTSUPP)
762 br_opt_toggle(br, BROPT_VLAN_ENABLED, !!val);
763 br_manage_promisc(br);
764 recalculate_group_addr(br);
765 br_recalculate_fwd_mask(br);
770 int br_vlan_filter_toggle(struct net_bridge *br, unsigned long val)
772 return __br_vlan_filter_toggle(br, val);
775 bool br_vlan_enabled(const struct net_device *dev)
777 struct net_bridge *br = netdev_priv(dev);
779 return br_opt_get(br, BROPT_VLAN_ENABLED);
781 EXPORT_SYMBOL_GPL(br_vlan_enabled);
783 int __br_vlan_set_proto(struct net_bridge *br, __be16 proto)
786 struct net_bridge_port *p;
787 struct net_bridge_vlan *vlan;
788 struct net_bridge_vlan_group *vg;
791 if (br->vlan_proto == proto)
794 /* Add VLANs for the new proto to the device filter. */
795 list_for_each_entry(p, &br->port_list, list) {
796 vg = nbp_vlan_group(p);
797 list_for_each_entry(vlan, &vg->vlan_list, vlist) {
798 err = vlan_vid_add(p->dev, proto, vlan->vid);
804 oldproto = br->vlan_proto;
805 br->vlan_proto = proto;
807 recalculate_group_addr(br);
808 br_recalculate_fwd_mask(br);
810 /* Delete VLANs for the old proto from the device filter. */
811 list_for_each_entry(p, &br->port_list, list) {
812 vg = nbp_vlan_group(p);
813 list_for_each_entry(vlan, &vg->vlan_list, vlist)
814 vlan_vid_del(p->dev, oldproto, vlan->vid);
820 list_for_each_entry_continue_reverse(vlan, &vg->vlan_list, vlist)
821 vlan_vid_del(p->dev, proto, vlan->vid);
823 list_for_each_entry_continue_reverse(p, &br->port_list, list) {
824 vg = nbp_vlan_group(p);
825 list_for_each_entry(vlan, &vg->vlan_list, vlist)
826 vlan_vid_del(p->dev, proto, vlan->vid);
832 int br_vlan_set_proto(struct net_bridge *br, unsigned long val)
834 if (val != ETH_P_8021Q && val != ETH_P_8021AD)
835 return -EPROTONOSUPPORT;
837 return __br_vlan_set_proto(br, htons(val));
840 int br_vlan_set_stats(struct net_bridge *br, unsigned long val)
845 br_opt_toggle(br, BROPT_VLAN_STATS_ENABLED, !!val);
854 int br_vlan_set_stats_per_port(struct net_bridge *br, unsigned long val)
856 struct net_bridge_port *p;
858 /* allow to change the option if there are no port vlans configured */
859 list_for_each_entry(p, &br->port_list, list) {
860 struct net_bridge_vlan_group *vg = nbp_vlan_group(p);
869 br_opt_toggle(br, BROPT_VLAN_STATS_PER_PORT, !!val);
878 static bool vlan_default_pvid(struct net_bridge_vlan_group *vg, u16 vid)
880 struct net_bridge_vlan *v;
885 v = br_vlan_lookup(&vg->vlan_hash, vid);
886 if (v && br_vlan_should_use(v) &&
887 (v->flags & BRIDGE_VLAN_INFO_UNTAGGED))
893 static void br_vlan_disable_default_pvid(struct net_bridge *br)
895 struct net_bridge_port *p;
896 u16 pvid = br->default_pvid;
898 /* Disable default_pvid on all ports where it is still
901 if (vlan_default_pvid(br_vlan_group(br), pvid))
902 br_vlan_delete(br, pvid);
904 list_for_each_entry(p, &br->port_list, list) {
905 if (vlan_default_pvid(nbp_vlan_group(p), pvid))
906 nbp_vlan_delete(p, pvid);
909 br->default_pvid = 0;
912 int __br_vlan_set_default_pvid(struct net_bridge *br, u16 pvid)
914 const struct net_bridge_vlan *pvent;
915 struct net_bridge_vlan_group *vg;
916 struct net_bridge_port *p;
917 unsigned long *changed;
923 br_vlan_disable_default_pvid(br);
927 changed = bitmap_zalloc(BR_MAX_PORTS, GFP_KERNEL);
931 old_pvid = br->default_pvid;
933 /* Update default_pvid config only if we do not conflict with
934 * user configuration.
936 vg = br_vlan_group(br);
937 pvent = br_vlan_find(vg, pvid);
938 if ((!old_pvid || vlan_default_pvid(vg, old_pvid)) &&
939 (!pvent || !br_vlan_should_use(pvent))) {
940 err = br_vlan_add(br, pvid,
941 BRIDGE_VLAN_INFO_PVID |
942 BRIDGE_VLAN_INFO_UNTAGGED |
943 BRIDGE_VLAN_INFO_BRENTRY,
947 br_vlan_delete(br, old_pvid);
951 list_for_each_entry(p, &br->port_list, list) {
952 /* Update default_pvid config only if we do not conflict with
953 * user configuration.
955 vg = nbp_vlan_group(p);
957 !vlan_default_pvid(vg, old_pvid)) ||
958 br_vlan_find(vg, pvid))
961 err = nbp_vlan_add(p, pvid,
962 BRIDGE_VLAN_INFO_PVID |
963 BRIDGE_VLAN_INFO_UNTAGGED,
967 nbp_vlan_delete(p, old_pvid);
968 set_bit(p->port_no, changed);
971 br->default_pvid = pvid;
974 bitmap_free(changed);
978 list_for_each_entry_continue_reverse(p, &br->port_list, list) {
979 if (!test_bit(p->port_no, changed))
983 nbp_vlan_add(p, old_pvid,
984 BRIDGE_VLAN_INFO_PVID |
985 BRIDGE_VLAN_INFO_UNTAGGED,
987 nbp_vlan_delete(p, pvid);
990 if (test_bit(0, changed)) {
992 br_vlan_add(br, old_pvid,
993 BRIDGE_VLAN_INFO_PVID |
994 BRIDGE_VLAN_INFO_UNTAGGED |
995 BRIDGE_VLAN_INFO_BRENTRY,
997 br_vlan_delete(br, pvid);
1002 int br_vlan_set_default_pvid(struct net_bridge *br, unsigned long val)
1007 if (val >= VLAN_VID_MASK)
1010 if (pvid == br->default_pvid)
1013 /* Only allow default pvid change when filtering is disabled */
1014 if (br_opt_get(br, BROPT_VLAN_ENABLED)) {
1015 pr_info_once("Please disable vlan filtering to change default_pvid\n");
1019 err = __br_vlan_set_default_pvid(br, pvid);
1024 int br_vlan_init(struct net_bridge *br)
1026 struct net_bridge_vlan_group *vg;
1030 vg = kzalloc(sizeof(*vg), GFP_KERNEL);
1033 ret = rhashtable_init(&vg->vlan_hash, &br_vlan_rht_params);
1036 ret = vlan_tunnel_init(vg);
1038 goto err_tunnel_init;
1039 INIT_LIST_HEAD(&vg->vlan_list);
1040 br->vlan_proto = htons(ETH_P_8021Q);
1041 br->default_pvid = 1;
1042 rcu_assign_pointer(br->vlgrp, vg);
1043 ret = br_vlan_add(br, 1,
1044 BRIDGE_VLAN_INFO_PVID | BRIDGE_VLAN_INFO_UNTAGGED |
1045 BRIDGE_VLAN_INFO_BRENTRY, &changed);
1053 vlan_tunnel_deinit(vg);
1055 rhashtable_destroy(&vg->vlan_hash);
1062 int nbp_vlan_init(struct net_bridge_port *p)
1064 struct switchdev_attr attr = {
1065 .orig_dev = p->br->dev,
1066 .id = SWITCHDEV_ATTR_ID_BRIDGE_VLAN_FILTERING,
1067 .flags = SWITCHDEV_F_SKIP_EOPNOTSUPP,
1068 .u.vlan_filtering = br_opt_get(p->br, BROPT_VLAN_ENABLED),
1070 struct net_bridge_vlan_group *vg;
1073 vg = kzalloc(sizeof(struct net_bridge_vlan_group), GFP_KERNEL);
1077 ret = switchdev_port_attr_set(p->dev, &attr);
1078 if (ret && ret != -EOPNOTSUPP)
1079 goto err_vlan_enabled;
1081 ret = rhashtable_init(&vg->vlan_hash, &br_vlan_rht_params);
1084 ret = vlan_tunnel_init(vg);
1086 goto err_tunnel_init;
1087 INIT_LIST_HEAD(&vg->vlan_list);
1088 rcu_assign_pointer(p->vlgrp, vg);
1089 if (p->br->default_pvid) {
1092 ret = nbp_vlan_add(p, p->br->default_pvid,
1093 BRIDGE_VLAN_INFO_PVID |
1094 BRIDGE_VLAN_INFO_UNTAGGED,
1103 RCU_INIT_POINTER(p->vlgrp, NULL);
1105 vlan_tunnel_deinit(vg);
1107 rhashtable_destroy(&vg->vlan_hash);
1115 /* Must be protected by RTNL.
1116 * Must be called with vid in range from 1 to 4094 inclusive.
1117 * changed must be true only if the vlan was created or updated
1119 int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags,
1122 struct net_bridge_vlan *vlan;
1128 vlan = br_vlan_find(nbp_vlan_group(port), vid);
1130 /* Pass the flags to the hardware bridge */
1131 ret = br_switchdev_port_vlan_add(port->dev, vid, flags);
1132 if (ret && ret != -EOPNOTSUPP)
1134 *changed = __vlan_add_flags(vlan, flags);
1139 vlan = kzalloc(sizeof(*vlan), GFP_KERNEL);
1145 ret = __vlan_add(vlan, flags);
1154 /* Must be protected by RTNL.
1155 * Must be called with vid in range from 1 to 4094 inclusive.
1157 int nbp_vlan_delete(struct net_bridge_port *port, u16 vid)
1159 struct net_bridge_vlan *v;
1163 v = br_vlan_find(nbp_vlan_group(port), vid);
1166 br_fdb_find_delete_local(port->br, port, port->dev->dev_addr, vid);
1167 br_fdb_delete_by_port(port->br, port, vid, 0);
1169 return __vlan_del(v);
1172 void nbp_vlan_flush(struct net_bridge_port *port)
1174 struct net_bridge_vlan_group *vg;
1178 vg = nbp_vlan_group(port);
1180 RCU_INIT_POINTER(port->vlgrp, NULL);
1182 __vlan_group_free(vg);
1185 void br_vlan_get_stats(const struct net_bridge_vlan *v,
1186 struct br_vlan_stats *stats)
1190 memset(stats, 0, sizeof(*stats));
1191 for_each_possible_cpu(i) {
1192 u64 rxpackets, rxbytes, txpackets, txbytes;
1193 struct br_vlan_stats *cpu_stats;
1196 cpu_stats = per_cpu_ptr(v->stats, i);
1198 start = u64_stats_fetch_begin_irq(&cpu_stats->syncp);
1199 rxpackets = cpu_stats->rx_packets;
1200 rxbytes = cpu_stats->rx_bytes;
1201 txbytes = cpu_stats->tx_bytes;
1202 txpackets = cpu_stats->tx_packets;
1203 } while (u64_stats_fetch_retry_irq(&cpu_stats->syncp, start));
1205 stats->rx_packets += rxpackets;
1206 stats->rx_bytes += rxbytes;
1207 stats->tx_bytes += txbytes;
1208 stats->tx_packets += txpackets;
1212 int br_vlan_get_pvid(const struct net_device *dev, u16 *p_pvid)
1214 struct net_bridge_vlan_group *vg;
1217 if (netif_is_bridge_master(dev))
1218 vg = br_vlan_group(netdev_priv(dev));
1222 *p_pvid = br_get_pvid(vg);
1225 EXPORT_SYMBOL_GPL(br_vlan_get_pvid);
1227 int br_vlan_get_info(const struct net_device *dev, u16 vid,
1228 struct bridge_vlan_info *p_vinfo)
1230 struct net_bridge_vlan_group *vg;
1231 struct net_bridge_vlan *v;
1232 struct net_bridge_port *p;
1235 p = br_port_get_check_rtnl(dev);
1237 vg = nbp_vlan_group(p);
1238 else if (netif_is_bridge_master(dev))
1239 vg = br_vlan_group(netdev_priv(dev));
1243 v = br_vlan_find(vg, vid);
1248 p_vinfo->flags = v->flags;
1251 EXPORT_SYMBOL_GPL(br_vlan_get_info);