18c2ecf20Sopenharmony_ci/* SPDX-License-Identifier: GPL-2.0-or-later */
28c2ecf20Sopenharmony_ci/*
38c2ecf20Sopenharmony_ci * NET		Generic infrastructure for Network protocols.
48c2ecf20Sopenharmony_ci *
58c2ecf20Sopenharmony_ci *		Definitions for request_sock
68c2ecf20Sopenharmony_ci *
78c2ecf20Sopenharmony_ci * Authors:	Arnaldo Carvalho de Melo <acme@conectiva.com.br>
88c2ecf20Sopenharmony_ci *
98c2ecf20Sopenharmony_ci * 		From code originally in include/net/tcp.h
108c2ecf20Sopenharmony_ci */
118c2ecf20Sopenharmony_ci#ifndef _REQUEST_SOCK_H
128c2ecf20Sopenharmony_ci#define _REQUEST_SOCK_H
138c2ecf20Sopenharmony_ci
148c2ecf20Sopenharmony_ci#include <linux/slab.h>
158c2ecf20Sopenharmony_ci#include <linux/spinlock.h>
168c2ecf20Sopenharmony_ci#include <linux/types.h>
178c2ecf20Sopenharmony_ci#include <linux/bug.h>
188c2ecf20Sopenharmony_ci#include <linux/refcount.h>
198c2ecf20Sopenharmony_ci
208c2ecf20Sopenharmony_ci#include <net/sock.h>
218c2ecf20Sopenharmony_ci
228c2ecf20Sopenharmony_cistruct request_sock;
238c2ecf20Sopenharmony_cistruct sk_buff;
248c2ecf20Sopenharmony_cistruct dst_entry;
258c2ecf20Sopenharmony_cistruct proto;
268c2ecf20Sopenharmony_ci
278c2ecf20Sopenharmony_cistruct request_sock_ops {
288c2ecf20Sopenharmony_ci	int		family;
298c2ecf20Sopenharmony_ci	unsigned int	obj_size;
308c2ecf20Sopenharmony_ci	struct kmem_cache	*slab;
318c2ecf20Sopenharmony_ci	char		*slab_name;
328c2ecf20Sopenharmony_ci	int		(*rtx_syn_ack)(const struct sock *sk,
338c2ecf20Sopenharmony_ci				       struct request_sock *req);
348c2ecf20Sopenharmony_ci	void		(*send_ack)(const struct sock *sk, struct sk_buff *skb,
358c2ecf20Sopenharmony_ci				    struct request_sock *req);
368c2ecf20Sopenharmony_ci	void		(*send_reset)(const struct sock *sk,
378c2ecf20Sopenharmony_ci				      struct sk_buff *skb);
388c2ecf20Sopenharmony_ci	void		(*destructor)(struct request_sock *req);
398c2ecf20Sopenharmony_ci	void		(*syn_ack_timeout)(const struct request_sock *req);
408c2ecf20Sopenharmony_ci};
418c2ecf20Sopenharmony_ci
428c2ecf20Sopenharmony_ciint inet_rtx_syn_ack(const struct sock *parent, struct request_sock *req);
438c2ecf20Sopenharmony_ci
448c2ecf20Sopenharmony_cistruct saved_syn {
458c2ecf20Sopenharmony_ci	u32 mac_hdrlen;
468c2ecf20Sopenharmony_ci	u32 network_hdrlen;
478c2ecf20Sopenharmony_ci	u32 tcp_hdrlen;
488c2ecf20Sopenharmony_ci	u8 data[];
498c2ecf20Sopenharmony_ci};
508c2ecf20Sopenharmony_ci
518c2ecf20Sopenharmony_ci/* struct request_sock - mini sock to represent a connection request
528c2ecf20Sopenharmony_ci */
538c2ecf20Sopenharmony_cistruct request_sock {
548c2ecf20Sopenharmony_ci	struct sock_common		__req_common;
558c2ecf20Sopenharmony_ci#define rsk_refcnt			__req_common.skc_refcnt
568c2ecf20Sopenharmony_ci#define rsk_hash			__req_common.skc_hash
578c2ecf20Sopenharmony_ci#define rsk_listener			__req_common.skc_listener
588c2ecf20Sopenharmony_ci#define rsk_window_clamp		__req_common.skc_window_clamp
598c2ecf20Sopenharmony_ci#define rsk_rcv_wnd			__req_common.skc_rcv_wnd
608c2ecf20Sopenharmony_ci
618c2ecf20Sopenharmony_ci	struct request_sock		*dl_next;
628c2ecf20Sopenharmony_ci	u16				mss;
638c2ecf20Sopenharmony_ci	u8				num_retrans; /* number of retransmits */
648c2ecf20Sopenharmony_ci	u8				syncookie:1; /* syncookie: encode tcpopts in timestamp */
658c2ecf20Sopenharmony_ci	u8				num_timeout:7; /* number of timeouts */
668c2ecf20Sopenharmony_ci	u32				ts_recent;
678c2ecf20Sopenharmony_ci	struct timer_list		rsk_timer;
688c2ecf20Sopenharmony_ci	const struct request_sock_ops	*rsk_ops;
698c2ecf20Sopenharmony_ci	struct sock			*sk;
708c2ecf20Sopenharmony_ci	struct saved_syn		*saved_syn;
718c2ecf20Sopenharmony_ci	u32				secid;
728c2ecf20Sopenharmony_ci	u32				peer_secid;
738c2ecf20Sopenharmony_ci};
748c2ecf20Sopenharmony_ci
758c2ecf20Sopenharmony_cistatic inline struct request_sock *inet_reqsk(const struct sock *sk)
768c2ecf20Sopenharmony_ci{
778c2ecf20Sopenharmony_ci	return (struct request_sock *)sk;
788c2ecf20Sopenharmony_ci}
798c2ecf20Sopenharmony_ci
808c2ecf20Sopenharmony_cistatic inline struct sock *req_to_sk(struct request_sock *req)
818c2ecf20Sopenharmony_ci{
828c2ecf20Sopenharmony_ci	return (struct sock *)req;
838c2ecf20Sopenharmony_ci}
848c2ecf20Sopenharmony_ci
858c2ecf20Sopenharmony_cistatic inline struct request_sock *
868c2ecf20Sopenharmony_cireqsk_alloc(const struct request_sock_ops *ops, struct sock *sk_listener,
878c2ecf20Sopenharmony_ci	    bool attach_listener)
888c2ecf20Sopenharmony_ci{
898c2ecf20Sopenharmony_ci	struct request_sock *req;
908c2ecf20Sopenharmony_ci
918c2ecf20Sopenharmony_ci	req = kmem_cache_alloc(ops->slab, GFP_ATOMIC | __GFP_NOWARN);
928c2ecf20Sopenharmony_ci	if (!req)
938c2ecf20Sopenharmony_ci		return NULL;
948c2ecf20Sopenharmony_ci	req->rsk_listener = NULL;
958c2ecf20Sopenharmony_ci	if (attach_listener) {
968c2ecf20Sopenharmony_ci		if (unlikely(!refcount_inc_not_zero(&sk_listener->sk_refcnt))) {
978c2ecf20Sopenharmony_ci			kmem_cache_free(ops->slab, req);
988c2ecf20Sopenharmony_ci			return NULL;
998c2ecf20Sopenharmony_ci		}
1008c2ecf20Sopenharmony_ci		req->rsk_listener = sk_listener;
1018c2ecf20Sopenharmony_ci	}
1028c2ecf20Sopenharmony_ci	req->rsk_ops = ops;
1038c2ecf20Sopenharmony_ci	req_to_sk(req)->sk_prot = sk_listener->sk_prot;
1048c2ecf20Sopenharmony_ci	sk_node_init(&req_to_sk(req)->sk_node);
1058c2ecf20Sopenharmony_ci	sk_tx_queue_clear(req_to_sk(req));
1068c2ecf20Sopenharmony_ci	req->saved_syn = NULL;
1078c2ecf20Sopenharmony_ci	req->num_timeout = 0;
1088c2ecf20Sopenharmony_ci	req->num_retrans = 0;
1098c2ecf20Sopenharmony_ci	req->sk = NULL;
1108c2ecf20Sopenharmony_ci	refcount_set(&req->rsk_refcnt, 0);
1118c2ecf20Sopenharmony_ci
1128c2ecf20Sopenharmony_ci	return req;
1138c2ecf20Sopenharmony_ci}
1148c2ecf20Sopenharmony_ci
1158c2ecf20Sopenharmony_cistatic inline void __reqsk_free(struct request_sock *req)
1168c2ecf20Sopenharmony_ci{
1178c2ecf20Sopenharmony_ci	req->rsk_ops->destructor(req);
1188c2ecf20Sopenharmony_ci	if (req->rsk_listener)
1198c2ecf20Sopenharmony_ci		sock_put(req->rsk_listener);
1208c2ecf20Sopenharmony_ci	kfree(req->saved_syn);
1218c2ecf20Sopenharmony_ci	kmem_cache_free(req->rsk_ops->slab, req);
1228c2ecf20Sopenharmony_ci}
1238c2ecf20Sopenharmony_ci
1248c2ecf20Sopenharmony_cistatic inline void reqsk_free(struct request_sock *req)
1258c2ecf20Sopenharmony_ci{
1268c2ecf20Sopenharmony_ci	WARN_ON_ONCE(refcount_read(&req->rsk_refcnt) != 0);
1278c2ecf20Sopenharmony_ci	__reqsk_free(req);
1288c2ecf20Sopenharmony_ci}
1298c2ecf20Sopenharmony_ci
1308c2ecf20Sopenharmony_cistatic inline void reqsk_put(struct request_sock *req)
1318c2ecf20Sopenharmony_ci{
1328c2ecf20Sopenharmony_ci	if (refcount_dec_and_test(&req->rsk_refcnt))
1338c2ecf20Sopenharmony_ci		reqsk_free(req);
1348c2ecf20Sopenharmony_ci}
1358c2ecf20Sopenharmony_ci
1368c2ecf20Sopenharmony_ci/*
1378c2ecf20Sopenharmony_ci * For a TCP Fast Open listener -
1388c2ecf20Sopenharmony_ci *	lock - protects the access to all the reqsk, which is co-owned by
1398c2ecf20Sopenharmony_ci *		the listener and the child socket.
1408c2ecf20Sopenharmony_ci *	qlen - pending TFO requests (still in TCP_SYN_RECV).
1418c2ecf20Sopenharmony_ci *	max_qlen - max TFO reqs allowed before TFO is disabled.
1428c2ecf20Sopenharmony_ci *
1438c2ecf20Sopenharmony_ci *	XXX (TFO) - ideally these fields can be made as part of "listen_sock"
1448c2ecf20Sopenharmony_ci *	structure above. But there is some implementation difficulty due to
1458c2ecf20Sopenharmony_ci *	listen_sock being part of request_sock_queue hence will be freed when
1468c2ecf20Sopenharmony_ci *	a listener is stopped. But TFO related fields may continue to be
1478c2ecf20Sopenharmony_ci *	accessed even after a listener is closed, until its sk_refcnt drops
1488c2ecf20Sopenharmony_ci *	to 0 implying no more outstanding TFO reqs. One solution is to keep
1498c2ecf20Sopenharmony_ci *	listen_opt around until	sk_refcnt drops to 0. But there is some other
1508c2ecf20Sopenharmony_ci *	complexity that needs to be resolved. E.g., a listener can be disabled
1518c2ecf20Sopenharmony_ci *	temporarily through shutdown()->tcp_disconnect(), and re-enabled later.
1528c2ecf20Sopenharmony_ci */
1538c2ecf20Sopenharmony_cistruct fastopen_queue {
1548c2ecf20Sopenharmony_ci	struct request_sock	*rskq_rst_head; /* Keep track of past TFO */
1558c2ecf20Sopenharmony_ci	struct request_sock	*rskq_rst_tail; /* requests that caused RST.
1568c2ecf20Sopenharmony_ci						 * This is part of the defense
1578c2ecf20Sopenharmony_ci						 * against spoofing attack.
1588c2ecf20Sopenharmony_ci						 */
1598c2ecf20Sopenharmony_ci	spinlock_t	lock;
1608c2ecf20Sopenharmony_ci	int		qlen;		/* # of pending (TCP_SYN_RECV) reqs */
1618c2ecf20Sopenharmony_ci	int		max_qlen;	/* != 0 iff TFO is currently enabled */
1628c2ecf20Sopenharmony_ci
1638c2ecf20Sopenharmony_ci	struct tcp_fastopen_context __rcu *ctx; /* cipher context for cookie */
1648c2ecf20Sopenharmony_ci};
1658c2ecf20Sopenharmony_ci
1668c2ecf20Sopenharmony_ci/** struct request_sock_queue - queue of request_socks
1678c2ecf20Sopenharmony_ci *
1688c2ecf20Sopenharmony_ci * @rskq_accept_head - FIFO head of established children
1698c2ecf20Sopenharmony_ci * @rskq_accept_tail - FIFO tail of established children
1708c2ecf20Sopenharmony_ci * @rskq_defer_accept - User waits for some data after accept()
1718c2ecf20Sopenharmony_ci *
1728c2ecf20Sopenharmony_ci */
1738c2ecf20Sopenharmony_cistruct request_sock_queue {
1748c2ecf20Sopenharmony_ci	spinlock_t		rskq_lock;
1758c2ecf20Sopenharmony_ci	u8			rskq_defer_accept;
1768c2ecf20Sopenharmony_ci
1778c2ecf20Sopenharmony_ci	u32			synflood_warned;
1788c2ecf20Sopenharmony_ci	atomic_t		qlen;
1798c2ecf20Sopenharmony_ci	atomic_t		young;
1808c2ecf20Sopenharmony_ci
1818c2ecf20Sopenharmony_ci	struct request_sock	*rskq_accept_head;
1828c2ecf20Sopenharmony_ci	struct request_sock	*rskq_accept_tail;
1838c2ecf20Sopenharmony_ci	struct fastopen_queue	fastopenq;  /* Check max_qlen != 0 to determine
1848c2ecf20Sopenharmony_ci					     * if TFO is enabled.
1858c2ecf20Sopenharmony_ci					     */
1868c2ecf20Sopenharmony_ci};
1878c2ecf20Sopenharmony_ci
1888c2ecf20Sopenharmony_civoid reqsk_queue_alloc(struct request_sock_queue *queue);
1898c2ecf20Sopenharmony_ci
1908c2ecf20Sopenharmony_civoid reqsk_fastopen_remove(struct sock *sk, struct request_sock *req,
1918c2ecf20Sopenharmony_ci			   bool reset);
1928c2ecf20Sopenharmony_ci
1938c2ecf20Sopenharmony_cistatic inline bool reqsk_queue_empty(const struct request_sock_queue *queue)
1948c2ecf20Sopenharmony_ci{
1958c2ecf20Sopenharmony_ci	return READ_ONCE(queue->rskq_accept_head) == NULL;
1968c2ecf20Sopenharmony_ci}
1978c2ecf20Sopenharmony_ci
1988c2ecf20Sopenharmony_cistatic inline struct request_sock *reqsk_queue_remove(struct request_sock_queue *queue,
1998c2ecf20Sopenharmony_ci						      struct sock *parent)
2008c2ecf20Sopenharmony_ci{
2018c2ecf20Sopenharmony_ci	struct request_sock *req;
2028c2ecf20Sopenharmony_ci
2038c2ecf20Sopenharmony_ci	spin_lock_bh(&queue->rskq_lock);
2048c2ecf20Sopenharmony_ci	req = queue->rskq_accept_head;
2058c2ecf20Sopenharmony_ci	if (req) {
2068c2ecf20Sopenharmony_ci		sk_acceptq_removed(parent);
2078c2ecf20Sopenharmony_ci		WRITE_ONCE(queue->rskq_accept_head, req->dl_next);
2088c2ecf20Sopenharmony_ci		if (queue->rskq_accept_head == NULL)
2098c2ecf20Sopenharmony_ci			queue->rskq_accept_tail = NULL;
2108c2ecf20Sopenharmony_ci	}
2118c2ecf20Sopenharmony_ci	spin_unlock_bh(&queue->rskq_lock);
2128c2ecf20Sopenharmony_ci	return req;
2138c2ecf20Sopenharmony_ci}
2148c2ecf20Sopenharmony_ci
2158c2ecf20Sopenharmony_cistatic inline void reqsk_queue_removed(struct request_sock_queue *queue,
2168c2ecf20Sopenharmony_ci				       const struct request_sock *req)
2178c2ecf20Sopenharmony_ci{
2188c2ecf20Sopenharmony_ci	if (req->num_timeout == 0)
2198c2ecf20Sopenharmony_ci		atomic_dec(&queue->young);
2208c2ecf20Sopenharmony_ci	atomic_dec(&queue->qlen);
2218c2ecf20Sopenharmony_ci}
2228c2ecf20Sopenharmony_ci
2238c2ecf20Sopenharmony_cistatic inline void reqsk_queue_added(struct request_sock_queue *queue)
2248c2ecf20Sopenharmony_ci{
2258c2ecf20Sopenharmony_ci	atomic_inc(&queue->young);
2268c2ecf20Sopenharmony_ci	atomic_inc(&queue->qlen);
2278c2ecf20Sopenharmony_ci}
2288c2ecf20Sopenharmony_ci
2298c2ecf20Sopenharmony_cistatic inline int reqsk_queue_len(const struct request_sock_queue *queue)
2308c2ecf20Sopenharmony_ci{
2318c2ecf20Sopenharmony_ci	return atomic_read(&queue->qlen);
2328c2ecf20Sopenharmony_ci}
2338c2ecf20Sopenharmony_ci
2348c2ecf20Sopenharmony_cistatic inline int reqsk_queue_len_young(const struct request_sock_queue *queue)
2358c2ecf20Sopenharmony_ci{
2368c2ecf20Sopenharmony_ci	return atomic_read(&queue->young);
2378c2ecf20Sopenharmony_ci}
2388c2ecf20Sopenharmony_ci
2398c2ecf20Sopenharmony_ci#endif /* _REQUEST_SOCK_H */
240