2005-01-07 01:45:51 +00:00
|
|
|
/*-
|
1994-05-24 10:09:53 +00:00
|
|
|
* Copyright (c) 1982, 1986, 1990, 1993
|
|
|
|
|
* The Regents of the University of California. All rights reserved.
|
|
|
|
|
*
|
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
|
* modification, are permitted provided that the following conditions
|
|
|
|
|
* are met:
|
|
|
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
|
|
|
* notice, this list of conditions and the following disclaimer.
|
|
|
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
|
|
|
* documentation and/or other materials provided with the distribution.
|
|
|
|
|
* 4. Neither the name of the University nor the names of its contributors
|
|
|
|
|
* may be used to endorse or promote products derived from this software
|
|
|
|
|
* without specific prior written permission.
|
|
|
|
|
*
|
|
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
|
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
|
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
|
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
|
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
|
|
* SUCH DAMAGE.
|
|
|
|
|
*
|
|
|
|
|
* @(#)in_pcb.h 8.1 (Berkeley) 6/10/93
|
1999-08-28 01:08:13 +00:00
|
|
|
* $FreeBSD$
|
1994-05-24 10:09:53 +00:00
|
|
|
*/
|
|
|
|
|
|
1994-08-21 05:27:42 +00:00
|
|
|
#ifndef _NETINET_IN_PCB_H_
|
|
|
|
|
#define _NETINET_IN_PCB_H_
|
|
|
|
|
|
1995-12-05 21:26:34 +00:00
|
|
|
#include <sys/queue.h>
|
2002-09-05 19:48:52 +00:00
|
|
|
#include <sys/_lock.h>
|
|
|
|
|
#include <sys/_mutex.h>
|
1995-12-05 21:26:34 +00:00
|
|
|
|
2001-11-27 17:36:39 +00:00
|
|
|
#include <net/route.h>
|
1999-11-22 02:45:11 +00:00
|
|
|
|
|
|
|
|
#define in6pcb inpcb /* for KAME src sync over BSD*'s */
|
|
|
|
|
#define in6p_sp inp_sp /* for KAME src sync over BSD*'s */
|
2002-10-16 02:25:05 +00:00
|
|
|
struct inpcbpolicy;
|
1999-11-22 02:45:11 +00:00
|
|
|
|
1994-05-24 10:09:53 +00:00
|
|
|
/*
|
2007-04-30 23:12:05 +00:00
|
|
|
* Struct inpcb is the ommon structure pcb for the Internet Protocol
|
|
|
|
|
* implementation.
|
|
|
|
|
*
|
|
|
|
|
* Pointers to local and foreign host table entries, local and foreign socket
|
|
|
|
|
* numbers, and pointers up (to a socket structure) and down (to a
|
|
|
|
|
* protocol-specific control block) are stored here.
|
1994-05-24 10:09:53 +00:00
|
|
|
*/
|
2000-05-26 02:09:24 +00:00
|
|
|
LIST_HEAD(inpcbhead, inpcb);
|
|
|
|
|
LIST_HEAD(inpcbporthead, inpcbport);
|
1998-05-15 20:11:40 +00:00
|
|
|
typedef u_quad_t inp_gen_t;
|
1995-04-09 01:29:31 +00:00
|
|
|
|
1999-11-22 02:45:11 +00:00
|
|
|
/*
|
|
|
|
|
* PCB with AF_INET6 null bind'ed laddr can receive AF_INET input packet.
|
2007-04-30 23:12:05 +00:00
|
|
|
* So, AF_INET6 null laddr is also used as AF_INET null laddr, by utilizing
|
|
|
|
|
* the following structure.
|
1999-11-22 02:45:11 +00:00
|
|
|
*/
|
|
|
|
|
struct in_addr_4in6 {
|
|
|
|
|
u_int32_t ia46_pad32[3];
|
|
|
|
|
struct in_addr ia46_addr4;
|
|
|
|
|
};
|
|
|
|
|
|
2001-11-22 04:50:44 +00:00
|
|
|
/*
|
2007-04-30 23:12:05 +00:00
|
|
|
* NOTE: ipv6 addrs should be 64-bit aligned, per RFC 2553. in_conninfo has
|
|
|
|
|
* some extra padding to accomplish this.
|
2001-11-22 04:50:44 +00:00
|
|
|
*/
|
|
|
|
|
struct in_endpoints {
|
|
|
|
|
u_int16_t ie_fport; /* foreign port */
|
|
|
|
|
u_int16_t ie_lport; /* local port */
|
|
|
|
|
/* protocol dependent part, local and foreign addr */
|
|
|
|
|
union {
|
|
|
|
|
/* foreign host table entry */
|
|
|
|
|
struct in_addr_4in6 ie46_foreign;
|
|
|
|
|
struct in6_addr ie6_foreign;
|
|
|
|
|
} ie_dependfaddr;
|
|
|
|
|
union {
|
|
|
|
|
/* local host table entry */
|
|
|
|
|
struct in_addr_4in6 ie46_local;
|
|
|
|
|
struct in6_addr ie6_local;
|
|
|
|
|
} ie_dependladdr;
|
|
|
|
|
#define ie_faddr ie_dependfaddr.ie46_foreign.ia46_addr4
|
|
|
|
|
#define ie_laddr ie_dependladdr.ie46_local.ia46_addr4
|
|
|
|
|
#define ie6_faddr ie_dependfaddr.ie6_foreign
|
|
|
|
|
#define ie6_laddr ie_dependladdr.ie6_local
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
/*
|
2007-04-30 23:12:05 +00:00
|
|
|
* XXX The defines for inc_* are hacks and should be changed to direct
|
|
|
|
|
* references.
|
2001-11-22 04:50:44 +00:00
|
|
|
*/
|
|
|
|
|
struct in_conninfo {
|
|
|
|
|
u_int8_t inc_flags;
|
|
|
|
|
u_int8_t inc_len;
|
|
|
|
|
u_int16_t inc_pad; /* XXX alignment for in_endpoints */
|
2003-11-20 20:07:39 +00:00
|
|
|
/* protocol dependent part */
|
2001-11-22 04:50:44 +00:00
|
|
|
struct in_endpoints inc_ie;
|
|
|
|
|
};
|
|
|
|
|
#define inc_isipv6 inc_flags /* temp compatability */
|
|
|
|
|
#define inc_fport inc_ie.ie_fport
|
|
|
|
|
#define inc_lport inc_ie.ie_lport
|
|
|
|
|
#define inc_faddr inc_ie.ie_faddr
|
|
|
|
|
#define inc_laddr inc_ie.ie_laddr
|
|
|
|
|
#define inc6_faddr inc_ie.ie6_faddr
|
|
|
|
|
#define inc6_laddr inc_ie.ie6_laddr
|
|
|
|
|
|
1999-11-22 02:45:11 +00:00
|
|
|
struct icmp6_filter;
|
|
|
|
|
|
1994-05-24 10:09:53 +00:00
|
|
|
struct inpcb {
|
2007-04-04 15:30:31 +00:00
|
|
|
LIST_ENTRY(inpcb) inp_hash; /* hash list */
|
|
|
|
|
LIST_ENTRY(inpcb) inp_list; /* list for all PCBs of this proto */
|
1999-11-22 02:45:11 +00:00
|
|
|
u_int32_t inp_flow;
|
|
|
|
|
|
2007-04-04 15:30:31 +00:00
|
|
|
/* Local and foreign ports, local and foreign addr. */
|
2001-11-22 04:50:44 +00:00
|
|
|
struct in_conninfo inp_inc;
|
1999-11-22 02:45:11 +00:00
|
|
|
|
2006-04-03 13:33:55 +00:00
|
|
|
void *inp_ppcb; /* pointer to per-protocol pcb */
|
Improved connection establishment performance by doing local port lookups via
a hashed port list. In the new scheme, in_pcblookup() goes away and is
replaced by a new routine, in_pcblookup_local() for doing the local port
check. Note that this implementation is space inefficient in that the PCB
struct is now too large to fit into 128 bytes. I might deal with this in the
future by using the new zone allocator, but I wanted these changes to be
extensively tested in their current form first.
Also:
1) Fixed off-by-one errors in the port lookup loops in in_pcbbind().
2) Got rid of some unneeded rehashing. Adding a new routine, in_pcbinshash()
to do the initialial hash insertion.
3) Renamed in_pcblookuphash() to in_pcblookup_hash() for easier readability.
4) Added a new routine, in_pcbremlists() to remove the PCB from the various
hash lists.
5) Added/deleted comments where appropriate.
6) Removed unnecessary splnet() locking. In general, the PCB functions should
be called at splnet()...there are unfortunately a few exceptions, however.
7) Reorganized a few structs for better cache line behavior.
8) Killed my TCP_ACK_HACK kludge. It may come back in a different form in
the future, however.
These changes have been tested on wcarchive for more than a month. In tests
done here, connection establishment overhead is reduced by more than 50
times, thus getting rid of one of the major networking scalability problems.
Still to do: make tcp_fastimo/tcp_slowtimo scale well for systems with a
large number of connections. tcp_fastimo is easy; tcp_slowtimo is difficult.
WARNING: Anything that knows about inpcb and tcpcb structs will have to be
recompiled; at the very least, this includes netstat(1).
1998-01-27 09:15:13 +00:00
|
|
|
struct inpcbinfo *inp_pcbinfo; /* PCB list info */
|
1997-04-03 05:14:45 +00:00
|
|
|
struct socket *inp_socket; /* back pointer to socket */
|
1999-11-22 02:45:11 +00:00
|
|
|
/* list for this PCB's local port */
|
Introduce a MAC label reference in 'struct inpcb', which caches
the MAC label referenced from 'struct socket' in the IPv4 and
IPv6-based protocols. This permits MAC labels to be checked during
network delivery operations without dereferencing inp->inp_socket
to get to so->so_label, which will eventually avoid our having to
grab the socket lock during delivery at the network layer.
This change introduces 'struct inpcb' as a labeled object to the
MAC Framework, along with the normal circus of entry points:
initialization, creation from socket, destruction, as well as a
delivery access control check.
For most policies, the inpcb label will simply be a cache of the
socket label, so a new protocol switch method is introduced,
pr_sosetlabel() to notify protocols that the socket layer label
has been updated so that the cache can be updated while holding
appropriate locks. Most protocols implement this using
pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use
the the worker function in_pcbsosetlabel(), which calls into the
MAC Framework to perform a cache update.
Biba, LOMAC, and MLS implement these entry points, as do the stub
policy, and test policy.
Reviewed by: sam, bms
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
2003-11-18 00:39:07 +00:00
|
|
|
struct label *inp_label; /* MAC label */
|
1994-05-24 10:09:53 +00:00
|
|
|
int inp_flags; /* generic IP/datagram flags */
|
1999-11-22 02:45:11 +00:00
|
|
|
|
2007-04-04 15:30:31 +00:00
|
|
|
struct inpcbpolicy *inp_sp; /* for IPSEC */
|
2002-02-25 09:41:43 +00:00
|
|
|
u_char inp_vflag; /* IP version flag (v4/v6) */
|
1999-11-22 02:45:11 +00:00
|
|
|
#define INP_IPV4 0x1
|
|
|
|
|
#define INP_IPV6 0x2
|
2006-03-26 11:26:12 +00:00
|
|
|
#define INP_IPV6PROTO 0x4 /* opened under IPv6 protocol */
|
|
|
|
|
#define INP_TIMEWAIT 0x8 /* .. probably doesn't go here */
|
2003-08-20 14:46:40 +00:00
|
|
|
#define INP_ONESBCAST 0x10 /* send all-ones broadcast */
|
2006-03-26 11:30:31 +00:00
|
|
|
#define INP_DROPPED 0x20 /* protocol drop flag */
|
|
|
|
|
#define INP_SOCKREF 0x40 /* strong socket reference */
|
1997-04-03 05:14:45 +00:00
|
|
|
u_char inp_ip_ttl; /* time to live proto */
|
|
|
|
|
u_char inp_ip_p; /* protocol proto */
|
2005-08-22 16:13:08 +00:00
|
|
|
u_char inp_ip_minttl; /* minimum TTL or drop */
|
1999-11-22 02:45:11 +00:00
|
|
|
|
2007-04-30 23:12:05 +00:00
|
|
|
/* Protocol-dependent part; options. */
|
1999-11-22 02:45:11 +00:00
|
|
|
struct {
|
|
|
|
|
u_char inp4_ip_tos; /* type of service proto */
|
|
|
|
|
struct mbuf *inp4_options; /* IP options */
|
|
|
|
|
struct ip_moptions *inp4_moptions; /* IP multicast options */
|
|
|
|
|
} inp_depend4;
|
2006-03-26 11:26:12 +00:00
|
|
|
#define inp_fport inp_inc.inc_fport
|
|
|
|
|
#define inp_lport inp_inc.inc_lport
|
2001-11-22 04:50:44 +00:00
|
|
|
#define inp_faddr inp_inc.inc_faddr
|
|
|
|
|
#define inp_laddr inp_inc.inc_laddr
|
1999-11-22 02:45:11 +00:00
|
|
|
#define inp_ip_tos inp_depend4.inp4_ip_tos
|
|
|
|
|
#define inp_options inp_depend4.inp4_options
|
|
|
|
|
#define inp_moptions inp_depend4.inp4_moptions
|
|
|
|
|
struct {
|
|
|
|
|
/* IP options */
|
|
|
|
|
struct mbuf *inp6_options;
|
|
|
|
|
/* IP6 options for outgoing packets */
|
|
|
|
|
struct ip6_pktopts *inp6_outputopts;
|
|
|
|
|
/* IP multicast options */
|
|
|
|
|
struct ip6_moptions *inp6_moptions;
|
|
|
|
|
/* ICMPv6 code type filter */
|
|
|
|
|
struct icmp6_filter *inp6_icmp6filt;
|
|
|
|
|
/* IPV6_CHECKSUM setsockopt */
|
|
|
|
|
int inp6_cksum;
|
|
|
|
|
short inp6_hops;
|
|
|
|
|
} inp_depend6;
|
2000-05-26 02:09:24 +00:00
|
|
|
LIST_ENTRY(inpcb) inp_portlist;
|
1998-03-28 10:18:26 +00:00
|
|
|
struct inpcbport *inp_phd; /* head of this list */
|
2006-07-18 22:34:27 +00:00
|
|
|
#define inp_zero_size offsetof(struct inpcb, inp_gencnt)
|
1999-11-22 02:45:11 +00:00
|
|
|
inp_gen_t inp_gencnt; /* generation count of this instance */
|
2002-06-10 20:05:46 +00:00
|
|
|
struct mtx inp_mtx;
|
|
|
|
|
|
2001-11-22 04:50:44 +00:00
|
|
|
#define in6p_faddr inp_inc.inc6_faddr
|
|
|
|
|
#define in6p_laddr inp_inc.inc6_laddr
|
1999-11-22 02:45:11 +00:00
|
|
|
#define in6p_hops inp_depend6.inp6_hops /* default hop limit */
|
|
|
|
|
#define in6p_ip6_nxt inp_ip_p
|
|
|
|
|
#define in6p_flowinfo inp_flow
|
|
|
|
|
#define in6p_vflag inp_vflag
|
|
|
|
|
#define in6p_options inp_depend6.inp6_options
|
|
|
|
|
#define in6p_outputopts inp_depend6.inp6_outputopts
|
|
|
|
|
#define in6p_moptions inp_depend6.inp6_moptions
|
|
|
|
|
#define in6p_icmp6filt inp_depend6.inp6_icmp6filt
|
|
|
|
|
#define in6p_cksum inp_depend6.inp6_cksum
|
|
|
|
|
#define in6p_flags inp_flags /* for KAME src sync over BSD*'s */
|
|
|
|
|
#define in6p_socket inp_socket /* for KAME src sync over BSD*'s */
|
|
|
|
|
#define in6p_lport inp_lport /* for KAME src sync over BSD*'s */
|
|
|
|
|
#define in6p_fport inp_fport /* for KAME src sync over BSD*'s */
|
|
|
|
|
#define in6p_ppcb inp_ppcb /* for KAME src sync over BSD*'s */
|
Improved connection establishment performance by doing local port lookups via
a hashed port list. In the new scheme, in_pcblookup() goes away and is
replaced by a new routine, in_pcblookup_local() for doing the local port
check. Note that this implementation is space inefficient in that the PCB
struct is now too large to fit into 128 bytes. I might deal with this in the
future by using the new zone allocator, but I wanted these changes to be
extensively tested in their current form first.
Also:
1) Fixed off-by-one errors in the port lookup loops in in_pcbbind().
2) Got rid of some unneeded rehashing. Adding a new routine, in_pcbinshash()
to do the initialial hash insertion.
3) Renamed in_pcblookuphash() to in_pcblookup_hash() for easier readability.
4) Added a new routine, in_pcbremlists() to remove the PCB from the various
hash lists.
5) Added/deleted comments where appropriate.
6) Removed unnecessary splnet() locking. In general, the PCB functions should
be called at splnet()...there are unfortunately a few exceptions, however.
7) Reorganized a few structs for better cache line behavior.
8) Killed my TCP_ACK_HACK kludge. It may come back in a different form in
the future, however.
These changes have been tested on wcarchive for more than a month. In tests
done here, connection establishment overhead is reduced by more than 50
times, thus getting rid of one of the major networking scalability problems.
Still to do: make tcp_fastimo/tcp_slowtimo scale well for systems with a
large number of connections. tcp_fastimo is easy; tcp_slowtimo is difficult.
WARNING: Anything that knows about inpcb and tcpcb structs will have to be
recompiled; at the very least, this includes netstat(1).
1998-01-27 09:15:13 +00:00
|
|
|
};
|
1998-03-24 18:06:34 +00:00
|
|
|
/*
|
2007-04-30 23:12:05 +00:00
|
|
|
* The range of the generation count, as used in this implementation, is 9e19.
|
|
|
|
|
* We would have to create 300 billion connections per second for this number
|
|
|
|
|
* to roll over in a year. This seems sufficiently unlikely that we simply
|
|
|
|
|
* don't concern ourselves with that possibility.
|
1998-03-24 18:06:34 +00:00
|
|
|
*/
|
Improved connection establishment performance by doing local port lookups via
a hashed port list. In the new scheme, in_pcblookup() goes away and is
replaced by a new routine, in_pcblookup_local() for doing the local port
check. Note that this implementation is space inefficient in that the PCB
struct is now too large to fit into 128 bytes. I might deal with this in the
future by using the new zone allocator, but I wanted these changes to be
extensively tested in their current form first.
Also:
1) Fixed off-by-one errors in the port lookup loops in in_pcbbind().
2) Got rid of some unneeded rehashing. Adding a new routine, in_pcbinshash()
to do the initialial hash insertion.
3) Renamed in_pcblookuphash() to in_pcblookup_hash() for easier readability.
4) Added a new routine, in_pcbremlists() to remove the PCB from the various
hash lists.
5) Added/deleted comments where appropriate.
6) Removed unnecessary splnet() locking. In general, the PCB functions should
be called at splnet()...there are unfortunately a few exceptions, however.
7) Reorganized a few structs for better cache line behavior.
8) Killed my TCP_ACK_HACK kludge. It may come back in a different form in
the future, however.
These changes have been tested on wcarchive for more than a month. In tests
done here, connection establishment overhead is reduced by more than 50
times, thus getting rid of one of the major networking scalability problems.
Still to do: make tcp_fastimo/tcp_slowtimo scale well for systems with a
large number of connections. tcp_fastimo is easy; tcp_slowtimo is difficult.
WARNING: Anything that knows about inpcb and tcpcb structs will have to be
recompiled; at the very least, this includes netstat(1).
1998-01-27 09:15:13 +00:00
|
|
|
|
1998-05-15 20:11:40 +00:00
|
|
|
/*
|
2007-04-30 23:12:05 +00:00
|
|
|
* Interface exported to userland by various protocols which use inpcbs. Hack
|
|
|
|
|
* alert -- only define if struct xsocket is in scope.
|
1998-05-15 20:11:40 +00:00
|
|
|
*/
|
|
|
|
|
#ifdef _SYS_SOCKETVAR_H_
|
|
|
|
|
struct xinpcb {
|
|
|
|
|
size_t xi_len; /* length of this structure */
|
|
|
|
|
struct inpcb xi_inp;
|
|
|
|
|
struct xsocket xi_socket;
|
|
|
|
|
u_quad_t xi_alignment_hack;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
struct xinpgen {
|
|
|
|
|
size_t xig_len; /* length of this structure */
|
|
|
|
|
u_int xig_count; /* number of PCBs at this time */
|
|
|
|
|
inp_gen_t xig_gen; /* generation count at this time */
|
|
|
|
|
so_gen_t xig_sogen; /* socket generation count at this time */
|
|
|
|
|
};
|
|
|
|
|
#endif /* _SYS_SOCKETVAR_H_ */
|
|
|
|
|
|
Improved connection establishment performance by doing local port lookups via
a hashed port list. In the new scheme, in_pcblookup() goes away and is
replaced by a new routine, in_pcblookup_local() for doing the local port
check. Note that this implementation is space inefficient in that the PCB
struct is now too large to fit into 128 bytes. I might deal with this in the
future by using the new zone allocator, but I wanted these changes to be
extensively tested in their current form first.
Also:
1) Fixed off-by-one errors in the port lookup loops in in_pcbbind().
2) Got rid of some unneeded rehashing. Adding a new routine, in_pcbinshash()
to do the initialial hash insertion.
3) Renamed in_pcblookuphash() to in_pcblookup_hash() for easier readability.
4) Added a new routine, in_pcbremlists() to remove the PCB from the various
hash lists.
5) Added/deleted comments where appropriate.
6) Removed unnecessary splnet() locking. In general, the PCB functions should
be called at splnet()...there are unfortunately a few exceptions, however.
7) Reorganized a few structs for better cache line behavior.
8) Killed my TCP_ACK_HACK kludge. It may come back in a different form in
the future, however.
These changes have been tested on wcarchive for more than a month. In tests
done here, connection establishment overhead is reduced by more than 50
times, thus getting rid of one of the major networking scalability problems.
Still to do: make tcp_fastimo/tcp_slowtimo scale well for systems with a
large number of connections. tcp_fastimo is easy; tcp_slowtimo is difficult.
WARNING: Anything that knows about inpcb and tcpcb structs will have to be
recompiled; at the very least, this includes netstat(1).
1998-01-27 09:15:13 +00:00
|
|
|
struct inpcbport {
|
2000-05-26 02:09:24 +00:00
|
|
|
LIST_ENTRY(inpcbport) phd_hash;
|
Improved connection establishment performance by doing local port lookups via
a hashed port list. In the new scheme, in_pcblookup() goes away and is
replaced by a new routine, in_pcblookup_local() for doing the local port
check. Note that this implementation is space inefficient in that the PCB
struct is now too large to fit into 128 bytes. I might deal with this in the
future by using the new zone allocator, but I wanted these changes to be
extensively tested in their current form first.
Also:
1) Fixed off-by-one errors in the port lookup loops in in_pcbbind().
2) Got rid of some unneeded rehashing. Adding a new routine, in_pcbinshash()
to do the initialial hash insertion.
3) Renamed in_pcblookuphash() to in_pcblookup_hash() for easier readability.
4) Added a new routine, in_pcbremlists() to remove the PCB from the various
hash lists.
5) Added/deleted comments where appropriate.
6) Removed unnecessary splnet() locking. In general, the PCB functions should
be called at splnet()...there are unfortunately a few exceptions, however.
7) Reorganized a few structs for better cache line behavior.
8) Killed my TCP_ACK_HACK kludge. It may come back in a different form in
the future, however.
These changes have been tested on wcarchive for more than a month. In tests
done here, connection establishment overhead is reduced by more than 50
times, thus getting rid of one of the major networking scalability problems.
Still to do: make tcp_fastimo/tcp_slowtimo scale well for systems with a
large number of connections. tcp_fastimo is easy; tcp_slowtimo is difficult.
WARNING: Anything that knows about inpcb and tcpcb structs will have to be
recompiled; at the very least, this includes netstat(1).
1998-01-27 09:15:13 +00:00
|
|
|
struct inpcbhead phd_pcblist;
|
|
|
|
|
u_short phd_port;
|
1994-05-24 10:09:53 +00:00
|
|
|
};
|
|
|
|
|
|
2007-04-30 23:12:05 +00:00
|
|
|
/*
|
|
|
|
|
* Global data structure for each high-level protocol (UDP, TCP, ...) in both
|
|
|
|
|
* IPv4 and IPv6. Holds inpcb lists and information for managing them.
|
|
|
|
|
*/
|
|
|
|
|
struct inpcbinfo {
|
|
|
|
|
/*
|
|
|
|
|
* Global list of inpcbs on the protocol.
|
|
|
|
|
*/
|
|
|
|
|
struct inpcbhead *ipi_listhead;
|
|
|
|
|
u_int ipi_count;
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Global hash of inpcbs, hashed by local and foreign addresses and
|
|
|
|
|
* port numbers.
|
|
|
|
|
*/
|
|
|
|
|
struct inpcbhead *ipi_hashbase;
|
|
|
|
|
u_long ipi_hashmask;
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Global hash of inpcbs, hashed by only local port number.
|
|
|
|
|
*/
|
|
|
|
|
struct inpcbporthead *ipi_porthashbase;
|
|
|
|
|
u_long ipi_porthashmask;
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Fields associated with port lookup and allocation.
|
|
|
|
|
*/
|
|
|
|
|
u_short ipi_lastport;
|
|
|
|
|
u_short ipi_lastlow;
|
|
|
|
|
u_short ipi_lasthi;
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* UMA zone from which inpcbs are allocated for this protocol.
|
|
|
|
|
*/
|
|
|
|
|
struct uma_zone *ipi_zone;
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Generation count--incremented each time a connection is allocated
|
|
|
|
|
* or freed.
|
|
|
|
|
*/
|
|
|
|
|
u_quad_t ipi_gencnt;
|
|
|
|
|
struct mtx ipi_mtx;
|
1995-04-09 01:29:31 +00:00
|
|
|
};
|
|
|
|
|
|
2003-11-26 01:40:44 +00:00
|
|
|
#define INP_LOCK_INIT(inp, d, t) \
|
|
|
|
|
mtx_init(&(inp)->inp_mtx, (d), (t), MTX_DEF | MTX_RECURSE | MTX_DUPOK)
|
2002-06-10 20:05:46 +00:00
|
|
|
#define INP_LOCK_DESTROY(inp) mtx_destroy(&(inp)->inp_mtx)
|
|
|
|
|
#define INP_LOCK(inp) mtx_lock(&(inp)->inp_mtx)
|
|
|
|
|
#define INP_UNLOCK(inp) mtx_unlock(&(inp)->inp_mtx)
|
2004-06-24 02:01:48 +00:00
|
|
|
#define INP_LOCK_ASSERT(inp) do { \
|
|
|
|
|
mtx_assert(&(inp)->inp_mtx, MA_OWNED); \
|
|
|
|
|
NET_ASSERT_GIANT(); \
|
|
|
|
|
} while (0)
|
2004-12-05 22:07:14 +00:00
|
|
|
#define INP_UNLOCK_ASSERT(inp) mtx_assert(&(inp)->inp_mtx, MA_NOTOWNED)
|
2002-06-10 20:05:46 +00:00
|
|
|
|
|
|
|
|
#define INP_INFO_LOCK_INIT(ipi, d) \
|
|
|
|
|
mtx_init(&(ipi)->ipi_mtx, (d), NULL, MTX_DEF | MTX_RECURSE)
|
2004-10-19 14:34:13 +00:00
|
|
|
#define INP_INFO_LOCK_DESTROY(ipi) mtx_destroy(&(ipi)->ipi_mtx)
|
2002-06-10 20:05:46 +00:00
|
|
|
#define INP_INFO_RLOCK(ipi) mtx_lock(&(ipi)->ipi_mtx)
|
|
|
|
|
#define INP_INFO_WLOCK(ipi) mtx_lock(&(ipi)->ipi_mtx)
|
|
|
|
|
#define INP_INFO_RUNLOCK(ipi) mtx_unlock(&(ipi)->ipi_mtx)
|
|
|
|
|
#define INP_INFO_WUNLOCK(ipi) mtx_unlock(&(ipi)->ipi_mtx)
|
2004-06-24 02:01:48 +00:00
|
|
|
#define INP_INFO_RLOCK_ASSERT(ipi) do { \
|
|
|
|
|
mtx_assert(&(ipi)->ipi_mtx, MA_OWNED); \
|
|
|
|
|
NET_ASSERT_GIANT(); \
|
|
|
|
|
} while (0)
|
|
|
|
|
#define INP_INFO_WLOCK_ASSERT(ipi) do { \
|
|
|
|
|
mtx_assert(&(ipi)->ipi_mtx, MA_OWNED); \
|
|
|
|
|
NET_ASSERT_GIANT(); \
|
|
|
|
|
} while (0)
|
2007-04-04 18:30:16 +00:00
|
|
|
#define INP_INFO_UNLOCK_ASSERT(ipi) do { \
|
|
|
|
|
mtx_assert(&(ipi)->ipi_mtx, MA_NOTOWNED); \
|
|
|
|
|
} while (0)
|
2002-06-10 20:05:46 +00:00
|
|
|
|
1997-03-03 09:23:37 +00:00
|
|
|
#define INP_PCBHASH(faddr, lport, fport, mask) \
|
Improved connection establishment performance by doing local port lookups via
a hashed port list. In the new scheme, in_pcblookup() goes away and is
replaced by a new routine, in_pcblookup_local() for doing the local port
check. Note that this implementation is space inefficient in that the PCB
struct is now too large to fit into 128 bytes. I might deal with this in the
future by using the new zone allocator, but I wanted these changes to be
extensively tested in their current form first.
Also:
1) Fixed off-by-one errors in the port lookup loops in in_pcbbind().
2) Got rid of some unneeded rehashing. Adding a new routine, in_pcbinshash()
to do the initialial hash insertion.
3) Renamed in_pcblookuphash() to in_pcblookup_hash() for easier readability.
4) Added a new routine, in_pcbremlists() to remove the PCB from the various
hash lists.
5) Added/deleted comments where appropriate.
6) Removed unnecessary splnet() locking. In general, the PCB functions should
be called at splnet()...there are unfortunately a few exceptions, however.
7) Reorganized a few structs for better cache line behavior.
8) Killed my TCP_ACK_HACK kludge. It may come back in a different form in
the future, however.
These changes have been tested on wcarchive for more than a month. In tests
done here, connection establishment overhead is reduced by more than 50
times, thus getting rid of one of the major networking scalability problems.
Still to do: make tcp_fastimo/tcp_slowtimo scale well for systems with a
large number of connections. tcp_fastimo is easy; tcp_slowtimo is difficult.
WARNING: Anything that knows about inpcb and tcpcb structs will have to be
recompiled; at the very least, this includes netstat(1).
1998-01-27 09:15:13 +00:00
|
|
|
(((faddr) ^ ((faddr) >> 16) ^ ntohs((lport) ^ (fport))) & (mask))
|
|
|
|
|
#define INP_PCBPORTHASH(lport, mask) \
|
|
|
|
|
(ntohs((lport)) & (mask))
|
1997-03-03 09:23:37 +00:00
|
|
|
|
1994-05-24 10:09:53 +00:00
|
|
|
/* flags in inp_flags: */
|
|
|
|
|
#define INP_RECVOPTS 0x01 /* receive incoming IP options */
|
|
|
|
|
#define INP_RECVRETOPTS 0x02 /* receive IP options for reply */
|
|
|
|
|
#define INP_RECVDSTADDR 0x04 /* receive IP dst address */
|
|
|
|
|
#define INP_HDRINCL 0x08 /* user supplies entire IP header */
|
1996-02-22 21:32:23 +00:00
|
|
|
#define INP_HIGHPORT 0x10 /* user wants "high" port binding */
|
|
|
|
|
#define INP_LOWPORT 0x20 /* user wants "low" port binding */
|
1996-08-23 18:59:07 +00:00
|
|
|
#define INP_ANONPORT 0x40 /* port chosen for user */
|
1996-11-11 04:56:32 +00:00
|
|
|
#define INP_RECVIF 0x80 /* receive incoming interface */
|
1997-08-16 19:16:27 +00:00
|
|
|
#define INP_MTUDISC 0x100 /* user can do MTU discovery */
|
1999-11-22 02:45:11 +00:00
|
|
|
#define INP_FAITH 0x200 /* accept FAITH'ed connections */
|
2003-04-29 21:36:18 +00:00
|
|
|
#define INP_RECVTTL 0x400 /* receive incoming IP TTL */
|
2005-09-26 20:25:16 +00:00
|
|
|
#define INP_DONTFRAG 0x800 /* don't fragment packet */
|
2001-06-11 12:39:29 +00:00
|
|
|
|
|
|
|
|
#define IN6P_IPV6_V6ONLY 0x008000 /* restrict AF_INET6 socket for v6 */
|
|
|
|
|
|
|
|
|
|
#define IN6P_PKTINFO 0x010000 /* receive IP6 dst and I/F */
|
|
|
|
|
#define IN6P_HOPLIMIT 0x020000 /* receive hoplimit */
|
|
|
|
|
#define IN6P_HOPOPTS 0x040000 /* receive hop-by-hop options */
|
|
|
|
|
#define IN6P_DSTOPTS 0x080000 /* receive dst options after rthdr */
|
|
|
|
|
#define IN6P_RTHDR 0x100000 /* receive routing header */
|
|
|
|
|
#define IN6P_RTHDRDSTOPTS 0x200000 /* receive dstoptions before rthdr */
|
2003-10-24 19:51:49 +00:00
|
|
|
#define IN6P_TCLASS 0x400000 /* receive traffic class value */
|
|
|
|
|
#define IN6P_AUTOFLOWLABEL 0x800000 /* attach flowlabel automatically */
|
|
|
|
|
#define IN6P_RFC2292 0x40000000 /* used RFC2292 API on the socket */
|
|
|
|
|
#define IN6P_MTU 0x80000000 /* receive path MTU */
|
2001-06-11 12:39:29 +00:00
|
|
|
|
1996-11-11 04:56:32 +00:00
|
|
|
#define INP_CONTROLOPTS (INP_RECVOPTS|INP_RECVRETOPTS|INP_RECVDSTADDR|\
|
2003-04-29 21:36:18 +00:00
|
|
|
INP_RECVIF|INP_RECVTTL|\
|
2001-06-11 12:39:29 +00:00
|
|
|
IN6P_PKTINFO|IN6P_HOPLIMIT|IN6P_HOPOPTS|\
|
|
|
|
|
IN6P_DSTOPTS|IN6P_RTHDR|IN6P_RTHDRDSTOPTS|\
|
2003-10-24 18:26:30 +00:00
|
|
|
IN6P_TCLASS|IN6P_AUTOFLOWLABEL|IN6P_RFC2292|\
|
|
|
|
|
IN6P_MTU)
|
2001-06-11 12:39:29 +00:00
|
|
|
#define INP_UNMAPPABLEOPTS (IN6P_HOPOPTS|IN6P_DSTOPTS|IN6P_RTHDR|\
|
2003-10-24 18:26:30 +00:00
|
|
|
IN6P_TCLASS|IN6P_AUTOFLOWLABEL)
|
1999-11-22 02:45:11 +00:00
|
|
|
|
|
|
|
|
/* for KAME src sync over BSD*'s */
|
|
|
|
|
#define IN6P_HIGHPORT INP_HIGHPORT
|
|
|
|
|
#define IN6P_LOWPORT INP_LOWPORT
|
|
|
|
|
#define IN6P_ANONPORT INP_ANONPORT
|
|
|
|
|
#define IN6P_RECVIF INP_RECVIF
|
|
|
|
|
#define IN6P_MTUDISC INP_MTUDISC
|
|
|
|
|
#define IN6P_FAITH INP_FAITH
|
|
|
|
|
#define IN6P_CONTROLOPTS INP_CONTROLOPTS
|
|
|
|
|
/*
|
|
|
|
|
* socket AF version is {newer than,or include}
|
|
|
|
|
* actual datagram AF version
|
|
|
|
|
*/
|
1994-05-24 10:09:53 +00:00
|
|
|
|
1999-11-22 02:45:11 +00:00
|
|
|
#define INPLOOKUP_WILDCARD 1
|
1994-05-24 10:09:53 +00:00
|
|
|
#define sotoinpcb(so) ((struct inpcb *)(so)->so_pcb)
|
1999-11-22 02:45:11 +00:00
|
|
|
#define sotoin6pcb(so) sotoinpcb(so) /* for KAME src sync over BSD*'s */
|
|
|
|
|
|
|
|
|
|
#define INP_SOCKAF(so) so->so_proto->pr_domain->dom_family
|
|
|
|
|
|
2004-08-16 18:32:07 +00:00
|
|
|
#define INP_CHECK_SOCKAF(so, af) (INP_SOCKAF(so) == af)
|
1994-05-24 10:09:53 +00:00
|
|
|
|
1999-12-29 04:46:21 +00:00
|
|
|
#ifdef _KERNEL
|
2006-03-19 11:48:48 +00:00
|
|
|
extern int ipport_reservedhigh;
|
|
|
|
|
extern int ipport_reservedlow;
|
1999-11-22 02:45:11 +00:00
|
|
|
extern int ipport_lowfirstauto;
|
|
|
|
|
extern int ipport_lowlastauto;
|
|
|
|
|
extern int ipport_firstauto;
|
|
|
|
|
extern int ipport_lastauto;
|
|
|
|
|
extern int ipport_hifirstauto;
|
|
|
|
|
extern int ipport_hilastauto;
|
2005-01-02 01:50:57 +00:00
|
|
|
extern struct callout ipport_tick_callout;
|
1999-11-22 02:45:11 +00:00
|
|
|
|
2002-06-10 20:05:46 +00:00
|
|
|
void in_pcbpurgeif0(struct inpcbinfo *, struct ifnet *);
|
2006-07-18 22:34:27 +00:00
|
|
|
int in_pcballoc(struct socket *, struct inpcbinfo *);
|
2004-03-27 21:05:46 +00:00
|
|
|
int in_pcbbind(struct inpcb *, struct sockaddr *, struct ucred *);
|
2002-10-20 21:44:31 +00:00
|
|
|
int in_pcbbind_setup(struct inpcb *, struct sockaddr *, in_addr_t *,
|
2004-03-27 21:05:46 +00:00
|
|
|
u_short *, struct ucred *);
|
|
|
|
|
int in_pcbconnect(struct inpcb *, struct sockaddr *, struct ucred *);
|
2002-10-21 13:55:50 +00:00
|
|
|
int in_pcbconnect_setup(struct inpcb *, struct sockaddr *, in_addr_t *,
|
|
|
|
|
u_short *, in_addr_t *, u_short *, struct inpcb **,
|
2004-03-27 21:05:46 +00:00
|
|
|
struct ucred *);
|
2002-03-19 21:25:46 +00:00
|
|
|
void in_pcbdetach(struct inpcb *);
|
|
|
|
|
void in_pcbdisconnect(struct inpcb *);
|
2006-04-25 11:17:35 +00:00
|
|
|
void in_pcbdrop(struct inpcb *);
|
2006-04-01 16:04:42 +00:00
|
|
|
void in_pcbfree(struct inpcb *);
|
2002-03-19 21:25:46 +00:00
|
|
|
int in_pcbinshash(struct inpcb *);
|
1994-05-24 10:09:53 +00:00
|
|
|
struct inpcb *
|
2002-03-19 21:25:46 +00:00
|
|
|
in_pcblookup_local(struct inpcbinfo *,
|
|
|
|
|
struct in_addr, u_int, int);
|
1995-04-09 01:29:31 +00:00
|
|
|
struct inpcb *
|
2002-03-24 10:19:10 +00:00
|
|
|
in_pcblookup_hash(struct inpcbinfo *, struct in_addr, u_int,
|
|
|
|
|
struct in_addr, u_int, int, struct ifnet *);
|
2002-06-10 20:05:46 +00:00
|
|
|
void in_pcbnotifyall(struct inpcbinfo *pcbinfo, struct in_addr,
|
2002-06-14 08:35:21 +00:00
|
|
|
int, struct inpcb *(*)(struct inpcb *, int));
|
2002-03-19 21:25:46 +00:00
|
|
|
void in_pcbrehash(struct inpcb *);
|
Introduce a MAC label reference in 'struct inpcb', which caches
the MAC label referenced from 'struct socket' in the IPv4 and
IPv6-based protocols. This permits MAC labels to be checked during
network delivery operations without dereferencing inp->inp_socket
to get to so->so_label, which will eventually avoid our having to
grab the socket lock during delivery at the network layer.
This change introduces 'struct inpcb' as a labeled object to the
MAC Framework, along with the normal circus of entry points:
initialization, creation from socket, destruction, as well as a
delivery access control check.
For most policies, the inpcb label will simply be a cache of the
socket label, so a new protocol switch method is introduced,
pr_sosetlabel() to notify protocols that the socket layer label
has been updated so that the cache can be updated while holding
appropriate locks. Most protocols implement this using
pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use
the the worker function in_pcbsosetlabel(), which calls into the
MAC Framework to perform a cache update.
Biba, LOMAC, and MLS implement these entry points, as do the stub
policy, and test policy.
Reviewed by: sam, bms
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
2003-11-18 00:39:07 +00:00
|
|
|
void in_pcbsetsolabel(struct socket *so);
|
2007-05-01 16:31:02 +00:00
|
|
|
int in_setpeeraddr(struct socket *so, struct sockaddr **nam);
|
|
|
|
|
int in_setsockaddr(struct socket *so, struct sockaddr **nam);
|
2002-08-21 11:57:12 +00:00
|
|
|
struct sockaddr *
|
|
|
|
|
in_sockaddr(in_port_t port, struct in_addr *addr);
|
Introduce a MAC label reference in 'struct inpcb', which caches
the MAC label referenced from 'struct socket' in the IPv4 and
IPv6-based protocols. This permits MAC labels to be checked during
network delivery operations without dereferencing inp->inp_socket
to get to so->so_label, which will eventually avoid our having to
grab the socket lock during delivery at the network layer.
This change introduces 'struct inpcb' as a labeled object to the
MAC Framework, along with the normal circus of entry points:
initialization, creation from socket, destruction, as well as a
delivery access control check.
For most policies, the inpcb label will simply be a cache of the
socket label, so a new protocol switch method is introduced,
pr_sosetlabel() to notify protocols that the socket layer label
has been updated so that the cache can be updated while holding
appropriate locks. Most protocols implement this using
pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use
the the worker function in_pcbsosetlabel(), which calls into the
MAC Framework to perform a cache update.
Biba, LOMAC, and MLS implement these entry points, as do the stub
policy, and test policy.
Reviewed by: sam, bms
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
2003-11-18 00:39:07 +00:00
|
|
|
void in_pcbsosetlabel(struct socket *so);
|
2002-03-19 21:25:46 +00:00
|
|
|
void in_pcbremlists(struct inpcb *inp);
|
2005-01-02 01:50:57 +00:00
|
|
|
void ipport_tick(void *xtp);
|
2007-02-17 21:02:38 +00:00
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Debugging routines compiled in when DDB is present.
|
|
|
|
|
*/
|
|
|
|
|
void db_print_inpcb(struct inpcb *inp, const char *name, int indent);
|
|
|
|
|
|
1999-12-29 04:46:21 +00:00
|
|
|
#endif /* _KERNEL */
|
1998-03-24 18:06:34 +00:00
|
|
|
|
1998-03-28 10:18:26 +00:00
|
|
|
#endif /* !_NETINET_IN_PCB_H_ */
|
