Home | History | Annotate | Line # | Download | only in altq
altq_subr.c revision 1.3
      1  1.3  thorpej /*	$NetBSD: altq_subr.c,v 1.3 2000/12/14 18:07:30 thorpej Exp $	*/
      2  1.1  thorpej /*	$KAME: altq_subr.c,v 1.8 2000/12/14 08:12:46 thorpej Exp $	*/
      3  1.1  thorpej 
      4  1.1  thorpej /*
      5  1.1  thorpej  * Copyright (C) 1997-2000
      6  1.1  thorpej  *	Sony Computer Science Laboratories Inc.  All rights reserved.
      7  1.1  thorpej  *
      8  1.1  thorpej  * Redistribution and use in source and binary forms, with or without
      9  1.1  thorpej  * modification, are permitted provided that the following conditions
     10  1.1  thorpej  * are met:
     11  1.1  thorpej  * 1. Redistributions of source code must retain the above copyright
     12  1.1  thorpej  *    notice, this list of conditions and the following disclaimer.
     13  1.1  thorpej  * 2. Redistributions in binary form must reproduce the above copyright
     14  1.1  thorpej  *    notice, this list of conditions and the following disclaimer in the
     15  1.1  thorpej  *    documentation and/or other materials provided with the distribution.
     16  1.1  thorpej  *
     17  1.1  thorpej  * THIS SOFTWARE IS PROVIDED BY SONY CSL AND CONTRIBUTORS ``AS IS'' AND
     18  1.1  thorpej  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     19  1.1  thorpej  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     20  1.1  thorpej  * ARE DISCLAIMED.  IN NO EVENT SHALL SONY CSL OR CONTRIBUTORS BE LIABLE
     21  1.1  thorpej  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     22  1.1  thorpej  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     23  1.1  thorpej  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     24  1.1  thorpej  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     25  1.1  thorpej  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     26  1.1  thorpej  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     27  1.1  thorpej  * SUCH DAMAGE.
     28  1.1  thorpej  */
     29  1.1  thorpej 
     30  1.1  thorpej #if defined(__FreeBSD__) || defined(__NetBSD__)
     31  1.1  thorpej #include "opt_altq.h"
     32  1.1  thorpej #if (__FreeBSD__ != 2)
     33  1.1  thorpej #include "opt_inet.h"
     34  1.1  thorpej #ifdef __FreeBSD__
     35  1.1  thorpej #include "opt_inet6.h"
     36  1.1  thorpej #endif
     37  1.1  thorpej #endif
     38  1.1  thorpej #endif /* __FreeBSD__ || __NetBSD__ */
     39  1.1  thorpej 
     40  1.1  thorpej #include <sys/param.h>
     41  1.1  thorpej #include <sys/malloc.h>
     42  1.1  thorpej #include <sys/mbuf.h>
     43  1.1  thorpej #include <sys/systm.h>
     44  1.1  thorpej #include <sys/proc.h>
     45  1.1  thorpej #include <sys/socket.h>
     46  1.1  thorpej #include <sys/socketvar.h>
     47  1.1  thorpej #include <sys/kernel.h>
     48  1.1  thorpej #include <sys/errno.h>
     49  1.1  thorpej #include <sys/syslog.h>
     50  1.1  thorpej #include <vm/vm.h>
     51  1.1  thorpej #include <sys/sysctl.h>
     52  1.1  thorpej #include <sys/queue.h>
     53  1.1  thorpej 
     54  1.1  thorpej #include <net/if.h>
     55  1.1  thorpej #include <net/if_dl.h>
     56  1.1  thorpej #include <net/if_types.h>
     57  1.1  thorpej 
     58  1.1  thorpej #include <netinet/in.h>
     59  1.1  thorpej #include <netinet/in_systm.h>
     60  1.1  thorpej #include <netinet/ip.h>
     61  1.1  thorpej #ifdef INET6
     62  1.1  thorpej #include <netinet/ip6.h>
     63  1.1  thorpej #endif
     64  1.1  thorpej #include <netinet/tcp.h>
     65  1.1  thorpej #include <netinet/udp.h>
     66  1.1  thorpej 
     67  1.1  thorpej #include <altq/altq.h>
     68  1.1  thorpej #include <altq/altq_conf.h>
     69  1.1  thorpej 
     70  1.1  thorpej #ifdef __FreeBSD__
     71  1.1  thorpej #include "opt_cpu.h"	/* for FreeBSD-2.2.8 to get i586_ctr_freq */
     72  1.1  thorpej #include <machine/clock.h>
     73  1.1  thorpej #endif
     74  1.1  thorpej 
     75  1.1  thorpej /*
     76  1.1  thorpej  * internal function prototypes
     77  1.1  thorpej  */
     78  1.1  thorpej static void	tbr_timeout __P((void *));
     79  1.1  thorpej static int 	extract_ports4 __P((struct mbuf *, struct ip *,
     80  1.1  thorpej 				    struct flowinfo_in *));
     81  1.1  thorpej #ifdef INET6
     82  1.1  thorpej static int 	extract_ports6 __P((struct mbuf *, struct ip6_hdr *,
     83  1.1  thorpej 				    struct flowinfo_in6 *));
     84  1.1  thorpej #endif
     85  1.1  thorpej static int	apply_filter4 __P((u_int32_t, struct flow_filter *,
     86  1.1  thorpej 				   struct flowinfo_in *));
     87  1.1  thorpej static int	apply_ppfilter4 __P((u_int32_t, struct flow_filter *,
     88  1.1  thorpej 				     struct flowinfo_in *));
     89  1.1  thorpej #ifdef INET6
     90  1.1  thorpej static int	apply_filter6 __P((u_int32_t, struct flow_filter6 *,
     91  1.1  thorpej 					   struct flowinfo_in6 *));
     92  1.1  thorpej #endif
     93  1.1  thorpej static int	apply_tosfilter4 __P((u_int32_t, struct flow_filter *,
     94  1.1  thorpej 					     struct flowinfo_in *));
     95  1.1  thorpej static u_long	get_filt_handle __P((struct acc_classifier *, int));
     96  1.1  thorpej static struct acc_filter *filth_to_filtp __P((struct acc_classifier *,
     97  1.1  thorpej 					      u_long));
     98  1.1  thorpej static u_int32_t filt2fibmask __P((struct flow_filter *));
     99  1.1  thorpej 
    100  1.1  thorpej static void 	ip4f_cache __P((struct ip *, struct flowinfo_in *));
    101  1.1  thorpej static int 	ip4f_lookup __P((struct ip *, struct flowinfo_in *));
    102  1.1  thorpej static int 	ip4f_init __P((void));
    103  1.1  thorpej static struct ip4_frag	*ip4f_alloc __P((void));
    104  1.1  thorpej static void 	ip4f_free __P((struct ip4_frag *));
    105  1.1  thorpej 
    106  1.1  thorpej int (*altq_input) __P((struct mbuf *, int)) = NULL;
    107  1.1  thorpej static int tbr_timer = 0;	/* token bucket regulator timer */
    108  1.1  thorpej static struct callout tbr_callout = CALLOUT_INITIALIZER;
    109  1.1  thorpej 
    110  1.1  thorpej /*
    111  1.1  thorpej  * alternate queueing support routines
    112  1.1  thorpej  */
    113  1.1  thorpej 
    114  1.1  thorpej /* look up the queue state by the interface name and the queuing type. */
    115  1.1  thorpej void *
    116  1.1  thorpej altq_lookup(name, type)
    117  1.1  thorpej 	char *name;
    118  1.1  thorpej 	int type;
    119  1.1  thorpej {
    120  1.1  thorpej 	struct ifnet *ifp;
    121  1.1  thorpej 
    122  1.1  thorpej 	if ((ifp = ifunit(name)) != NULL) {
    123  1.1  thorpej 		if (type != ALTQT_NONE && ifp->if_snd.altq_type == type)
    124  1.1  thorpej 			return (ifp->if_snd.altq_disc);
    125  1.1  thorpej 	}
    126  1.1  thorpej 
    127  1.1  thorpej 	return NULL;
    128  1.1  thorpej }
    129  1.1  thorpej 
    130  1.1  thorpej int
    131  1.1  thorpej altq_attach(ifq, type, discipline, enqueue, dequeue, request, clfier, classify)
    132  1.1  thorpej 	struct ifaltq *ifq;
    133  1.1  thorpej 	int type;
    134  1.1  thorpej 	void *discipline;
    135  1.1  thorpej 	int (*enqueue)(struct ifaltq *, struct mbuf *, struct altq_pktattr *);
    136  1.1  thorpej 	struct mbuf *(*dequeue)(struct ifaltq *, int);
    137  1.1  thorpej 	int (*request)(struct ifaltq *, int, void *);
    138  1.1  thorpej 	void *clfier;
    139  1.1  thorpej 	void *(*classify)(void *, struct mbuf *, int);
    140  1.1  thorpej {
    141  1.1  thorpej 	if (!ALTQ_IS_READY(ifq))
    142  1.1  thorpej 		return ENXIO;
    143  1.1  thorpej 	if (ALTQ_IS_ENABLED(ifq))
    144  1.1  thorpej 		return EBUSY;
    145  1.1  thorpej 	if (ALTQ_IS_ATTACHED(ifq))
    146  1.1  thorpej 		return EEXIST;
    147  1.1  thorpej 	ifq->altq_type     = type;
    148  1.1  thorpej 	ifq->altq_disc     = discipline;
    149  1.1  thorpej 	ifq->altq_enqueue  = enqueue;
    150  1.1  thorpej 	ifq->altq_dequeue  = dequeue;
    151  1.1  thorpej 	ifq->altq_request  = request;
    152  1.1  thorpej 	ifq->altq_clfier   = clfier;
    153  1.1  thorpej 	ifq->altq_classify = classify;
    154  1.1  thorpej 	ifq->altq_flags &= ALTQF_CANTCHANGE;
    155  1.1  thorpej #ifdef ALTQ_KLD
    156  1.1  thorpej 	altq_module_incref(type);
    157  1.1  thorpej #endif
    158  1.1  thorpej 	return 0;
    159  1.1  thorpej }
    160  1.1  thorpej 
    161  1.1  thorpej int
    162  1.1  thorpej altq_detach(ifq)
    163  1.1  thorpej 	struct ifaltq *ifq;
    164  1.1  thorpej {
    165  1.1  thorpej 	if (!ALTQ_IS_READY(ifq))
    166  1.1  thorpej 		return ENXIO;
    167  1.1  thorpej 	if (ALTQ_IS_ENABLED(ifq))
    168  1.1  thorpej 		return EBUSY;
    169  1.1  thorpej 	if (!ALTQ_IS_ATTACHED(ifq))
    170  1.1  thorpej 		return (0);
    171  1.1  thorpej 
    172  1.1  thorpej #ifdef ALTQ_KLD
    173  1.1  thorpej 	altq_module_declref(ifq->altq_type);
    174  1.1  thorpej #endif
    175  1.1  thorpej 	ifq->altq_type     = ALTQT_NONE;
    176  1.1  thorpej 	ifq->altq_disc     = NULL;
    177  1.1  thorpej 	ifq->altq_enqueue  = NULL;
    178  1.1  thorpej 	ifq->altq_dequeue  = NULL;
    179  1.1  thorpej 	ifq->altq_request  = NULL;
    180  1.1  thorpej 	ifq->altq_clfier   = NULL;
    181  1.1  thorpej 	ifq->altq_classify = NULL;
    182  1.1  thorpej 	ifq->altq_flags &= ALTQF_CANTCHANGE;
    183  1.1  thorpej 	return 0;
    184  1.1  thorpej }
    185  1.1  thorpej 
    186  1.1  thorpej int
    187  1.1  thorpej altq_enable(ifq)
    188  1.1  thorpej 	struct ifaltq *ifq;
    189  1.1  thorpej {
    190  1.1  thorpej 	int s;
    191  1.1  thorpej 
    192  1.1  thorpej 	if (!ALTQ_IS_READY(ifq))
    193  1.1  thorpej 		return ENXIO;
    194  1.1  thorpej 	if (ALTQ_IS_ENABLED(ifq))
    195  1.1  thorpej 		return 0;
    196  1.1  thorpej 
    197  1.1  thorpej 	s = splimp();
    198  1.1  thorpej 	IFQ_PURGE(ifq);
    199  1.1  thorpej 	ASSERT(ifq->ifq_len == 0);
    200  1.1  thorpej 	ifq->altq_flags |= ALTQF_ENABLED;
    201  1.1  thorpej 	if (ifq->altq_clfier != NULL)
    202  1.1  thorpej 		ifq->altq_flags |= ALTQF_CLASSIFY;
    203  1.1  thorpej 	splx(s);
    204  1.1  thorpej 
    205  1.1  thorpej 	return 0;
    206  1.1  thorpej }
    207  1.1  thorpej 
    208  1.1  thorpej int
    209  1.1  thorpej altq_disable(ifq)
    210  1.1  thorpej 	struct ifaltq *ifq;
    211  1.1  thorpej {
    212  1.1  thorpej 	int s;
    213  1.1  thorpej 
    214  1.1  thorpej 	if (!ALTQ_IS_ENABLED(ifq))
    215  1.1  thorpej 		return 0;
    216  1.1  thorpej 
    217  1.1  thorpej 	s = splimp();
    218  1.1  thorpej 	IFQ_PURGE(ifq);
    219  1.1  thorpej 	ASSERT(ifq->ifq_len == 0);
    220  1.1  thorpej 	ifq->altq_flags &= ~(ALTQF_ENABLED|ALTQF_CLASSIFY);
    221  1.1  thorpej 	splx(s);
    222  1.1  thorpej 	return 0;
    223  1.1  thorpej }
    224  1.1  thorpej 
    225  1.1  thorpej void
    226  1.1  thorpej altq_assert(file, line, failedexpr)
    227  1.1  thorpej 	const char *file, *failedexpr;
    228  1.1  thorpej 	int line;
    229  1.1  thorpej {
    230  1.1  thorpej 	(void)printf("altq assertion \"%s\" failed: file \"%s\", line %d\n",
    231  1.1  thorpej 		     failedexpr, file, line);
    232  1.1  thorpej 	panic("altq assertion");
    233  1.1  thorpej 	/* NOTREACHED */
    234  1.1  thorpej }
    235  1.1  thorpej 
    236  1.1  thorpej /*
    237  1.1  thorpej  * internal representation of token bucket parameters
    238  1.1  thorpej  *	rate: 	byte_per_unittime << 32
    239  1.1  thorpej  *		(((bits_per_sec) / 8) << 32) / machclk_freq
    240  1.1  thorpej  *	depth:	byte << 32
    241  1.1  thorpej  *
    242  1.1  thorpej  */
    243  1.1  thorpej #define	TBR_SHIFT	32
    244  1.1  thorpej #define	TBR_SCALE(x)	((int64_t)(x) << TBR_SHIFT)
    245  1.1  thorpej #define	TBR_UNSCALE(x)	((x) >> TBR_SHIFT)
    246  1.1  thorpej 
    247  1.1  thorpej struct mbuf *
    248  1.1  thorpej tbr_dequeue(ifq, op)
    249  1.1  thorpej 	struct ifaltq *ifq;
    250  1.1  thorpej 	int op;
    251  1.1  thorpej {
    252  1.1  thorpej 	struct tb_regulator *tbr;
    253  1.1  thorpej 	struct mbuf *m;
    254  1.1  thorpej 	int64_t interval;
    255  1.1  thorpej 	u_int64_t now;
    256  1.1  thorpej 
    257  1.1  thorpej 	tbr = ifq->altq_tbr;
    258  1.1  thorpej 	if (op == ALTDQ_REMOVE && tbr->tbr_lastop == ALTDQ_POLL) {
    259  1.1  thorpej 		/* if this is a remove after poll, bypass tbr check */
    260  1.1  thorpej 	} else {
    261  1.1  thorpej 		/* update token only when it is negative */
    262  1.1  thorpej 		if (tbr->tbr_token <= 0) {
    263  1.1  thorpej 			now = read_machclk();
    264  1.1  thorpej 			interval = now - tbr->tbr_last;
    265  1.1  thorpej 			if (interval >= tbr->tbr_filluptime)
    266  1.1  thorpej 				tbr->tbr_token = tbr->tbr_depth;
    267  1.1  thorpej 			else {
    268  1.1  thorpej 				tbr->tbr_token += interval * tbr->tbr_rate;
    269  1.1  thorpej 				if (tbr->tbr_token > tbr->tbr_depth)
    270  1.1  thorpej 					tbr->tbr_token = tbr->tbr_depth;
    271  1.1  thorpej 			}
    272  1.1  thorpej 			tbr->tbr_last = now;
    273  1.1  thorpej 		}
    274  1.1  thorpej 		/* if token is still negative, don't allow dequeue */
    275  1.1  thorpej 		if (tbr->tbr_token <= 0)
    276  1.1  thorpej 			return (NULL);
    277  1.1  thorpej 	}
    278  1.1  thorpej 
    279  1.1  thorpej 	if (ALTQ_IS_ENABLED(ifq))
    280  1.1  thorpej 		m = (*ifq->altq_dequeue)(ifq, op);
    281  1.1  thorpej 	else {
    282  1.1  thorpej 		if (op == ALTDQ_POLL)
    283  1.1  thorpej 			IF_POLL(ifq, m);
    284  1.1  thorpej 		else
    285  1.1  thorpej 			IF_DEQUEUE(ifq, m);
    286  1.1  thorpej 	}
    287  1.1  thorpej 
    288  1.1  thorpej 	if (m != NULL && op == ALTDQ_REMOVE)
    289  1.1  thorpej 		tbr->tbr_token -= TBR_SCALE(m_pktlen(m));
    290  1.1  thorpej 	tbr->tbr_lastop = op;
    291  1.1  thorpej 	return (m);
    292  1.1  thorpej }
    293  1.1  thorpej 
    294  1.1  thorpej /*
    295  1.1  thorpej  * set a token bucket regulator.
    296  1.1  thorpej  * if the specified rate is zero, the token bucket regulator is deleted.
    297  1.1  thorpej  */
    298  1.1  thorpej int
    299  1.1  thorpej tbr_set(ifq, profile)
    300  1.1  thorpej 	struct ifaltq *ifq;
    301  1.1  thorpej 	struct tb_profile *profile;
    302  1.1  thorpej {
    303  1.1  thorpej 	struct tb_regulator *tbr, *otbr;
    304  1.1  thorpej 
    305  1.1  thorpej 	if (machclk_freq == 0)
    306  1.1  thorpej 		init_machclk();
    307  1.1  thorpej 	if (machclk_freq == 0) {
    308  1.1  thorpej 		printf("tbr_set: no cpu clock available!\n");
    309  1.1  thorpej 		return (ENXIO);
    310  1.1  thorpej 	}
    311  1.1  thorpej 
    312  1.1  thorpej 	if (profile->rate == 0) {
    313  1.1  thorpej 		/* delete this tbr */
    314  1.1  thorpej 		if ((tbr = ifq->altq_tbr) == NULL)
    315  1.1  thorpej 			return (ENOENT);
    316  1.1  thorpej 		ifq->altq_tbr = NULL;
    317  1.1  thorpej 		FREE(tbr, M_DEVBUF);
    318  1.1  thorpej 		return (0);
    319  1.1  thorpej 	}
    320  1.1  thorpej 
    321  1.1  thorpej 	MALLOC(tbr, struct tb_regulator *, sizeof(struct tb_regulator),
    322  1.1  thorpej 	       M_DEVBUF, M_WAITOK);
    323  1.1  thorpej 	if (tbr == NULL)
    324  1.1  thorpej 		return (ENOMEM);
    325  1.1  thorpej 	bzero(tbr, sizeof(struct tb_regulator));
    326  1.1  thorpej 
    327  1.1  thorpej 	tbr->tbr_rate = TBR_SCALE(profile->rate / 8) / machclk_freq;
    328  1.1  thorpej 	tbr->tbr_depth = TBR_SCALE(profile->depth);
    329  1.1  thorpej 	if (tbr->tbr_rate > 0)
    330  1.1  thorpej 		tbr->tbr_filluptime = tbr->tbr_depth / tbr->tbr_rate;
    331  1.1  thorpej 	else
    332  1.1  thorpej 		tbr->tbr_filluptime = 0xffffffffffffffffLL;
    333  1.1  thorpej 	tbr->tbr_token = tbr->tbr_depth;
    334  1.1  thorpej 	tbr->tbr_last = read_machclk();
    335  1.1  thorpej 	tbr->tbr_lastop = ALTDQ_REMOVE;
    336  1.1  thorpej 
    337  1.1  thorpej 	otbr = ifq->altq_tbr;
    338  1.1  thorpej 	ifq->altq_tbr = tbr;	/* set the new tbr */
    339  1.1  thorpej 
    340  1.1  thorpej 	if (otbr != NULL)
    341  1.1  thorpej 		FREE(otbr, M_DEVBUF);
    342  1.1  thorpej 	else {
    343  1.1  thorpej 		if (tbr_timer == 0) {
    344  1.1  thorpej 			CALLOUT_RESET(&tbr_callout, 1, tbr_timeout, (void *)0);
    345  1.1  thorpej 			tbr_timer = 1;
    346  1.1  thorpej 		}
    347  1.1  thorpej 	}
    348  1.1  thorpej 	return (0);
    349  1.1  thorpej }
    350  1.1  thorpej 
    351  1.1  thorpej /*
    352  1.1  thorpej  * tbr_timeout goes through the interface list, and kicks the drivers
    353  1.1  thorpej  * if necessary.
    354  1.1  thorpej  */
    355  1.1  thorpej static void
    356  1.1  thorpej tbr_timeout(arg)
    357  1.1  thorpej 	void *arg;
    358  1.1  thorpej {
    359  1.1  thorpej 	struct ifnet *ifp;
    360  1.1  thorpej 	int active, s;
    361  1.1  thorpej 
    362  1.1  thorpej 	active = 0;
    363  1.1  thorpej 	s = splimp();
    364  1.1  thorpej #ifdef __FreeBSD__
    365  1.1  thorpej #if (__FreeBSD_version < 300000)
    366  1.1  thorpej 	for (ifp = ifnet; ifp; ifp = ifp->if_next)
    367  1.1  thorpej #else
    368  1.1  thorpej 	for (ifp = ifnet.tqh_first; ifp != NULL; ifp = ifp->if_link.tqe_next)
    369  1.1  thorpej #endif
    370  1.1  thorpej #else /* !FreeBSD */
    371  1.1  thorpej 	for (ifp = ifnet.tqh_first; ifp != NULL; ifp = ifp->if_list.tqe_next)
    372  1.1  thorpej #endif
    373  1.1  thorpej 	{
    374  1.1  thorpej 		if (!TBR_IS_ENABLED(&ifp->if_snd))
    375  1.1  thorpej 			continue;
    376  1.1  thorpej 		active++;
    377  1.1  thorpej 		if (!IFQ_IS_EMPTY(&ifp->if_snd) && ifp->if_start != NULL)
    378  1.1  thorpej 			(*ifp->if_start)(ifp);
    379  1.1  thorpej 	}
    380  1.1  thorpej 	splx(s);
    381  1.1  thorpej 	if (active > 0)
    382  1.1  thorpej 		CALLOUT_RESET(&tbr_callout, 1, tbr_timeout, (void *)0);
    383  1.1  thorpej 	else
    384  1.1  thorpej 		tbr_timer = 0;	/* don't need tbr_timer anymore */
    385  1.1  thorpej #if defined(__alpha__) && !defined(ALTQ_NOPCC)
    386  1.1  thorpej 	{
    387  1.1  thorpej 		/*
    388  1.1  thorpej 		 * XXX read out the machine dependent clock once a second
    389  1.1  thorpej 		 * to detect counter wrap-around.
    390  1.1  thorpej 		 */
    391  1.1  thorpej 		static u_int cnt;
    392  1.1  thorpej 
    393  1.1  thorpej 		if (++cnt >= hz) {
    394  1.1  thorpej 			(void)read_machclk();
    395  1.1  thorpej 			cnt = 0;
    396  1.1  thorpej 		}
    397  1.1  thorpej 	}
    398  1.1  thorpej #endif /* __alpha__ && !ALTQ_NOPCC */
    399  1.1  thorpej }
    400  1.1  thorpej 
    401  1.1  thorpej /*
    402  1.1  thorpej  * get token bucket regulator profile
    403  1.1  thorpej  */
    404  1.1  thorpej int
    405  1.1  thorpej tbr_get(ifq, profile)
    406  1.1  thorpej 	struct ifaltq *ifq;
    407  1.1  thorpej 	struct tb_profile *profile;
    408  1.1  thorpej {
    409  1.1  thorpej 	struct tb_regulator *tbr;
    410  1.1  thorpej 
    411  1.1  thorpej 	if ((tbr = ifq->altq_tbr) == NULL) {
    412  1.1  thorpej 		profile->rate = 0;
    413  1.1  thorpej 		profile->depth = 0;
    414  1.1  thorpej 	} else {
    415  1.1  thorpej 		profile->rate =
    416  1.1  thorpej 		    (u_int)TBR_UNSCALE(tbr->tbr_rate * 8 * machclk_freq);
    417  1.1  thorpej 		profile->depth = (u_int)TBR_UNSCALE(tbr->tbr_depth);
    418  1.1  thorpej 	}
    419  1.1  thorpej 	return (0);
    420  1.1  thorpej }
    421  1.1  thorpej 
    422  1.1  thorpej 
    423  1.1  thorpej #ifndef IPPROTO_ESP
    424  1.1  thorpej #define	IPPROTO_ESP	50		/* encapsulating security payload */
    425  1.1  thorpej #endif
    426  1.1  thorpej #ifndef IPPROTO_AH
    427  1.1  thorpej #define	IPPROTO_AH	51		/* authentication header */
    428  1.1  thorpej #endif
    429  1.1  thorpej 
    430  1.1  thorpej /*
    431  1.1  thorpej  * extract flow information from a given packet.
    432  1.1  thorpej  * filt_mask shows flowinfo fields required.
    433  1.1  thorpej  * we assume the ip header is in one mbuf, and addresses and ports are
    434  1.1  thorpej  * in network byte order.
    435  1.1  thorpej  */
    436  1.1  thorpej int
    437  1.1  thorpej altq_extractflow(m, af, flow, filt_bmask)
    438  1.1  thorpej 	struct mbuf *m;
    439  1.1  thorpej 	int af;
    440  1.1  thorpej 	struct flowinfo *flow;
    441  1.1  thorpej 	u_int32_t	filt_bmask;
    442  1.1  thorpej {
    443  1.1  thorpej 
    444  1.1  thorpej 	switch (af) {
    445  1.1  thorpej 	case PF_INET: {
    446  1.1  thorpej 		struct flowinfo_in *fin;
    447  1.1  thorpej 		struct ip *ip;
    448  1.1  thorpej 
    449  1.1  thorpej 		ip = mtod(m, struct ip *);
    450  1.1  thorpej 
    451  1.1  thorpej 		if (ip->ip_v != 4)
    452  1.1  thorpej 			break;
    453  1.1  thorpej 
    454  1.1  thorpej 		fin = (struct flowinfo_in *)flow;
    455  1.1  thorpej 		fin->fi_len = sizeof(struct flowinfo_in);
    456  1.1  thorpej 		fin->fi_family = AF_INET;
    457  1.1  thorpej 
    458  1.1  thorpej 		fin->fi_proto = ip->ip_p;
    459  1.1  thorpej 		fin->fi_tos = ip->ip_tos;
    460  1.1  thorpej 
    461  1.1  thorpej 		fin->fi_src.s_addr = ip->ip_src.s_addr;
    462  1.1  thorpej 		fin->fi_dst.s_addr = ip->ip_dst.s_addr;
    463  1.1  thorpej 
    464  1.1  thorpej 		if (filt_bmask & FIMB4_PORTS)
    465  1.1  thorpej 			/* if port info is required, extract port numbers */
    466  1.1  thorpej 			extract_ports4(m, ip, fin);
    467  1.1  thorpej 		else {
    468  1.1  thorpej 			fin->fi_sport = 0;
    469  1.1  thorpej 			fin->fi_dport = 0;
    470  1.1  thorpej 			fin->fi_gpi = 0;
    471  1.1  thorpej 		}
    472  1.1  thorpej 		return (1);
    473  1.1  thorpej 	}
    474  1.1  thorpej 
    475  1.1  thorpej #ifdef INET6
    476  1.1  thorpej 	case PF_INET6: {
    477  1.1  thorpej 		struct flowinfo_in6 *fin6;
    478  1.1  thorpej 		struct ip6_hdr *ip6;
    479  1.1  thorpej 
    480  1.1  thorpej 		ip6 = mtod(m, struct ip6_hdr *);
    481  1.1  thorpej 		/* should we check the ip version? */
    482  1.1  thorpej 
    483  1.1  thorpej 		fin6 = (struct flowinfo_in6 *)flow;
    484  1.1  thorpej 		fin6->fi6_len = sizeof(struct flowinfo_in6);
    485  1.1  thorpej 		fin6->fi6_family = AF_INET6;
    486  1.1  thorpej 
    487  1.1  thorpej 		fin6->fi6_proto = ip6->ip6_nxt;
    488  1.1  thorpej 		fin6->fi6_tclass   = (ntohl(ip6->ip6_flow) >> 20) & 0xff;
    489  1.1  thorpej 
    490  1.1  thorpej 		fin6->fi6_flowlabel = ip6->ip6_flow & htonl(0x000fffff);
    491  1.1  thorpej 		fin6->fi6_src = ip6->ip6_src;
    492  1.1  thorpej 		fin6->fi6_dst = ip6->ip6_dst;
    493  1.1  thorpej 
    494  1.1  thorpej 		if ((filt_bmask & FIMB6_PORTS) ||
    495  1.1  thorpej 		    ((filt_bmask & FIMB6_PROTO)
    496  1.1  thorpej 		     && ip6->ip6_nxt > IPPROTO_IPV6))
    497  1.1  thorpej 			/*
    498  1.1  thorpej 			 * if port info is required, or proto is required
    499  1.1  thorpej 			 * but there are option headers, extract port
    500  1.1  thorpej 			 * and protocol numbers.
    501  1.1  thorpej 			 */
    502  1.1  thorpej 			extract_ports6(m, ip6, fin6);
    503  1.1  thorpej 		else {
    504  1.1  thorpej 			fin6->fi6_sport = 0;
    505  1.1  thorpej 			fin6->fi6_dport = 0;
    506  1.1  thorpej 			fin6->fi6_gpi = 0;
    507  1.1  thorpej 		}
    508  1.1  thorpej 		return (1);
    509  1.1  thorpej 	}
    510  1.1  thorpej #endif /* INET6 */
    511  1.1  thorpej 
    512  1.1  thorpej 	default:
    513  1.1  thorpej 		break;
    514  1.1  thorpej 	}
    515  1.1  thorpej 
    516  1.1  thorpej 	/* failed */
    517  1.1  thorpej 	flow->fi_len = sizeof(struct flowinfo);
    518  1.1  thorpej 	flow->fi_family = AF_UNSPEC;
    519  1.1  thorpej 	return (0);
    520  1.1  thorpej }
    521  1.1  thorpej 
    522  1.1  thorpej /*
    523  1.1  thorpej  * helper routine to extract port numbers
    524  1.1  thorpej  */
    525  1.1  thorpej /* structure for ipsec and ipv6 option header template */
    526  1.1  thorpej struct _opt6 {
    527  1.1  thorpej 	u_int8_t	opt6_nxt;	/* next header */
    528  1.1  thorpej 	u_int8_t	opt6_hlen;	/* header extension length */
    529  1.1  thorpej 	u_int16_t	_pad;
    530  1.1  thorpej 	u_int32_t	ah_spi;		/* security parameter index
    531  1.1  thorpej 					   for authentication header */
    532  1.1  thorpej };
    533  1.1  thorpej 
    534  1.1  thorpej /*
    535  1.1  thorpej  * extract port numbers from a ipv4 packet.
    536  1.1  thorpej  */
    537  1.1  thorpej static int
    538  1.1  thorpej extract_ports4(m, ip, fin)
    539  1.1  thorpej 	struct mbuf *m;
    540  1.1  thorpej 	struct ip *ip;
    541  1.1  thorpej 	struct flowinfo_in *fin;
    542  1.1  thorpej {
    543  1.1  thorpej 	struct mbuf *m0;
    544  1.1  thorpej 	u_short ip_off;
    545  1.1  thorpej 	u_int8_t proto;
    546  1.1  thorpej 	int 	off;
    547  1.1  thorpej 
    548  1.1  thorpej 	fin->fi_sport = 0;
    549  1.1  thorpej 	fin->fi_dport = 0;
    550  1.1  thorpej 	fin->fi_gpi = 0;
    551  1.1  thorpej 
    552  1.1  thorpej 	ip_off = ntohs(ip->ip_off);
    553  1.1  thorpej 	/* if it is a fragment, try cached fragment info */
    554  1.1  thorpej 	if (ip_off & IP_OFFMASK) {
    555  1.1  thorpej 		ip4f_lookup(ip, fin);
    556  1.1  thorpej 		return (1);
    557  1.1  thorpej 	}
    558  1.1  thorpej 
    559  1.1  thorpej 	/* locate the mbuf containing the protocol header */
    560  1.1  thorpej 	for (m0 = m; m0 != NULL; m0 = m0->m_next)
    561  1.1  thorpej 		if (((caddr_t)ip >= m0->m_data) &&
    562  1.1  thorpej 		    ((caddr_t)ip < m0->m_data + m0->m_len))
    563  1.1  thorpej 			break;
    564  1.1  thorpej 	if (m0 == NULL) {
    565  1.1  thorpej #ifdef ALTQ_DEBUG
    566  1.1  thorpej 		printf("extract_ports4: can't locate header! ip=%p\n", ip);
    567  1.1  thorpej #endif
    568  1.1  thorpej 		return (0);
    569  1.1  thorpej 	}
    570  1.1  thorpej 	off = ((caddr_t)ip - m0->m_data) + (ip->ip_hl << 2);
    571  1.1  thorpej 	proto = ip->ip_p;
    572  1.1  thorpej 
    573  1.1  thorpej #ifdef ALTQ_IPSEC
    574  1.1  thorpej  again:
    575  1.1  thorpej #endif
    576  1.1  thorpej 	while (off >= m0->m_len) {
    577  1.1  thorpej 		off -= m0->m_len;
    578  1.1  thorpej 		m0 = m0->m_next;
    579  1.1  thorpej 	}
    580  1.1  thorpej 	ASSERT(m0->m_len >= off + 4);
    581  1.1  thorpej 
    582  1.1  thorpej 	switch (proto) {
    583  1.1  thorpej 	case IPPROTO_TCP:
    584  1.1  thorpej 	case IPPROTO_UDP: {
    585  1.1  thorpej 		struct udphdr *udp;
    586  1.1  thorpej 
    587  1.1  thorpej 		udp = (struct udphdr *)(mtod(m0, caddr_t) + off);
    588  1.1  thorpej 		fin->fi_sport = udp->uh_sport;
    589  1.1  thorpej 		fin->fi_dport = udp->uh_dport;
    590  1.1  thorpej 		fin->fi_proto = proto;
    591  1.1  thorpej 		}
    592  1.1  thorpej 		break;
    593  1.1  thorpej 
    594  1.1  thorpej #ifdef ALTQ_IPSEC
    595  1.1  thorpej 	case IPPROTO_ESP:
    596  1.1  thorpej 		if (fin->fi_gpi == 0){
    597  1.1  thorpej 			u_int32_t *gpi;
    598  1.1  thorpej 
    599  1.1  thorpej 			gpi = (u_int32_t *)(mtod(m0, caddr_t) + off);
    600  1.1  thorpej 			fin->fi_gpi   = *gpi;
    601  1.1  thorpej 		}
    602  1.1  thorpej 		fin->fi_proto = proto;
    603  1.1  thorpej 		break;
    604  1.1  thorpej 
    605  1.1  thorpej 	case IPPROTO_AH: {
    606  1.1  thorpej 			/* get next header and header length */
    607  1.1  thorpej 			struct _opt6 *opt6;
    608  1.1  thorpej 
    609  1.1  thorpej 			opt6 = (struct _opt6 *)(mtod(m0, caddr_t) + off);
    610  1.1  thorpej 			proto = opt6->opt6_nxt;
    611  1.1  thorpej 			off += 8 + (opt6->opt6_hlen * 4);
    612  1.1  thorpej 			if (fin->fi_gpi == 0)
    613  1.1  thorpej 				fin->fi_gpi = opt6->ah_spi;
    614  1.1  thorpej 		}
    615  1.1  thorpej 		/* goto the next header */
    616  1.1  thorpej 		goto again;
    617  1.1  thorpej #endif  /* ALTQ_IPSEC */
    618  1.1  thorpej 
    619  1.1  thorpej 	default:
    620  1.1  thorpej 		fin->fi_proto = proto;
    621  1.1  thorpej 		return (0);
    622  1.1  thorpej 	}
    623  1.1  thorpej 
    624  1.1  thorpej 	/* if this is a first fragment, cache it. */
    625  1.1  thorpej 	if (ip_off & IP_MF)
    626  1.1  thorpej 		ip4f_cache(ip, fin);
    627  1.1  thorpej 
    628  1.1  thorpej 	return (1);
    629  1.1  thorpej }
    630  1.1  thorpej 
    631  1.1  thorpej #ifdef INET6
    632  1.1  thorpej static int
    633  1.1  thorpej extract_ports6(m, ip6, fin6)
    634  1.1  thorpej 	struct mbuf *m;
    635  1.1  thorpej 	struct ip6_hdr *ip6;
    636  1.1  thorpej 	struct flowinfo_in6 *fin6;
    637  1.1  thorpej {
    638  1.1  thorpej 	struct mbuf *m0;
    639  1.1  thorpej 	int	off;
    640  1.1  thorpej 	u_int8_t proto;
    641  1.1  thorpej 
    642  1.1  thorpej 	fin6->fi6_gpi   = 0;
    643  1.1  thorpej 	fin6->fi6_sport = 0;
    644  1.1  thorpej 	fin6->fi6_dport = 0;
    645  1.1  thorpej 
    646  1.1  thorpej 	/* locate the mbuf containing the protocol header */
    647  1.1  thorpej 	for (m0 = m; m0 != NULL; m0 = m0->m_next)
    648  1.1  thorpej 		if (((caddr_t)ip6 >= m0->m_data) &&
    649  1.1  thorpej 		    ((caddr_t)ip6 < m0->m_data + m0->m_len))
    650  1.1  thorpej 			break;
    651  1.1  thorpej 	if (m0 == NULL) {
    652  1.1  thorpej #ifdef ALTQ_DEBUG
    653  1.1  thorpej 		printf("extract_ports6: can't locate header! ip6=%p\n", ip6);
    654  1.1  thorpej #endif
    655  1.1  thorpej 		return (0);
    656  1.1  thorpej 	}
    657  1.1  thorpej 	off = ((caddr_t)ip6 - m0->m_data) + sizeof(struct ip6_hdr);
    658  1.1  thorpej 
    659  1.1  thorpej 	proto = ip6->ip6_nxt;
    660  1.1  thorpej 	do {
    661  1.1  thorpej 		while (off >= m0->m_len) {
    662  1.1  thorpej 			off -= m0->m_len;
    663  1.1  thorpej 			m0 = m0->m_next;
    664  1.1  thorpej 		}
    665  1.1  thorpej 		ASSERT(m0->m_len >= off + 4);
    666  1.1  thorpej 
    667  1.1  thorpej 		switch (proto) {
    668  1.1  thorpej 		case IPPROTO_TCP:
    669  1.1  thorpej 		case IPPROTO_UDP: {
    670  1.1  thorpej 			struct udphdr *udp;
    671  1.1  thorpej 
    672  1.1  thorpej 			udp = (struct udphdr *)(mtod(m0, caddr_t) + off);
    673  1.1  thorpej 			fin6->fi6_sport = udp->uh_sport;
    674  1.1  thorpej 			fin6->fi6_dport = udp->uh_dport;
    675  1.1  thorpej 			fin6->fi6_proto = proto;
    676  1.1  thorpej 			}
    677  1.1  thorpej 			return (1);
    678  1.1  thorpej 
    679  1.1  thorpej 		case IPPROTO_ESP:
    680  1.1  thorpej 			if (fin6->fi6_gpi == 0) {
    681  1.1  thorpej 				u_int32_t *gpi;
    682  1.1  thorpej 
    683  1.1  thorpej 				gpi = (u_int32_t *)(mtod(m0, caddr_t) + off);
    684  1.1  thorpej 				fin6->fi6_gpi   = *gpi;
    685  1.1  thorpej 			}
    686  1.1  thorpej 			fin6->fi6_proto = proto;
    687  1.1  thorpej 			return (1);
    688  1.1  thorpej 
    689  1.1  thorpej 		case IPPROTO_AH: {
    690  1.1  thorpej 			/* get next header and header length */
    691  1.1  thorpej 			struct _opt6 *opt6;
    692  1.1  thorpej 
    693  1.1  thorpej 			opt6 = (struct _opt6 *)(mtod(m0, caddr_t) + off);
    694  1.1  thorpej 			if (fin6->fi6_gpi == 0)
    695  1.1  thorpej 				fin6->fi6_gpi = opt6->ah_spi;
    696  1.1  thorpej 			proto = opt6->opt6_nxt;
    697  1.1  thorpej 			off += 8 + (opt6->opt6_hlen * 4);
    698  1.1  thorpej 			/* goto the next header */
    699  1.1  thorpej 			break;
    700  1.1  thorpej 			}
    701  1.1  thorpej 
    702  1.1  thorpej 		case IPPROTO_HOPOPTS:
    703  1.1  thorpej 		case IPPROTO_ROUTING:
    704  1.1  thorpej 		case IPPROTO_DSTOPTS: {
    705  1.1  thorpej 			/* get next header and header length */
    706  1.1  thorpej 			struct _opt6 *opt6;
    707  1.1  thorpej 
    708  1.1  thorpej 			opt6 = (struct _opt6 *)(mtod(m0, caddr_t) + off);
    709  1.1  thorpej 			proto = opt6->opt6_nxt;
    710  1.1  thorpej 			off += (opt6->opt6_hlen + 1) * 8;
    711  1.1  thorpej 			/* goto the next header */
    712  1.1  thorpej 			break;
    713  1.1  thorpej 			}
    714  1.1  thorpej 
    715  1.1  thorpej 		case IPPROTO_FRAGMENT:
    716  1.1  thorpej 			/* ipv6 fragmentations are not supported yet */
    717  1.1  thorpej 		default:
    718  1.1  thorpej 			fin6->fi6_proto = proto;
    719  1.1  thorpej 			return (0);
    720  1.1  thorpej 		}
    721  1.1  thorpej 	} while (1);
    722  1.1  thorpej 	/*NOTREACHED*/
    723  1.1  thorpej }
    724  1.1  thorpej #endif /* INET6 */
    725  1.1  thorpej 
    726  1.1  thorpej /*
    727  1.1  thorpej  * altq common classifier
    728  1.1  thorpej  */
    729  1.1  thorpej int
    730  1.1  thorpej acc_add_filter(classifier, filter, class, phandle)
    731  1.1  thorpej 	struct acc_classifier *classifier;
    732  1.1  thorpej 	struct flow_filter *filter;
    733  1.1  thorpej 	void	*class;
    734  1.1  thorpej 	u_long	*phandle;
    735  1.1  thorpej {
    736  1.1  thorpej 	struct acc_filter *afp, *prev, *tmp;
    737  1.1  thorpej 	int	i, s;
    738  1.1  thorpej 
    739  1.1  thorpej #ifdef INET6
    740  1.1  thorpej 	if (filter->ff_flow.fi_family != AF_INET &&
    741  1.1  thorpej 	    filter->ff_flow.fi_family != AF_INET6)
    742  1.1  thorpej 		return (EINVAL);
    743  1.1  thorpej #else
    744  1.1  thorpej 	if (filter->ff_flow.fi_family != AF_INET)
    745  1.1  thorpej 		return (EINVAL);
    746  1.1  thorpej #endif
    747  1.1  thorpej 
    748  1.1  thorpej 	MALLOC(afp, struct acc_filter *, sizeof(struct acc_filter),
    749  1.1  thorpej 	       M_DEVBUF, M_WAITOK);
    750  1.1  thorpej 	if (afp == NULL)
    751  1.1  thorpej 		return (ENOMEM);
    752  1.1  thorpej 	bzero(afp, sizeof(struct acc_filter));
    753  1.1  thorpej 
    754  1.1  thorpej 	afp->f_filter = *filter;
    755  1.1  thorpej 	afp->f_class = class;
    756  1.1  thorpej 
    757  1.1  thorpej 	i = ACC_WILDCARD_INDEX;
    758  1.1  thorpej 	if (filter->ff_flow.fi_family == AF_INET) {
    759  1.1  thorpej 		struct flow_filter *filter4 = &afp->f_filter;
    760  1.1  thorpej 
    761  1.1  thorpej 		/*
    762  1.1  thorpej 		 * if address is 0, it's a wildcard.  if address mask
    763  1.1  thorpej 		 * isn't set, use full mask.
    764  1.1  thorpej 		 */
    765  1.1  thorpej 		if (filter4->ff_flow.fi_dst.s_addr == 0)
    766  1.1  thorpej 			filter4->ff_mask.mask_dst.s_addr = 0;
    767  1.1  thorpej 		else if (filter4->ff_mask.mask_dst.s_addr == 0)
    768  1.1  thorpej 			filter4->ff_mask.mask_dst.s_addr = 0xffffffff;
    769  1.1  thorpej 		if (filter4->ff_flow.fi_src.s_addr == 0)
    770  1.1  thorpej 			filter4->ff_mask.mask_src.s_addr = 0;
    771  1.1  thorpej 		else if (filter4->ff_mask.mask_src.s_addr == 0)
    772  1.1  thorpej 			filter4->ff_mask.mask_src.s_addr = 0xffffffff;
    773  1.1  thorpej 
    774  1.1  thorpej 		/* clear extra bits in addresses  */
    775  1.1  thorpej 		   filter4->ff_flow.fi_dst.s_addr &=
    776  1.1  thorpej 		       filter4->ff_mask.mask_dst.s_addr;
    777  1.1  thorpej 		   filter4->ff_flow.fi_src.s_addr &=
    778  1.1  thorpej 		       filter4->ff_mask.mask_src.s_addr;
    779  1.1  thorpej 
    780  1.1  thorpej 		/*
    781  1.1  thorpej 		 * if dst address is a wildcard, use hash-entry
    782  1.1  thorpej 		 * ACC_WILDCARD_INDEX.
    783  1.1  thorpej 		 */
    784  1.1  thorpej 		if (filter4->ff_mask.mask_dst.s_addr != 0xffffffff)
    785  1.1  thorpej 			i = ACC_WILDCARD_INDEX;
    786  1.1  thorpej 		else
    787  1.1  thorpej 			i = ACC_GET_HASH_INDEX(filter4->ff_flow.fi_dst.s_addr);
    788  1.1  thorpej 	}
    789  1.1  thorpej #ifdef INET6
    790  1.1  thorpej 	else if (filter->ff_flow.fi_family == AF_INET6) {
    791  1.1  thorpej 		struct flow_filter6 *filter6 =
    792  1.1  thorpej 			(struct flow_filter6 *)&afp->f_filter;
    793  1.1  thorpej #ifndef IN6MASK0 /* taken from kame ipv6 */
    794  1.1  thorpej #define	IN6MASK0	{{{ 0, 0, 0, 0 }}}
    795  1.1  thorpej #define	IN6MASK128	{{{ 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff }}}
    796  1.1  thorpej 		const struct in6_addr in6mask0 = IN6MASK0;
    797  1.1  thorpej 		const struct in6_addr in6mask128 = IN6MASK128;
    798  1.1  thorpej #endif
    799  1.1  thorpej 
    800  1.1  thorpej 		if (IN6_IS_ADDR_UNSPECIFIED(&filter6->ff_flow6.fi6_dst))
    801  1.1  thorpej 			filter6->ff_mask6.mask6_dst = in6mask0;
    802  1.1  thorpej 		else if (IN6_IS_ADDR_UNSPECIFIED(&filter6->ff_mask6.mask6_dst))
    803  1.1  thorpej 			filter6->ff_mask6.mask6_dst = in6mask128;
    804  1.1  thorpej 		if (IN6_IS_ADDR_UNSPECIFIED(&filter6->ff_flow6.fi6_src))
    805  1.1  thorpej 			filter6->ff_mask6.mask6_src = in6mask0;
    806  1.1  thorpej 		else if (IN6_IS_ADDR_UNSPECIFIED(&filter6->ff_mask6.mask6_src))
    807  1.1  thorpej 			filter6->ff_mask6.mask6_src = in6mask128;
    808  1.1  thorpej 
    809  1.1  thorpej 		/* clear extra bits in addresses  */
    810  1.1  thorpej 		for (i = 0; i < 16; i++)
    811  1.1  thorpej 			filter6->ff_flow6.fi6_dst.s6_addr[i] &=
    812  1.1  thorpej 			    filter6->ff_mask6.mask6_dst.s6_addr[i];
    813  1.1  thorpej 		for (i = 0; i < 16; i++)
    814  1.1  thorpej 			filter6->ff_flow6.fi6_src.s6_addr[i] &=
    815  1.1  thorpej 			    filter6->ff_mask6.mask6_src.s6_addr[i];
    816  1.1  thorpej 
    817  1.1  thorpej 		if (filter6->ff_flow6.fi6_flowlabel == 0)
    818  1.1  thorpej 			i = ACC_WILDCARD_INDEX;
    819  1.1  thorpej 		else
    820  1.1  thorpej 			i = ACC_GET_HASH_INDEX(filter6->ff_flow6.fi6_flowlabel);
    821  1.1  thorpej 	}
    822  1.1  thorpej #endif /* INET6 */
    823  1.1  thorpej 
    824  1.1  thorpej 	afp->f_handle = get_filt_handle(classifier, i);
    825  1.1  thorpej 
    826  1.1  thorpej 	/* update filter bitmask */
    827  1.1  thorpej 	afp->f_fbmask = filt2fibmask(filter);
    828  1.1  thorpej 	classifier->acc_fbmask |= afp->f_fbmask;
    829  1.1  thorpej 
    830  1.1  thorpej 	/*
    831  1.1  thorpej 	 * add this filter to the filter list.
    832  1.1  thorpej 	 * filters are ordered from the highest rule number.
    833  1.1  thorpej 	 */
    834  1.1  thorpej 	s = splimp();
    835  1.1  thorpej 	prev = NULL;
    836  1.1  thorpej 	LIST_FOREACH(tmp, &classifier->acc_filters[i], f_chain) {
    837  1.1  thorpej 		if (tmp->f_filter.ff_ruleno > afp->f_filter.ff_ruleno)
    838  1.1  thorpej 			prev = tmp;
    839  1.1  thorpej 		else
    840  1.1  thorpej 			break;
    841  1.1  thorpej 	}
    842  1.1  thorpej 	if (prev == NULL)
    843  1.1  thorpej 		LIST_INSERT_HEAD(&classifier->acc_filters[i], afp, f_chain);
    844  1.1  thorpej 	else
    845  1.1  thorpej 		LIST_INSERT_AFTER(prev, afp, f_chain);
    846  1.1  thorpej 	splx(s);
    847  1.1  thorpej 
    848  1.1  thorpej 	*phandle = afp->f_handle;
    849  1.1  thorpej 	return (0);
    850  1.1  thorpej }
    851  1.1  thorpej 
    852  1.1  thorpej int
    853  1.1  thorpej acc_delete_filter(classifier, handle)
    854  1.1  thorpej 	struct acc_classifier *classifier;
    855  1.1  thorpej 	u_long handle;
    856  1.1  thorpej {
    857  1.1  thorpej 	struct acc_filter *afp;
    858  1.1  thorpej 	int	s;
    859  1.1  thorpej 
    860  1.1  thorpej 	if ((afp = filth_to_filtp(classifier, handle)) == NULL)
    861  1.1  thorpej 		return (EINVAL);
    862  1.1  thorpej 
    863  1.1  thorpej 	s = splimp();
    864  1.1  thorpej 	LIST_REMOVE(afp, f_chain);
    865  1.1  thorpej 	splx(s);
    866  1.1  thorpej 
    867  1.1  thorpej 	FREE(afp, M_DEVBUF);
    868  1.1  thorpej 
    869  1.1  thorpej 	/* todo: update filt_bmask */
    870  1.1  thorpej 
    871  1.1  thorpej 	return (0);
    872  1.1  thorpej }
    873  1.1  thorpej 
    874  1.1  thorpej /*
    875  1.1  thorpej  * delete filters referencing to the specified class.
    876  1.1  thorpej  * if the all flag is not 0, delete all the filters.
    877  1.1  thorpej  */
    878  1.1  thorpej int
    879  1.1  thorpej acc_discard_filters(classifier, class, all)
    880  1.1  thorpej 	struct acc_classifier *classifier;
    881  1.1  thorpej 	void	*class;
    882  1.1  thorpej 	int	all;
    883  1.1  thorpej {
    884  1.1  thorpej 	struct acc_filter *afp;
    885  1.1  thorpej 	int	i, s;
    886  1.1  thorpej 
    887  1.1  thorpej 	s = splimp();
    888  1.1  thorpej 	for (i = 0; i < ACC_FILTER_TABLESIZE; i++) {
    889  1.1  thorpej 		do {
    890  1.1  thorpej 			LIST_FOREACH(afp, &classifier->acc_filters[i], f_chain)
    891  1.1  thorpej 				if (all || afp->f_class == class) {
    892  1.1  thorpej 					LIST_REMOVE(afp, f_chain);
    893  1.1  thorpej 					FREE(afp, M_DEVBUF);
    894  1.1  thorpej 					/* start again from the head */
    895  1.1  thorpej 					break;
    896  1.1  thorpej 				}
    897  1.1  thorpej 		} while (afp != NULL);
    898  1.1  thorpej 	}
    899  1.1  thorpej 	splx(s);
    900  1.1  thorpej 
    901  1.1  thorpej 	if (all)
    902  1.1  thorpej 		classifier->acc_fbmask = 0;
    903  1.1  thorpej 
    904  1.1  thorpej 	return (0);
    905  1.1  thorpej }
    906  1.1  thorpej 
    907  1.1  thorpej void *
    908  1.1  thorpej acc_classify(clfier, m, af)
    909  1.1  thorpej 	void *clfier;
    910  1.1  thorpej 	struct mbuf *m;
    911  1.1  thorpej 	int af;
    912  1.1  thorpej {
    913  1.1  thorpej 	struct acc_classifier *classifier;
    914  1.1  thorpej 	struct flowinfo flow;
    915  1.1  thorpej 	struct acc_filter *afp;
    916  1.1  thorpej 	int	i;
    917  1.1  thorpej 
    918  1.1  thorpej 	classifier = (struct acc_classifier *)clfier;
    919  1.1  thorpej 	altq_extractflow(m, af, &flow, classifier->acc_fbmask);
    920  1.1  thorpej 
    921  1.1  thorpej 	if (flow.fi_family == AF_INET) {
    922  1.1  thorpej 		struct flowinfo_in *fp = (struct flowinfo_in *)&flow;
    923  1.1  thorpej 
    924  1.1  thorpej 		if ((classifier->acc_fbmask & FIMB4_ALL) == FIMB4_TOS) {
    925  1.1  thorpej 			/* only tos is used */
    926  1.1  thorpej 			LIST_FOREACH(afp,
    927  1.1  thorpej 				 &classifier->acc_filters[ACC_WILDCARD_INDEX],
    928  1.1  thorpej 				 f_chain)
    929  1.1  thorpej 				if (apply_tosfilter4(afp->f_fbmask,
    930  1.1  thorpej 						     &afp->f_filter, fp))
    931  1.1  thorpej 					/* filter matched */
    932  1.1  thorpej 					return (afp->f_class);
    933  1.1  thorpej 		} else if ((classifier->acc_fbmask &
    934  1.1  thorpej 			(~(FIMB4_PROTO|FIMB4_SPORT|FIMB4_DPORT) & FIMB4_ALL))
    935  1.1  thorpej 		    == 0) {
    936  1.1  thorpej 			/* only proto and ports are used */
    937  1.1  thorpej 			LIST_FOREACH(afp,
    938  1.1  thorpej 				 &classifier->acc_filters[ACC_WILDCARD_INDEX],
    939  1.1  thorpej 				 f_chain)
    940  1.1  thorpej 				if (apply_ppfilter4(afp->f_fbmask,
    941  1.1  thorpej 						    &afp->f_filter, fp))
    942  1.1  thorpej 					/* filter matched */
    943  1.1  thorpej 					return (afp->f_class);
    944  1.1  thorpej 		} else {
    945  1.1  thorpej 			/* get the filter hash entry from its dest address */
    946  1.1  thorpej 			i = ACC_GET_HASH_INDEX(fp->fi_dst.s_addr);
    947  1.1  thorpej 			do {
    948  1.1  thorpej 				/*
    949  1.1  thorpej 				 * go through this loop twice.  first for dst
    950  1.1  thorpej 				 * hash, second for wildcards.
    951  1.1  thorpej 				 */
    952  1.1  thorpej 				LIST_FOREACH(afp, &classifier->acc_filters[i],
    953  1.1  thorpej 					     f_chain)
    954  1.1  thorpej 					if (apply_filter4(afp->f_fbmask,
    955  1.1  thorpej 							  &afp->f_filter, fp))
    956  1.1  thorpej 						/* filter matched */
    957  1.1  thorpej 						return (afp->f_class);
    958  1.1  thorpej 
    959  1.1  thorpej 				/*
    960  1.1  thorpej 				 * check again for filters with a dst addr
    961  1.1  thorpej 				 * wildcard.
    962  1.1  thorpej 				 * (daddr == 0 || dmask != 0xffffffff).
    963  1.1  thorpej 				 */
    964  1.1  thorpej 				if (i != ACC_WILDCARD_INDEX)
    965  1.1  thorpej 					i = ACC_WILDCARD_INDEX;
    966  1.1  thorpej 				else
    967  1.1  thorpej 					break;
    968  1.1  thorpej 			} while (1);
    969  1.1  thorpej 		}
    970  1.1  thorpej 	}
    971  1.1  thorpej #ifdef INET6
    972  1.1  thorpej 	else if (flow.fi_family == AF_INET6) {
    973  1.1  thorpej 		struct flowinfo_in6 *fp6 = (struct flowinfo_in6 *)&flow;
    974  1.1  thorpej 
    975  1.1  thorpej 		/* get the filter hash entry from its flow ID */
    976  1.1  thorpej 		if (fp6->fi6_flowlabel != 0)
    977  1.1  thorpej 			i = ACC_GET_HASH_INDEX(fp6->fi6_flowlabel);
    978  1.1  thorpej 		else
    979  1.1  thorpej 			/* flowlable can be zero */
    980  1.1  thorpej 			i = ACC_WILDCARD_INDEX;
    981  1.1  thorpej 
    982  1.1  thorpej 		/* go through this loop twice.  first for flow hash, second
    983  1.1  thorpej 		   for wildcards. */
    984  1.1  thorpej 		do {
    985  1.1  thorpej 			LIST_FOREACH(afp, &classifier->acc_filters[i], f_chain)
    986  1.1  thorpej 				if (apply_filter6(afp->f_fbmask,
    987  1.1  thorpej 					(struct flow_filter6 *)&afp->f_filter,
    988  1.1  thorpej 					fp6))
    989  1.1  thorpej 					/* filter matched */
    990  1.1  thorpej 					return (afp->f_class);
    991  1.1  thorpej 
    992  1.1  thorpej 			/*
    993  1.1  thorpej 			 * check again for filters with a wildcard.
    994  1.1  thorpej 			 */
    995  1.1  thorpej 			if (i != ACC_WILDCARD_INDEX)
    996  1.1  thorpej 				i = ACC_WILDCARD_INDEX;
    997  1.1  thorpej 			else
    998  1.1  thorpej 				break;
    999  1.1  thorpej 		} while (1);
   1000  1.1  thorpej 	}
   1001  1.1  thorpej #endif /* INET6 */
   1002  1.1  thorpej 
   1003  1.1  thorpej 	/* no filter matched */
   1004  1.1  thorpej 	return (NULL);
   1005  1.1  thorpej }
   1006  1.1  thorpej 
   1007  1.1  thorpej static int
   1008  1.1  thorpej apply_filter4(fbmask, filt, pkt)
   1009  1.1  thorpej 	u_int32_t	fbmask;
   1010  1.1  thorpej 	struct flow_filter *filt;
   1011  1.1  thorpej 	struct flowinfo_in *pkt;
   1012  1.1  thorpej {
   1013  1.1  thorpej 	if (filt->ff_flow.fi_family != AF_INET)
   1014  1.1  thorpej 		return (0);
   1015  1.1  thorpej 	if ((fbmask & FIMB4_SPORT) && filt->ff_flow.fi_sport != pkt->fi_sport)
   1016  1.1  thorpej 		return (0);
   1017  1.1  thorpej 	if ((fbmask & FIMB4_DPORT) && filt->ff_flow.fi_dport != pkt->fi_dport)
   1018  1.1  thorpej 		return (0);
   1019  1.1  thorpej 	if ((fbmask & FIMB4_DADDR) &&
   1020  1.1  thorpej 	    filt->ff_flow.fi_dst.s_addr !=
   1021  1.1  thorpej 	    (pkt->fi_dst.s_addr & filt->ff_mask.mask_dst.s_addr))
   1022  1.1  thorpej 		return (0);
   1023  1.1  thorpej 	if ((fbmask & FIMB4_SADDR) &&
   1024  1.1  thorpej 	    filt->ff_flow.fi_src.s_addr !=
   1025  1.1  thorpej 	    (pkt->fi_src.s_addr & filt->ff_mask.mask_src.s_addr))
   1026  1.1  thorpej 		return (0);
   1027  1.1  thorpej 	if ((fbmask & FIMB4_PROTO) && filt->ff_flow.fi_proto != pkt->fi_proto)
   1028  1.1  thorpej 		return (0);
   1029  1.1  thorpej 	if ((fbmask & FIMB4_TOS) && filt->ff_flow.fi_tos !=
   1030  1.1  thorpej 	    (pkt->fi_tos & filt->ff_mask.mask_tos))
   1031  1.1  thorpej 		return (0);
   1032  1.1  thorpej 	if ((fbmask & FIMB4_GPI) && filt->ff_flow.fi_gpi != (pkt->fi_gpi))
   1033  1.1  thorpej 		return (0);
   1034  1.1  thorpej 	/* match */
   1035  1.1  thorpej 	return (1);
   1036  1.1  thorpej }
   1037  1.1  thorpej 
   1038  1.1  thorpej /*
   1039  1.1  thorpej  * filter matching function optimized for a common case that checks
   1040  1.1  thorpej  * only protocol and port numbers
   1041  1.1  thorpej  */
   1042  1.1  thorpej static int
   1043  1.1  thorpej apply_ppfilter4(fbmask, filt, pkt)
   1044  1.1  thorpej 	u_int32_t	fbmask;
   1045  1.1  thorpej 	struct flow_filter *filt;
   1046  1.1  thorpej 	struct flowinfo_in *pkt;
   1047  1.1  thorpej {
   1048  1.1  thorpej 	if (filt->ff_flow.fi_family != AF_INET)
   1049  1.1  thorpej 		return (0);
   1050  1.1  thorpej 	if ((fbmask & FIMB4_SPORT) && filt->ff_flow.fi_sport != pkt->fi_sport)
   1051  1.1  thorpej 		return (0);
   1052  1.1  thorpej 	if ((fbmask & FIMB4_DPORT) && filt->ff_flow.fi_dport != pkt->fi_dport)
   1053  1.1  thorpej 		return (0);
   1054  1.1  thorpej 	if ((fbmask & FIMB4_PROTO) && filt->ff_flow.fi_proto != pkt->fi_proto)
   1055  1.1  thorpej 		return (0);
   1056  1.1  thorpej 	/* match */
   1057  1.1  thorpej 	return (1);
   1058  1.1  thorpej }
   1059  1.1  thorpej 
   1060  1.1  thorpej /*
   1061  1.1  thorpej  * filter matching function only for tos field.
   1062  1.1  thorpej  */
   1063  1.1  thorpej static int
   1064  1.1  thorpej apply_tosfilter4(fbmask, filt, pkt)
   1065  1.1  thorpej 	u_int32_t	fbmask;
   1066  1.1  thorpej 	struct flow_filter *filt;
   1067  1.1  thorpej 	struct flowinfo_in *pkt;
   1068  1.1  thorpej {
   1069  1.1  thorpej 	if (filt->ff_flow.fi_family != AF_INET)
   1070  1.1  thorpej 		return (0);
   1071  1.1  thorpej 	if ((fbmask & FIMB4_TOS) && filt->ff_flow.fi_tos !=
   1072  1.1  thorpej 	    (pkt->fi_tos & filt->ff_mask.mask_tos))
   1073  1.1  thorpej 		return (0);
   1074  1.1  thorpej 	/* match */
   1075  1.1  thorpej 	return (1);
   1076  1.1  thorpej }
   1077  1.1  thorpej 
   1078  1.1  thorpej #ifdef INET6
   1079  1.1  thorpej static int
   1080  1.1  thorpej apply_filter6(fbmask, filt, pkt)
   1081  1.1  thorpej 	u_int32_t	fbmask;
   1082  1.1  thorpej 	struct flow_filter6 *filt;
   1083  1.1  thorpej 	struct flowinfo_in6 *pkt;
   1084  1.1  thorpej {
   1085  1.1  thorpej 	int i;
   1086  1.1  thorpej 
   1087  1.1  thorpej 	if (filt->ff_flow6.fi6_family != AF_INET6)
   1088  1.1  thorpej 		return (0);
   1089  1.1  thorpej 	if ((fbmask & FIMB6_FLABEL) &&
   1090  1.1  thorpej 	    filt->ff_flow6.fi6_flowlabel != pkt->fi6_flowlabel)
   1091  1.1  thorpej 		return (0);
   1092  1.1  thorpej 	if ((fbmask & FIMB6_PROTO) &&
   1093  1.1  thorpej 	    filt->ff_flow6.fi6_proto != pkt->fi6_proto)
   1094  1.1  thorpej 		return (0);
   1095  1.1  thorpej 	if ((fbmask & FIMB6_SPORT) &&
   1096  1.1  thorpej 	    filt->ff_flow6.fi6_sport != pkt->fi6_sport)
   1097  1.1  thorpej 		return (0);
   1098  1.1  thorpej 	if ((fbmask & FIMB6_DPORT) &&
   1099  1.1  thorpej 	    filt->ff_flow6.fi6_dport != pkt->fi6_dport)
   1100  1.1  thorpej 		return (0);
   1101  1.1  thorpej 	if (fbmask & FIMB6_SADDR) {
   1102  1.1  thorpej 		for (i = 0; i < 4; i++)
   1103  1.1  thorpej 			if (filt->ff_flow6.fi6_src.s6_addr32[i] !=
   1104  1.1  thorpej 			    (pkt->fi6_src.s6_addr32[i] &
   1105  1.1  thorpej 			     filt->ff_mask6.mask6_src.s6_addr32[i]))
   1106  1.1  thorpej 				return (0);
   1107  1.1  thorpej 	}
   1108  1.1  thorpej 	if (fbmask & FIMB6_DADDR) {
   1109  1.1  thorpej 		for (i = 0; i < 4; i++)
   1110  1.1  thorpej 			if (filt->ff_flow6.fi6_dst.s6_addr32[i] !=
   1111  1.1  thorpej 			    (pkt->fi6_dst.s6_addr32[i] &
   1112  1.1  thorpej 			     filt->ff_mask6.mask6_dst.s6_addr32[i]))
   1113  1.1  thorpej 				return (0);
   1114  1.1  thorpej 	}
   1115  1.1  thorpej 	if ((fbmask & FIMB6_TCLASS) &&
   1116  1.1  thorpej 	    filt->ff_flow6.fi6_tclass !=
   1117  1.1  thorpej 	    (pkt->fi6_tclass & filt->ff_mask6.mask6_tclass))
   1118  1.1  thorpej 		return (0);
   1119  1.1  thorpej 	if ((fbmask & FIMB6_GPI) &&
   1120  1.1  thorpej 	    filt->ff_flow6.fi6_gpi != pkt->fi6_gpi)
   1121  1.1  thorpej 		return (0);
   1122  1.1  thorpej 	/* match */
   1123  1.1  thorpej 	return (1);
   1124  1.1  thorpej }
   1125  1.1  thorpej #endif /* INET6 */
   1126  1.1  thorpej 
   1127  1.1  thorpej /*
   1128  1.1  thorpej  *  filter handle:
   1129  1.1  thorpej  *	bit 20-28: index to the filter hash table
   1130  1.1  thorpej  *	bit  0-19: unique id in the hash bucket.
   1131  1.1  thorpej  */
   1132  1.1  thorpej static u_long
   1133  1.1  thorpej get_filt_handle(classifier, i)
   1134  1.1  thorpej 	struct acc_classifier *classifier;
   1135  1.1  thorpej 	int	i;
   1136  1.1  thorpej {
   1137  1.1  thorpej 	static u_long handle_number = 1;
   1138  1.1  thorpej 	u_long 	handle;
   1139  1.1  thorpej 	struct acc_filter *afp;
   1140  1.1  thorpej 
   1141  1.1  thorpej 	while (1) {
   1142  1.1  thorpej 		handle = handle_number++ & 0x000fffff;
   1143  1.1  thorpej 
   1144  1.1  thorpej 		if (LIST_EMPTY(&classifier->acc_filters[i]))
   1145  1.1  thorpej 			break;
   1146  1.1  thorpej 
   1147  1.1  thorpej 		LIST_FOREACH(afp, &classifier->acc_filters[i], f_chain)
   1148  1.1  thorpej 			if ((afp->f_handle & 0x000fffff) == handle)
   1149  1.1  thorpej 				break;
   1150  1.1  thorpej 		if (afp == NULL)
   1151  1.1  thorpej 			break;
   1152  1.1  thorpej 		/* this handle is already used, try again */
   1153  1.1  thorpej 	}
   1154  1.1  thorpej 
   1155  1.1  thorpej 	return ((i << 20) | handle);
   1156  1.1  thorpej }
   1157  1.1  thorpej 
   1158  1.1  thorpej /* convert filter handle to filter pointer */
   1159  1.1  thorpej static struct acc_filter *
   1160  1.1  thorpej filth_to_filtp(classifier, handle)
   1161  1.1  thorpej 	struct acc_classifier *classifier;
   1162  1.1  thorpej 	u_long handle;
   1163  1.1  thorpej {
   1164  1.1  thorpej 	struct acc_filter *afp;
   1165  1.1  thorpej 	int	i;
   1166  1.1  thorpej 
   1167  1.1  thorpej 	i = ACC_GET_HINDEX(handle);
   1168  1.1  thorpej 
   1169  1.1  thorpej 	LIST_FOREACH(afp, &classifier->acc_filters[i], f_chain)
   1170  1.1  thorpej 		if (afp->f_handle == handle)
   1171  1.1  thorpej 			return (afp);
   1172  1.1  thorpej 
   1173  1.1  thorpej 	return (NULL);
   1174  1.1  thorpej }
   1175  1.1  thorpej 
   1176  1.1  thorpej /* create flowinfo bitmask */
   1177  1.1  thorpej static u_int32_t
   1178  1.1  thorpej filt2fibmask(filt)
   1179  1.1  thorpej 	struct flow_filter *filt;
   1180  1.1  thorpej {
   1181  1.1  thorpej 	u_int32_t mask = 0;
   1182  1.1  thorpej #ifdef INET6
   1183  1.1  thorpej 	struct flow_filter6 *filt6;
   1184  1.1  thorpej #endif
   1185  1.1  thorpej 
   1186  1.1  thorpej 	switch (filt->ff_flow.fi_family) {
   1187  1.1  thorpej 	case AF_INET:
   1188  1.1  thorpej 		if (filt->ff_flow.fi_proto != 0)
   1189  1.1  thorpej 			mask |= FIMB4_PROTO;
   1190  1.1  thorpej 		if (filt->ff_flow.fi_tos != 0)
   1191  1.1  thorpej 			mask |= FIMB4_TOS;
   1192  1.1  thorpej 		if (filt->ff_flow.fi_dst.s_addr != 0)
   1193  1.1  thorpej 			mask |= FIMB4_DADDR;
   1194  1.1  thorpej 		if (filt->ff_flow.fi_src.s_addr != 0)
   1195  1.1  thorpej 			mask |= FIMB4_SADDR;
   1196  1.1  thorpej 		if (filt->ff_flow.fi_sport != 0)
   1197  1.1  thorpej 			mask |= FIMB4_SPORT;
   1198  1.1  thorpej 		if (filt->ff_flow.fi_dport != 0)
   1199  1.1  thorpej 			mask |= FIMB4_DPORT;
   1200  1.1  thorpej 		if (filt->ff_flow.fi_gpi != 0)
   1201  1.1  thorpej 			mask |= FIMB4_GPI;
   1202  1.1  thorpej 		break;
   1203  1.1  thorpej #ifdef INET6
   1204  1.1  thorpej 	case AF_INET6:
   1205  1.1  thorpej 		filt6 = (struct flow_filter6 *)filt;
   1206  1.1  thorpej 
   1207  1.1  thorpej 		if (filt6->ff_flow6.fi6_proto != 0)
   1208  1.1  thorpej 			mask |= FIMB6_PROTO;
   1209  1.1  thorpej 		if (filt6->ff_flow6.fi6_tclass != 0)
   1210  1.1  thorpej 			mask |= FIMB6_TCLASS;
   1211  1.1  thorpej 		if (!IN6_IS_ADDR_UNSPECIFIED(&filt6->ff_flow6.fi6_dst))
   1212  1.1  thorpej 			mask |= FIMB6_DADDR;
   1213  1.1  thorpej 		if (!IN6_IS_ADDR_UNSPECIFIED(&filt6->ff_flow6.fi6_src))
   1214  1.1  thorpej 			mask |= FIMB6_SADDR;
   1215  1.1  thorpej 		if (filt6->ff_flow6.fi6_sport != 0)
   1216  1.1  thorpej 			mask |= FIMB6_SPORT;
   1217  1.1  thorpej 		if (filt6->ff_flow6.fi6_dport != 0)
   1218  1.1  thorpej 			mask |= FIMB6_DPORT;
   1219  1.1  thorpej 		if (filt6->ff_flow6.fi6_gpi != 0)
   1220  1.1  thorpej 			mask |= FIMB6_GPI;
   1221  1.1  thorpej 		if (filt6->ff_flow6.fi6_flowlabel != 0)
   1222  1.1  thorpej 			mask |= FIMB6_FLABEL;
   1223  1.1  thorpej 		break;
   1224  1.1  thorpej #endif /* INET6 */
   1225  1.1  thorpej 	}
   1226  1.1  thorpej 	return (mask);
   1227  1.1  thorpej }
   1228  1.1  thorpej 
   1229  1.1  thorpej 
   1230  1.1  thorpej /*
   1231  1.1  thorpej  * helper functions to handle IPv4 fragments.
   1232  1.1  thorpej  * currently only in-sequence fragments are handled.
   1233  1.1  thorpej  *	- fragment info is cached in a LRU list.
   1234  1.1  thorpej  *	- when a first fragment is found, cache its flow info.
   1235  1.1  thorpej  *	- when a non-first fragment is found, lookup the cache.
   1236  1.1  thorpej  */
   1237  1.1  thorpej 
   1238  1.1  thorpej struct ip4_frag {
   1239  1.1  thorpej     TAILQ_ENTRY(ip4_frag) ip4f_chain;
   1240  1.1  thorpej     char    ip4f_valid;
   1241  1.1  thorpej     u_short ip4f_id;
   1242  1.1  thorpej     struct flowinfo_in ip4f_info;
   1243  1.1  thorpej };
   1244  1.1  thorpej 
   1245  1.1  thorpej static TAILQ_HEAD(ip4f_list, ip4_frag) ip4f_list; /* IPv4 fragment cache */
   1246  1.1  thorpej 
   1247  1.1  thorpej #define	IP4F_TABSIZE		16	/* IPv4 fragment cache size */
   1248  1.1  thorpej 
   1249  1.1  thorpej 
   1250  1.1  thorpej static void
   1251  1.1  thorpej ip4f_cache(ip, fin)
   1252  1.1  thorpej 	struct ip *ip;
   1253  1.1  thorpej 	struct flowinfo_in *fin;
   1254  1.1  thorpej {
   1255  1.1  thorpej 	struct ip4_frag *fp;
   1256  1.1  thorpej 
   1257  1.1  thorpej 	if (TAILQ_EMPTY(&ip4f_list)) {
   1258  1.1  thorpej 		/* first time call, allocate fragment cache entries. */
   1259  1.1  thorpej 		if (ip4f_init() < 0)
   1260  1.1  thorpej 			/* allocation failed! */
   1261  1.1  thorpej 			return;
   1262  1.1  thorpej 	}
   1263  1.1  thorpej 
   1264  1.1  thorpej 	fp = ip4f_alloc();
   1265  1.1  thorpej 	fp->ip4f_id = ip->ip_id;
   1266  1.1  thorpej 
   1267  1.1  thorpej 	/* save port numbers */
   1268  1.1  thorpej 	fp->ip4f_info.fi_sport = fin->fi_sport;
   1269  1.1  thorpej 	fp->ip4f_info.fi_dport = fin->fi_dport;
   1270  1.1  thorpej 	fp->ip4f_info.fi_gpi   = fin->fi_gpi;
   1271  1.1  thorpej }
   1272  1.1  thorpej 
   1273  1.1  thorpej static int
   1274  1.1  thorpej ip4f_lookup(ip, fin)
   1275  1.1  thorpej 	struct ip *ip;
   1276  1.1  thorpej 	struct flowinfo_in *fin;
   1277  1.1  thorpej {
   1278  1.1  thorpej 	struct ip4_frag *fp;
   1279  1.1  thorpej 
   1280  1.1  thorpej 	for (fp = TAILQ_FIRST(&ip4f_list); fp != NULL && fp->ip4f_valid;
   1281  1.1  thorpej 	     fp = TAILQ_NEXT(fp, ip4f_chain))
   1282  1.1  thorpej 		if (ip->ip_id == fp->ip4f_id &&
   1283  1.1  thorpej 		    ip->ip_src.s_addr == fp->ip4f_info.fi_src.s_addr &&
   1284  1.1  thorpej 		    ip->ip_dst.s_addr == fp->ip4f_info.fi_dst.s_addr &&
   1285  1.1  thorpej 		    ip->ip_p == fp->ip4f_info.fi_proto) {
   1286  1.1  thorpej 
   1287  1.1  thorpej 			/* found the matching entry */
   1288  1.1  thorpej 			fin->fi_sport = fp->ip4f_info.fi_sport;
   1289  1.1  thorpej 			fin->fi_dport = fp->ip4f_info.fi_dport;
   1290  1.1  thorpej 			fin->fi_gpi   = fp->ip4f_info.fi_gpi;
   1291  1.1  thorpej 
   1292  1.1  thorpej 			if ((ntohs(ip->ip_off) & IP_MF) == 0)
   1293  1.1  thorpej 				/* this is the last fragment,
   1294  1.1  thorpej 				   release the entry. */
   1295  1.1  thorpej 				ip4f_free(fp);
   1296  1.1  thorpej 
   1297  1.1  thorpej 			return (1);
   1298  1.1  thorpej 		}
   1299  1.1  thorpej 
   1300  1.1  thorpej 	/* no matching entry found */
   1301  1.1  thorpej 	return (0);
   1302  1.1  thorpej }
   1303  1.1  thorpej 
   1304  1.1  thorpej static int
   1305  1.1  thorpej ip4f_init(void)
   1306  1.1  thorpej {
   1307  1.1  thorpej 	struct ip4_frag *fp;
   1308  1.1  thorpej 	int i;
   1309  1.1  thorpej 
   1310  1.1  thorpej 	TAILQ_INIT(&ip4f_list);
   1311  1.1  thorpej 	for (i=0; i<IP4F_TABSIZE; i++) {
   1312  1.1  thorpej 		MALLOC(fp, struct ip4_frag *, sizeof(struct ip4_frag),
   1313  1.1  thorpej 		       M_DEVBUF, M_NOWAIT);
   1314  1.1  thorpej 		if (fp == NULL) {
   1315  1.1  thorpej 			printf("ip4f_init: can't alloc %dth entry!\n", i);
   1316  1.1  thorpej 			if (i == 0)
   1317  1.1  thorpej 				return (-1);
   1318  1.1  thorpej 			return (0);
   1319  1.1  thorpej 		}
   1320  1.1  thorpej 		fp->ip4f_valid = 0;
   1321  1.1  thorpej 		TAILQ_INSERT_TAIL(&ip4f_list, fp, ip4f_chain);
   1322  1.1  thorpej 	}
   1323  1.1  thorpej 	return (0);
   1324  1.1  thorpej }
   1325  1.1  thorpej 
   1326  1.1  thorpej static struct ip4_frag *
   1327  1.1  thorpej ip4f_alloc(void)
   1328  1.1  thorpej {
   1329  1.1  thorpej 	struct ip4_frag *fp;
   1330  1.1  thorpej 
   1331  1.1  thorpej 	/* reclaim an entry at the tail, put it at the head */
   1332  1.1  thorpej 	fp = TAILQ_LAST(&ip4f_list, ip4f_list);
   1333  1.1  thorpej 	TAILQ_REMOVE(&ip4f_list, fp, ip4f_chain);
   1334  1.1  thorpej 	fp->ip4f_valid = 1;
   1335  1.1  thorpej 	TAILQ_INSERT_HEAD(&ip4f_list, fp, ip4f_chain);
   1336  1.1  thorpej 	return (fp);
   1337  1.1  thorpej }
   1338  1.1  thorpej 
   1339  1.1  thorpej static void
   1340  1.1  thorpej ip4f_free(fp)
   1341  1.1  thorpej 	struct ip4_frag *fp;
   1342  1.1  thorpej {
   1343  1.1  thorpej 	TAILQ_REMOVE(&ip4f_list, fp, ip4f_chain);
   1344  1.1  thorpej 	fp->ip4f_valid = 0;
   1345  1.1  thorpej 	TAILQ_INSERT_TAIL(&ip4f_list, fp, ip4f_chain);
   1346  1.1  thorpej }
   1347  1.1  thorpej 
   1348  1.1  thorpej /*
   1349  1.1  thorpej  * read and write diffserv field in IPv4 or IPv6 header
   1350  1.1  thorpej  */
   1351  1.1  thorpej u_int8_t
   1352  1.1  thorpej read_dsfield(m, pktattr)
   1353  1.1  thorpej 	struct mbuf *m;
   1354  1.1  thorpej 	struct altq_pktattr *pktattr;
   1355  1.1  thorpej {
   1356  1.1  thorpej 	struct mbuf *m0;
   1357  1.1  thorpej 	u_int8_t ds_field = 0;
   1358  1.1  thorpej 
   1359  1.1  thorpej 	if (pktattr == NULL ||
   1360  1.1  thorpej 	    (pktattr->pattr_af != AF_INET && pktattr->pattr_af != AF_INET6))
   1361  1.1  thorpej 		return ((u_int8_t)0);
   1362  1.1  thorpej 
   1363  1.1  thorpej 	/* verify that pattr_hdr is within the mbuf data */
   1364  1.1  thorpej 	for (m0 = m; m0 != NULL; m0 = m0->m_next)
   1365  1.1  thorpej 		if ((pktattr->pattr_hdr >= m0->m_data) &&
   1366  1.1  thorpej 		    (pktattr->pattr_hdr < m0->m_data + m0->m_len))
   1367  1.1  thorpej 			break;
   1368  1.1  thorpej 	if (m0 == NULL) {
   1369  1.1  thorpej 		/* ick, pattr_hdr is stale */
   1370  1.1  thorpej 		pktattr->pattr_af = AF_UNSPEC;
   1371  1.1  thorpej #ifdef ALTQ_DEBUG
   1372  1.1  thorpej 		printf("read_dsfield: can't locate header!\n");
   1373  1.1  thorpej #endif
   1374  1.1  thorpej 		return ((u_int8_t)0);
   1375  1.1  thorpej 	}
   1376  1.1  thorpej 
   1377  1.1  thorpej 	if (pktattr->pattr_af == AF_INET) {
   1378  1.1  thorpej 		struct ip *ip = (struct ip *)pktattr->pattr_hdr;
   1379  1.1  thorpej 
   1380  1.1  thorpej 		if (ip->ip_v != 4)
   1381  1.1  thorpej 			return ((u_int8_t)0);	/* version mismatch! */
   1382  1.1  thorpej 		ds_field = ip->ip_tos;
   1383  1.1  thorpej 	}
   1384  1.1  thorpej #ifdef INET6
   1385  1.1  thorpej 	else if (pktattr->pattr_af == AF_INET6) {
   1386  1.1  thorpej 		struct ip6_hdr *ip6 = (struct ip6_hdr *)pktattr->pattr_hdr;
   1387  1.1  thorpej 		u_int32_t flowlabel;
   1388  1.1  thorpej 
   1389  1.1  thorpej 		flowlabel = ntohl(ip6->ip6_flow);
   1390  1.1  thorpej 		if ((flowlabel >> 28) != 6)
   1391  1.1  thorpej 			return ((u_int8_t)0);	/* version mismatch! */
   1392  1.1  thorpej 		ds_field = (flowlabel >> 20) & 0xff;
   1393  1.1  thorpej 	}
   1394  1.1  thorpej #endif
   1395  1.1  thorpej 	return (ds_field);
   1396  1.1  thorpej }
   1397  1.1  thorpej 
   1398  1.1  thorpej void
   1399  1.1  thorpej write_dsfield(m, pktattr, dsfield)
   1400  1.1  thorpej 	struct mbuf *m;
   1401  1.1  thorpej 	struct altq_pktattr *pktattr;
   1402  1.1  thorpej 	u_int8_t dsfield;
   1403  1.1  thorpej {
   1404  1.1  thorpej 	struct mbuf *m0;
   1405  1.1  thorpej 
   1406  1.1  thorpej 	if (pktattr == NULL ||
   1407  1.1  thorpej 	    (pktattr->pattr_af != AF_INET && pktattr->pattr_af != AF_INET6))
   1408  1.1  thorpej 		return;
   1409  1.1  thorpej 
   1410  1.1  thorpej 	/* verify that pattr_hdr is within the mbuf data */
   1411  1.1  thorpej 	for (m0 = m; m0 != NULL; m0 = m0->m_next)
   1412  1.1  thorpej 		if ((pktattr->pattr_hdr >= m0->m_data) &&
   1413  1.1  thorpej 		    (pktattr->pattr_hdr < m0->m_data + m0->m_len))
   1414  1.1  thorpej 			break;
   1415  1.1  thorpej 	if (m0 == NULL) {
   1416  1.1  thorpej 		/* ick, pattr_hdr is stale */
   1417  1.1  thorpej 		pktattr->pattr_af = AF_UNSPEC;
   1418  1.1  thorpej #ifdef ALTQ_DEBUG
   1419  1.1  thorpej 		printf("write_dsfield: can't locate header!\n");
   1420  1.1  thorpej #endif
   1421  1.1  thorpej 		return;
   1422  1.1  thorpej 	}
   1423  1.1  thorpej 
   1424  1.1  thorpej 	if (pktattr->pattr_af == AF_INET) {
   1425  1.1  thorpej 		struct ip *ip = (struct ip *)pktattr->pattr_hdr;
   1426  1.1  thorpej 		u_int8_t old;
   1427  1.1  thorpej 		int32_t sum;
   1428  1.1  thorpej 
   1429  1.1  thorpej 		if (ip->ip_v != 4)
   1430  1.1  thorpej 			return;		/* version mismatch! */
   1431  1.1  thorpej 		old = ip->ip_tos;
   1432  1.1  thorpej 		dsfield |= old & 3;	/* leave CU bits */
   1433  1.1  thorpej 		if (old == dsfield)
   1434  1.1  thorpej 			return;
   1435  1.1  thorpej 		ip->ip_tos = dsfield;
   1436  1.1  thorpej 		/*
   1437  1.1  thorpej 		 * update checksum (from RFC1624)
   1438  1.1  thorpej 		 *	   HC' = ~(~HC + ~m + m')
   1439  1.1  thorpej 		 */
   1440  1.1  thorpej 		sum = ~ntohs(ip->ip_sum) & 0xffff;
   1441  1.1  thorpej 		sum += 0xff00 + (~old & 0xff) + dsfield;
   1442  1.1  thorpej 		sum = (sum >> 16) + (sum & 0xffff);
   1443  1.1  thorpej 		sum += (sum >> 16);  /* add carry */
   1444  1.1  thorpej 
   1445  1.1  thorpej 		ip->ip_sum = htons(~sum & 0xffff);
   1446  1.1  thorpej 	}
   1447  1.1  thorpej #ifdef INET6
   1448  1.1  thorpej 	else if (pktattr->pattr_af == AF_INET6) {
   1449  1.1  thorpej 		struct ip6_hdr *ip6 = (struct ip6_hdr *)pktattr->pattr_hdr;
   1450  1.1  thorpej 		u_int32_t flowlabel;
   1451  1.1  thorpej 
   1452  1.1  thorpej 		flowlabel = ntohl(ip6->ip6_flow);
   1453  1.1  thorpej 		if ((flowlabel >> 28) != 6)
   1454  1.1  thorpej 			return;		/* version mismatch! */
   1455  1.1  thorpej 		flowlabel = (flowlabel & 0xf03fffff) | (dsfield << 20);
   1456  1.1  thorpej 		ip6->ip6_flow = htonl(flowlabel);
   1457  1.1  thorpej 	}
   1458  1.1  thorpej #endif
   1459  1.1  thorpej 	return;
   1460  1.1  thorpej }
   1461  1.1  thorpej 
   1462  1.1  thorpej 
   1463  1.1  thorpej /*
   1464  1.1  thorpej  * high resolution clock support taking advantage of a machine dependent
   1465  1.1  thorpej  * high resolution time counter (e.g., timestamp counter of intel pentium).
   1466  1.1  thorpej  * we assume
   1467  1.1  thorpej  *  - 64-bit-long monotonically-increasing counter
   1468  1.1  thorpej  *  - frequency range is 100M-4GHz (CPU speed)
   1469  1.1  thorpej  */
   1470  1.1  thorpej u_int32_t machclk_freq = 0;
   1471  1.1  thorpej u_int32_t machclk_per_tick = 0;
   1472  1.1  thorpej 
   1473  1.1  thorpej #if (defined(__i386__) || defined(__alpha__)) && !defined(ALTQ_NOPCC)
   1474  1.1  thorpej #ifdef __FreeBSD__
   1475  1.1  thorpej /* freebsd makes clock frequency accessible */
   1476  1.1  thorpej #ifdef __alpha__
   1477  1.1  thorpej extern u_int32_t cycles_per_sec;	/* alpha cpu clock frequency */
   1478  1.1  thorpej #endif
   1479  1.1  thorpej void
   1480  1.1  thorpej init_machclk(void)
   1481  1.1  thorpej {
   1482  1.1  thorpej #if defined(__i386__)
   1483  1.1  thorpej #if (__FreeBSD_version > 300000)
   1484  1.1  thorpej 	machclk_freq = tsc_freq;
   1485  1.1  thorpej #else
   1486  1.1  thorpej 	machclk_freq = i586_ctr_freq;
   1487  1.1  thorpej #endif
   1488  1.1  thorpej #elif defined(__alpha__)
   1489  1.1  thorpej 	machclk_freq = cycles_per_sec;
   1490  1.1  thorpej #endif /* __alpha__ */
   1491  1.1  thorpej 	machclk_per_tick = machclk_freq / hz;
   1492  1.1  thorpej }
   1493  1.1  thorpej #else /* !__FreeBSD__ */
   1494  1.1  thorpej /*
   1495  1.1  thorpej  * measure Pentium TSC or Alpha PCC clock frequency
   1496  1.1  thorpej  */
   1497  1.1  thorpej void
   1498  1.1  thorpej init_machclk(void)
   1499  1.1  thorpej {
   1500  1.1  thorpej 	static int	wait;
   1501  1.1  thorpej 	struct timeval	tv_start, tv_end;
   1502  1.1  thorpej 	u_int64_t	start, end, diff;
   1503  1.1  thorpej 	int		timo;
   1504  1.1  thorpej 
   1505  1.1  thorpej 	microtime(&tv_start);
   1506  1.1  thorpej 	start = read_machclk();
   1507  1.1  thorpej 	timo = hz;	/* 1 sec */
   1508  1.1  thorpej 	(void)tsleep(&wait, PWAIT | PCATCH, "init_machclk", timo);
   1509  1.1  thorpej 	microtime(&tv_end);
   1510  1.1  thorpej 	end = read_machclk();
   1511  1.1  thorpej 	diff = (u_int64_t)(tv_end.tv_sec - tv_start.tv_sec) * 1000000
   1512  1.1  thorpej 		+ tv_end.tv_usec - tv_start.tv_usec;
   1513  1.1  thorpej 	if (diff != 0)
   1514  1.1  thorpej 		machclk_freq = (u_int)((end - start) * 1000000 / diff);
   1515  1.1  thorpej 	machclk_per_tick = machclk_freq / hz;
   1516  1.1  thorpej 
   1517  1.1  thorpej 	printf("altq: CPU clock: %uHz\n", machclk_freq);
   1518  1.1  thorpej }
   1519  1.1  thorpej #endif /* !__FreeBSD__ */
   1520  1.1  thorpej #ifdef __alpha__
   1521  1.1  thorpej /*
   1522  1.1  thorpej  * make a 64bit counter value out of the 32bit alpha processor cycle counter.
   1523  1.1  thorpej  * read_machclk must be called within a half of its wrap-around cycle
   1524  1.1  thorpej  * (about 5 sec for 400MHz cpu) to properly detect a counter wrap-around.
   1525  1.1  thorpej  * tbr_timeout calls read_machclk once a second.
   1526  1.1  thorpej  */
   1527  1.1  thorpej u_int64_t
   1528  1.1  thorpej read_machclk(void)
   1529  1.1  thorpej {
   1530  1.1  thorpej 	static u_int32_t last_pcc, upper;
   1531  1.1  thorpej 	u_int32_t pcc;
   1532  1.1  thorpej 
   1533  1.1  thorpej 	pcc = (u_int32_t)alpha_rpcc();
   1534  1.1  thorpej 	if (pcc <= last_pcc)
   1535  1.1  thorpej 		upper++;
   1536  1.1  thorpej 	last_pcc = pcc;
   1537  1.1  thorpej 	return (((u_int64_t)upper << 32) + pcc);
   1538  1.1  thorpej }
   1539  1.1  thorpej #endif /* __alpha__ */
   1540  1.1  thorpej #else /* !i386  && !alpha */
   1541  1.1  thorpej /* use microtime() for now */
   1542  1.1  thorpej void
   1543  1.1  thorpej init_machclk(void)
   1544  1.1  thorpej {
   1545  1.1  thorpej 	machclk_freq = 1000000 << MACHCLK_SHIFT;
   1546  1.1  thorpej 	machclk_per_tick = machclk_freq / hz;
   1547  1.1  thorpej 	printf("altq: emulate %uHz cpu clock\n", machclk_freq);
   1548  1.1  thorpej }
   1549  1.1  thorpej #endif /* !i386 && !alpha */
   1550