123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146 |
- /*
- * (C) 2009 by Pablo Neira Ayuso <pablo@netfilter.org>
- *
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License version 2 as
- * published by the Free Software Foundation.
- */
- #include <stdio.h>
- #include <xtables.h>
- #include <linux/netfilter/xt_cluster.h>
- static void
- cluster_help(void)
- {
- printf(
- "cluster match options:\n"
- " --cluster-total-nodes <num> Set number of total nodes in cluster\n"
- " [!] --cluster-local-node <num> Set the local node number\n"
- " [!] --cluster-local-nodemask <num> Set the local node mask\n"
- " --cluster-hash-seed <num> Set seed value of the Jenkins hash\n");
- }
- enum {
- O_CL_TOTAL_NODES = 0,
- O_CL_LOCAL_NODE,
- O_CL_LOCAL_NODEMASK,
- O_CL_HASH_SEED,
- F_CL_TOTAL_NODES = 1 << O_CL_TOTAL_NODES,
- F_CL_LOCAL_NODE = 1 << O_CL_LOCAL_NODE,
- F_CL_LOCAL_NODEMASK = 1 << O_CL_LOCAL_NODEMASK,
- F_CL_HASH_SEED = 1 << O_CL_HASH_SEED,
- };
- #define s struct xt_cluster_match_info
- static const struct xt_option_entry cluster_opts[] = {
- {.name = "cluster-total-nodes", .id = O_CL_TOTAL_NODES,
- .type = XTTYPE_UINT32, .min = 1, .max = XT_CLUSTER_NODES_MAX,
- .flags = XTOPT_MAND | XTOPT_PUT, XTOPT_POINTER(s, total_nodes)},
- {.name = "cluster-local-node", .id = O_CL_LOCAL_NODE,
- .excl = F_CL_LOCAL_NODEMASK, .flags = XTOPT_INVERT,
- .type = XTTYPE_UINT32, .min = 1, .max = XT_CLUSTER_NODES_MAX},
- {.name = "cluster-local-nodemask", .id = O_CL_LOCAL_NODEMASK,
- .excl = F_CL_LOCAL_NODE, .type = XTTYPE_UINT32,
- .min = 1, .max = XT_CLUSTER_NODES_MAX,
- .flags = XTOPT_INVERT | XTOPT_PUT, XTOPT_POINTER(s, node_mask)},
- {.name = "cluster-hash-seed", .id = O_CL_HASH_SEED,
- .type = XTTYPE_UINT32, .flags = XTOPT_MAND | XTOPT_PUT,
- XTOPT_POINTER(s, hash_seed)},
- XTOPT_TABLEEND,
- };
- static void cluster_parse(struct xt_option_call *cb)
- {
- struct xt_cluster_match_info *info = cb->data;
- xtables_option_parse(cb);
- switch (cb->entry->id) {
- case O_CL_LOCAL_NODE:
- if (cb->invert)
- info->flags |= XT_CLUSTER_F_INV;
- info->node_mask = 1 << (cb->val.u32 - 1);
- break;
- case O_CL_LOCAL_NODEMASK:
- if (cb->invert)
- info->flags |= XT_CLUSTER_F_INV;
- break;
- }
- }
- static void cluster_check(struct xt_fcheck_call *cb)
- {
- const struct xt_cluster_match_info *info = cb->data;
- unsigned int test;
- test = F_CL_TOTAL_NODES | F_CL_LOCAL_NODE | F_CL_HASH_SEED;
- if ((cb->xflags & test) == test) {
- if (info->node_mask >= (1ULL << info->total_nodes))
- xtables_error(PARAMETER_PROBLEM,
- "cluster match: "
- "`--cluster-local-node' "
- "must be <= `--cluster-total-nodes'");
- return;
- }
- test = F_CL_TOTAL_NODES | F_CL_LOCAL_NODEMASK | F_CL_HASH_SEED;
- if ((cb->xflags & test) == test) {
- if (info->node_mask >= (1ULL << info->total_nodes))
- xtables_error(PARAMETER_PROBLEM,
- "cluster match: "
- "`--cluster-local-nodemask' too big "
- "for `--cluster-total-nodes'");
- return;
- }
- if (!(cb->xflags & (F_CL_LOCAL_NODE | F_CL_LOCAL_NODEMASK)))
- xtables_error(PARAMETER_PROBLEM,
- "cluster match: `--cluster-local-node' or"
- "`--cluster-local-nodemask' is missing");
- }
- static void
- cluster_print(const void *ip, const struct xt_entry_match *match, int numeric)
- {
- const struct xt_cluster_match_info *info = (void *)match->data;
- printf(" cluster ");
- if (info->flags & XT_CLUSTER_F_INV)
- printf("!node_mask=0x%08x", info->node_mask);
- else
- printf("node_mask=0x%08x", info->node_mask);
- printf(" total_nodes=%u hash_seed=0x%08x",
- info->total_nodes, info->hash_seed);
- }
- static void
- cluster_save(const void *ip, const struct xt_entry_match *match)
- {
- const struct xt_cluster_match_info *info = (void *)match->data;
- if (info->flags & XT_CLUSTER_F_INV)
- printf(" ! --cluster-local-nodemask 0x%08x", info->node_mask);
- else
- printf(" --cluster-local-nodemask 0x%08x", info->node_mask);
- printf(" --cluster-total-nodes %u --cluster-hash-seed 0x%08x",
- info->total_nodes, info->hash_seed);
- }
- static struct xtables_match cluster_mt_reg = {
- .family = NFPROTO_UNSPEC,
- .name = "cluster",
- .version = XTABLES_VERSION,
- .size = XT_ALIGN(sizeof(struct xt_cluster_match_info)),
- .userspacesize = XT_ALIGN(sizeof(struct xt_cluster_match_info)),
- .help = cluster_help,
- .print = cluster_print,
- .save = cluster_save,
- .x6_parse = cluster_parse,
- .x6_fcheck = cluster_check,
- .x6_options = cluster_opts,
- };
- void _init(void)
- {
- xtables_register_match(&cluster_mt_reg);
- }
|