mirror of https://github.com/aya-rs/aya
programs: add support for attaching and detaching TC programs
This change adds support for attaching TC programs directly from aya, without having to use iproute2/tc.pull/1/head
Arnabjyoti Kalita
3 years ago
committed by
GitHub
parent
d085bdb89f
commit
6974d349e8
@ -1,42 +0,0 @@
|
|||||||
use crate::{
|
|
||||||
generated::bpf_prog_type::{BPF_PROG_TYPE_SCHED_ACT, BPF_PROG_TYPE_SCHED_CLS},
|
|
||||||
programs::{load_program, ProgramData, ProgramError},
|
|
||||||
};
|
|
||||||
|
|
||||||
#[derive(Debug)]
|
|
||||||
pub struct SchedClassifier {
|
|
||||||
pub(crate) data: ProgramData,
|
|
||||||
}
|
|
||||||
|
|
||||||
impl SchedClassifier {
|
|
||||||
/// Loads the program inside the kernel.
|
|
||||||
///
|
|
||||||
/// See also [`Program::load`](crate::programs::Program::load).
|
|
||||||
pub fn load(&mut self) -> Result<(), ProgramError> {
|
|
||||||
load_program(BPF_PROG_TYPE_SCHED_CLS, &mut self.data)
|
|
||||||
}
|
|
||||||
|
|
||||||
/// Returns the name of the program.
|
|
||||||
pub fn name(&self) -> String {
|
|
||||||
self.data.name.to_string()
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
#[derive(Debug)]
|
|
||||||
pub struct SchedAction {
|
|
||||||
pub(crate) data: ProgramData,
|
|
||||||
}
|
|
||||||
|
|
||||||
impl SchedAction {
|
|
||||||
/// Loads the program inside the kernel.
|
|
||||||
///
|
|
||||||
/// See also [`Program::load`](crate::programs::Program::load).
|
|
||||||
pub fn load(&mut self) -> Result<(), ProgramError> {
|
|
||||||
load_program(BPF_PROG_TYPE_SCHED_ACT, &mut self.data)
|
|
||||||
}
|
|
||||||
|
|
||||||
/// Returns the name of the program.
|
|
||||||
pub fn name(&self) -> String {
|
|
||||||
self.data.name.to_string()
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -0,0 +1,118 @@
|
|||||||
|
use thiserror::Error;
|
||||||
|
|
||||||
|
use std::{io, os::unix::io::RawFd};
|
||||||
|
|
||||||
|
use crate::{
|
||||||
|
generated::{
|
||||||
|
TC_H_CLSACT, TC_H_MIN_INGRESS, TC_H_MIN_EGRESS,
|
||||||
|
bpf_prog_type::BPF_PROG_TYPE_SCHED_CLS,
|
||||||
|
},
|
||||||
|
programs::{Link, LinkRef, load_program, ProgramData, ProgramError},
|
||||||
|
sys::{netlink_qdisc_add_clsact, netlink_qdisc_attach, netlink_qdisc_detach},
|
||||||
|
util::{ifindex_from_ifname, tc_handler_make},
|
||||||
|
};
|
||||||
|
|
||||||
|
#[derive(Debug, Clone, Copy)]
|
||||||
|
#[repr(u32)]
|
||||||
|
pub enum TcAttachPoint {
|
||||||
|
Ingress = TC_H_MIN_INGRESS,
|
||||||
|
Egress = TC_H_MIN_EGRESS,
|
||||||
|
Custom,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug)]
|
||||||
|
pub struct SchedClassifier {
|
||||||
|
pub(crate) data: ProgramData,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug, Error)]
|
||||||
|
pub enum TcError {
|
||||||
|
#[error("netlink error while attaching ebpf program to tc")]
|
||||||
|
NetlinkError {
|
||||||
|
#[source]
|
||||||
|
io_error: io::Error,
|
||||||
|
},
|
||||||
|
#[error("the clsact qdisc is already attached")]
|
||||||
|
AlreadyAttached,
|
||||||
|
}
|
||||||
|
|
||||||
|
#[derive(Debug)]
|
||||||
|
struct TcLink {
|
||||||
|
if_index: i32,
|
||||||
|
attach_point: TcAttachPoint,
|
||||||
|
prog_fd: Option<RawFd>,
|
||||||
|
priority: u32,
|
||||||
|
}
|
||||||
|
|
||||||
|
impl TcAttachPoint {
|
||||||
|
pub fn tcm_parent(&self, parent: u32) -> Result<u32, io::Error> {
|
||||||
|
match *self {
|
||||||
|
TcAttachPoint::Custom => {
|
||||||
|
if parent == 0 {
|
||||||
|
return Err(io::Error::new(io::ErrorKind::Other, "Parent must be non-zero for Custom attach points"));
|
||||||
|
}
|
||||||
|
Ok(parent)
|
||||||
|
}
|
||||||
|
_ => Ok(tc_handler_make(TC_H_CLSACT, (*self).clone() as u32))
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
impl SchedClassifier {
|
||||||
|
/// Loads the program inside the kernel.
|
||||||
|
///
|
||||||
|
/// See also [`Program::load`](crate::programs::Program::load).
|
||||||
|
pub fn load(&mut self) -> Result<(), ProgramError> {
|
||||||
|
load_program(BPF_PROG_TYPE_SCHED_CLS, &mut self.data)
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Returns the name of the program.
|
||||||
|
pub fn name(&self) -> String {
|
||||||
|
self.data.name.to_string()
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Attaches the program to the given `interface` and `attach-point`
|
||||||
|
pub fn attach(&mut self, interface: &str, attach_point: TcAttachPoint) -> Result<LinkRef, ProgramError> {
|
||||||
|
let prog_fd = self.data.fd_or_err()?;
|
||||||
|
let if_index = unsafe { ifindex_from_ifname(interface) }
|
||||||
|
.map_err(|io_error| TcError::NetlinkError { io_error })?;
|
||||||
|
let prog_name = self.name();
|
||||||
|
let priority = unsafe { netlink_qdisc_attach(if_index as i32, &attach_point, prog_fd, &prog_name[..]) }
|
||||||
|
.map_err(|io_error| TcError::NetlinkError { io_error })?;
|
||||||
|
Ok(self.data.link(TcLink {
|
||||||
|
if_index: if_index as i32,
|
||||||
|
attach_point,
|
||||||
|
prog_fd: Some(prog_fd),
|
||||||
|
priority,
|
||||||
|
}))
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Add "clasct" qdisc to an interface
|
||||||
|
pub fn qdisc_add_clsact_to_interface(if_name: &str) -> Result<(), ProgramError> {
|
||||||
|
// unsafe wrapper
|
||||||
|
let if_index = unsafe { ifindex_from_ifname(if_name) }
|
||||||
|
.map_err(|_| ProgramError::UnknownInterface {name: if_name.to_string()})?;
|
||||||
|
unsafe { netlink_qdisc_add_clsact(if_index as i32) }
|
||||||
|
.map_err(|io_error| TcError::NetlinkError { io_error })?;
|
||||||
|
Ok(())
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
impl Drop for TcLink {
|
||||||
|
fn drop(&mut self) {
|
||||||
|
let _ = self.detach();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
impl Link for TcLink {
|
||||||
|
fn detach(&mut self) -> Result<(), ProgramError> {
|
||||||
|
if let Some(_) = self.prog_fd.take() {
|
||||||
|
unsafe { netlink_qdisc_detach(self.if_index, &self.attach_point, self.priority) }
|
||||||
|
.map_err(|io_error| TcError::NetlinkError { io_error })?;
|
||||||
|
Ok(())
|
||||||
|
} else {
|
||||||
|
Err(ProgramError::AlreadyDetached)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
Loading…
Reference in New Issue