/* * (C) 2009 by Pablo Neira Ayuso <pablo@netfilter.org> * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 as * published by the Free Software Foundation. */ #include <stdio.h> #include <xtables.h> #include <linux/netfilter/xt_cluster.h> static void cluster_help(void) { printf( "cluster match options:\n" " --cluster-total-nodes <num> Set number of total nodes in cluster\n" " [!] --cluster-local-node <num> Set the local node number\n" " [!] --cluster-local-nodemask <num> Set the local node mask\n" " --cluster-hash-seed <num> Set seed value of the Jenkins hash\n"); } enum { O_CL_TOTAL_NODES = 0, O_CL_LOCAL_NODE, O_CL_LOCAL_NODEMASK, O_CL_HASH_SEED, F_CL_TOTAL_NODES = 1 << O_CL_TOTAL_NODES, F_CL_LOCAL_NODE = 1 << O_CL_LOCAL_NODE, F_CL_LOCAL_NODEMASK = 1 << O_CL_LOCAL_NODEMASK, F_CL_HASH_SEED = 1 << O_CL_HASH_SEED, }; #define s struct xt_cluster_match_info static const struct xt_option_entry cluster_opts[] = { {.name = "cluster-total-nodes", .id = O_CL_TOTAL_NODES, .type = XTTYPE_UINT32, .min = 1, .max = XT_CLUSTER_NODES_MAX, .flags = XTOPT_MAND | XTOPT_PUT, XTOPT_POINTER(s, total_nodes)}, {.name = "cluster-local-node", .id = O_CL_LOCAL_NODE, .excl = F_CL_LOCAL_NODEMASK, .flags = XTOPT_INVERT, .type = XTTYPE_UINT32, .min = 1, .max = XT_CLUSTER_NODES_MAX}, {.name = "cluster-local-nodemask", .id = O_CL_LOCAL_NODEMASK, .excl = F_CL_LOCAL_NODE, .type = XTTYPE_UINT32, .min = 1, .max = XT_CLUSTER_NODES_MAX, .flags = XTOPT_INVERT | XTOPT_PUT, XTOPT_POINTER(s, node_mask)}, {.name = "cluster-hash-seed", .id = O_CL_HASH_SEED, .type = XTTYPE_UINT32, .flags = XTOPT_MAND | XTOPT_PUT, XTOPT_POINTER(s, hash_seed)}, XTOPT_TABLEEND, }; static void cluster_parse(struct xt_option_call *cb) { struct xt_cluster_match_info *info = cb->data; xtables_option_parse(cb); switch (cb->entry->id) { case O_CL_LOCAL_NODE: if (cb->invert) info->flags |= XT_CLUSTER_F_INV; info->node_mask = 1 << (cb->val.u32 - 1); break; case O_CL_LOCAL_NODEMASK: if (cb->invert) info->flags |= XT_CLUSTER_F_INV; break; } } static void cluster_check(struct xt_fcheck_call *cb) { const struct xt_cluster_match_info *info = cb->data; unsigned int test; test = F_CL_TOTAL_NODES | F_CL_LOCAL_NODE | F_CL_HASH_SEED; if ((cb->xflags & test) == test) { if (info->node_mask >= (1ULL << info->total_nodes)) xtables_error(PARAMETER_PROBLEM, "cluster match: " "`--cluster-local-node' " "must be <= `--cluster-total-nodes'"); return; } test = F_CL_TOTAL_NODES | F_CL_LOCAL_NODEMASK | F_CL_HASH_SEED; if ((cb->xflags & test) == test) { if (info->node_mask >= (1ULL << info->total_nodes)) xtables_error(PARAMETER_PROBLEM, "cluster match: " "`--cluster-local-nodemask' too big " "for `--cluster-total-nodes'"); return; } if (!(cb->xflags & (F_CL_LOCAL_NODE | F_CL_LOCAL_NODEMASK))) xtables_error(PARAMETER_PROBLEM, "cluster match: `--cluster-local-node' or" "`--cluster-local-nodemask' is missing"); } static void cluster_print(const void *ip, const struct xt_entry_match *match, int numeric) { const struct xt_cluster_match_info *info = (void *)match->data; printf(" cluster "); if (info->flags & XT_CLUSTER_F_INV) printf("!node_mask=0x%08x", info->node_mask); else printf("node_mask=0x%08x", info->node_mask); printf(" total_nodes=%u hash_seed=0x%08x", info->total_nodes, info->hash_seed); } static void cluster_save(const void *ip, const struct xt_entry_match *match) { const struct xt_cluster_match_info *info = (void *)match->data; if (info->flags & XT_CLUSTER_F_INV) printf(" ! --cluster-local-nodemask 0x%08x", info->node_mask); else printf(" --cluster-local-nodemask 0x%08x", info->node_mask); printf(" --cluster-total-nodes %u --cluster-hash-seed 0x%08x", info->total_nodes, info->hash_seed); } static struct xtables_match cluster_mt_reg = { .family = NFPROTO_UNSPEC, .name = "cluster", .version = XTABLES_VERSION, .size = XT_ALIGN(sizeof(struct xt_cluster_match_info)), .userspacesize = XT_ALIGN(sizeof(struct xt_cluster_match_info)), .help = cluster_help, .print = cluster_print, .save = cluster_save, .x6_parse = cluster_parse, .x6_fcheck = cluster_check, .x6_options = cluster_opts, }; void _init(void) { xtables_register_match(&cluster_mt_reg); }