• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /* SPDX-License-Identifier: GPL-2.0-or-later */
2 /*
3  * INET		An implementation of the TCP/IP protocol suite for the LINUX
4  *		operating system.  INET is implemented using the  BSD Socket
5  *		interface as the means of communication with the user level.
6  *
7  *		Definitions for the TCP module.
8  *
9  * Version:	@(#)tcp.h	1.0.5	05/23/93
10  *
11  * Authors:	Ross Biro
12  *		Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
13  */
14 #ifndef _TCP_H
15 #define _TCP_H
16 
17 #define FASTRETRANS_DEBUG 1
18 
19 #include <linux/list.h>
20 #include <linux/tcp.h>
21 #include <linux/bug.h>
22 #include <linux/slab.h>
23 #include <linux/cache.h>
24 #include <linux/percpu.h>
25 #include <linux/skbuff.h>
26 #include <linux/kref.h>
27 #include <linux/ktime.h>
28 #include <linux/indirect_call_wrapper.h>
29 
30 #include <net/inet_connection_sock.h>
31 #include <net/inet_timewait_sock.h>
32 #include <net/inet_hashtables.h>
33 #include <net/checksum.h>
34 #include <net/request_sock.h>
35 #include <net/sock_reuseport.h>
36 #include <net/sock.h>
37 #include <net/snmp.h>
38 #include <net/ip.h>
39 #include <net/tcp_states.h>
40 #include <net/inet_ecn.h>
41 #include <net/dst.h>
42 #include <net/mptcp.h>
43 #ifdef CONFIG_NEWIP
44 #include <linux/nip.h> /* NIP */
45 #endif
46 #include <linux/seq_file.h>
47 #include <linux/memcontrol.h>
48 #include <linux/bpf-cgroup.h>
49 #include <linux/siphash.h>
50 
51 extern struct inet_hashinfo tcp_hashinfo;
52 
53 DECLARE_PER_CPU(unsigned int, tcp_orphan_count);
54 int tcp_orphan_count_sum(void);
55 
56 void tcp_time_wait(struct sock *sk, int state, int timeo);
57 
58 #define MAX_TCP_HEADER	L1_CACHE_ALIGN(128 + MAX_HEADER)
59 #define MAX_TCP_OPTION_SPACE 40
60 #define TCP_MIN_SND_MSS		48
61 #define TCP_MIN_GSO_SIZE	(TCP_MIN_SND_MSS - MAX_TCP_OPTION_SPACE)
62 
63 /*
64  * Never offer a window over 32767 without using window scaling. Some
65  * poor stacks do signed 16bit maths!
66  */
67 #define MAX_TCP_WINDOW		32767U
68 
69 /* Minimal accepted MSS. It is (60+60+8) - (20+20). */
70 #define TCP_MIN_MSS		88U
71 
72 /* The initial MTU to use for probing */
73 #define TCP_BASE_MSS		1024
74 
75 /* probing interval, default to 10 minutes as per RFC4821 */
76 #define TCP_PROBE_INTERVAL	600
77 
78 /* Specify interval when tcp mtu probing will stop */
79 #define TCP_PROBE_THRESHOLD	8
80 
81 /* After receiving this amount of duplicate ACKs fast retransmit starts. */
82 #define TCP_FASTRETRANS_THRESH 3
83 
84 /* Maximal number of ACKs sent quickly to accelerate slow-start. */
85 #define TCP_MAX_QUICKACKS	16U
86 
87 /* Maximal number of window scale according to RFC1323 */
88 #define TCP_MAX_WSCALE		14U
89 
90 /* urg_data states */
91 #define TCP_URG_VALID	0x0100
92 #define TCP_URG_NOTYET	0x0200
93 #define TCP_URG_READ	0x0400
94 
95 #define TCP_RETR1	3	/*
96 				 * This is how many retries it does before it
97 				 * tries to figure out if the gateway is
98 				 * down. Minimal RFC value is 3; it corresponds
99 				 * to ~3sec-8min depending on RTO.
100 				 */
101 
102 #define TCP_RETR2	15	/*
103 				 * This should take at least
104 				 * 90 minutes to time out.
105 				 * RFC1122 says that the limit is 100 sec.
106 				 * 15 is ~13-30min depending on RTO.
107 				 */
108 
109 #define TCP_SYN_RETRIES	 6	/* This is how many retries are done
110 				 * when active opening a connection.
111 				 * RFC1122 says the minimum retry MUST
112 				 * be at least 180secs.  Nevertheless
113 				 * this value is corresponding to
114 				 * 63secs of retransmission with the
115 				 * current initial RTO.
116 				 */
117 
118 #define TCP_SYNACK_RETRIES 5	/* This is how may retries are done
119 				 * when passive opening a connection.
120 				 * This is corresponding to 31secs of
121 				 * retransmission with the current
122 				 * initial RTO.
123 				 */
124 
125 #define TCP_TIMEWAIT_LEN (60*HZ) /* how long to wait to destroy TIME-WAIT
126 				  * state, about 60 seconds	*/
127 #define TCP_FIN_TIMEOUT	TCP_TIMEWAIT_LEN
128                                  /* BSD style FIN_WAIT2 deadlock breaker.
129 				  * It used to be 3min, new value is 60sec,
130 				  * to combine FIN-WAIT-2 timeout with
131 				  * TIME-WAIT timer.
132 				  */
133 #define TCP_FIN_TIMEOUT_MAX (120 * HZ) /* max TCP_LINGER2 value (two minutes) */
134 
135 #define TCP_DELACK_MAX	((unsigned)(HZ/5))	/* maximal time to delay before sending an ACK */
136 #if HZ >= 100
137 #define TCP_DELACK_MIN	((unsigned)(HZ/25))	/* minimal time to delay before sending an ACK */
138 #define TCP_ATO_MIN	((unsigned)(HZ/25))
139 #else
140 #define TCP_DELACK_MIN	4U
141 #define TCP_ATO_MIN	4U
142 #endif
143 #define TCP_RTO_MAX	((unsigned)(120*HZ))
144 #define TCP_RTO_MIN	((unsigned)(HZ/5))
145 #define TCP_TIMEOUT_MIN	(2U) /* Min timeout for TCP timers in jiffies */
146 #define TCP_TIMEOUT_INIT ((unsigned)(1*HZ))	/* RFC6298 2.1 initial RTO value	*/
147 #define TCP_TIMEOUT_FALLBACK ((unsigned)(3*HZ))	/* RFC 1122 initial RTO value, now
148 						 * used as a fallback RTO for the
149 						 * initial data transmission if no
150 						 * valid RTT sample has been acquired,
151 						 * most likely due to retrans in 3WHS.
152 						 */
153 
154 #define TCP_RESOURCE_PROBE_INTERVAL ((unsigned)(HZ/2U)) /* Maximal interval between probes
155 					                 * for local resources.
156 					                 */
157 #define TCP_KEEPALIVE_TIME	(120*60*HZ)	/* two hours */
158 #define TCP_KEEPALIVE_PROBES	9		/* Max of 9 keepalive probes	*/
159 #define TCP_KEEPALIVE_INTVL	(75*HZ)
160 
161 #define MAX_TCP_KEEPIDLE	32767
162 #define MAX_TCP_KEEPINTVL	32767
163 #define MAX_TCP_KEEPCNT		127
164 #define MAX_TCP_SYNCNT		127
165 
166 #define TCP_SYNQ_INTERVAL	(HZ/5)	/* Period of SYNACK timer */
167 
168 #define TCP_PAWS_24DAYS	(60 * 60 * 24 * 24)
169 #define TCP_PAWS_MSL	60		/* Per-host timestamps are invalidated
170 					 * after this time. It should be equal
171 					 * (or greater than) TCP_TIMEWAIT_LEN
172 					 * to provide reliability equal to one
173 					 * provided by timewait state.
174 					 */
175 #define TCP_PAWS_WINDOW	1		/* Replay window for per-host
176 					 * timestamps. It must be less than
177 					 * minimal timewait lifetime.
178 					 */
179 /*
180  *	TCP option
181  */
182 
183 #define TCPOPT_NOP		1	/* Padding */
184 #define TCPOPT_EOL		0	/* End of options */
185 #define TCPOPT_MSS		2	/* Segment size negotiating */
186 #define TCPOPT_WINDOW		3	/* Window scaling */
187 #define TCPOPT_SACK_PERM        4       /* SACK Permitted */
188 #define TCPOPT_SACK             5       /* SACK Block */
189 #define TCPOPT_TIMESTAMP	8	/* Better RTT estimations/PAWS */
190 #define TCPOPT_MD5SIG		19	/* MD5 Signature (RFC2385) */
191 #define TCPOPT_MPTCP		30	/* Multipath TCP (RFC6824) */
192 #define TCPOPT_FASTOPEN		34	/* Fast open (RFC7413) */
193 #define TCPOPT_EXP		254	/* Experimental */
194 /* Magic number to be after the option value for sharing TCP
195  * experimental options. See draft-ietf-tcpm-experimental-options-00.txt
196  */
197 #define TCPOPT_FASTOPEN_MAGIC	0xF989
198 #define TCPOPT_SMC_MAGIC	0xE2D4C3D9
199 
200 /*
201  *     TCP option lengths
202  */
203 
204 #define TCPOLEN_MSS            4
205 #define TCPOLEN_WINDOW         3
206 #define TCPOLEN_SACK_PERM      2
207 #define TCPOLEN_TIMESTAMP      10
208 #define TCPOLEN_MD5SIG         18
209 #define TCPOLEN_FASTOPEN_BASE  2
210 #define TCPOLEN_EXP_FASTOPEN_BASE  4
211 #define TCPOLEN_EXP_SMC_BASE   6
212 
213 /* But this is what stacks really send out. */
214 #define TCPOLEN_TSTAMP_ALIGNED		12
215 #define TCPOLEN_WSCALE_ALIGNED		4
216 #define TCPOLEN_SACKPERM_ALIGNED	4
217 #define TCPOLEN_SACK_BASE		2
218 #define TCPOLEN_SACK_BASE_ALIGNED	4
219 #define TCPOLEN_SACK_PERBLOCK		8
220 #define TCPOLEN_MD5SIG_ALIGNED		20
221 #define TCPOLEN_MSS_ALIGNED		4
222 #define TCPOLEN_EXP_SMC_BASE_ALIGNED	8
223 
224 /* Flags in tp->nonagle */
225 #define TCP_NAGLE_OFF		1	/* Nagle's algo is disabled */
226 #define TCP_NAGLE_CORK		2	/* Socket is corked	    */
227 #define TCP_NAGLE_PUSH		4	/* Cork is overridden for already queued data */
228 
229 /* TCP thin-stream limits */
230 #define TCP_THIN_LINEAR_RETRIES 6       /* After 6 linear retries, do exp. backoff */
231 
232 /* TCP initial congestion window as per rfc6928 */
233 #define TCP_INIT_CWND		10
234 
235 /* Bit Flags for sysctl_tcp_fastopen */
236 #define	TFO_CLIENT_ENABLE	1
237 #define	TFO_SERVER_ENABLE	2
238 #define	TFO_CLIENT_NO_COOKIE	4	/* Data in SYN w/o cookie option */
239 
240 /* Accept SYN data w/o any cookie option */
241 #define	TFO_SERVER_COOKIE_NOT_REQD	0x200
242 
243 /* Force enable TFO on all listeners, i.e., not requiring the
244  * TCP_FASTOPEN socket option.
245  */
246 #define	TFO_SERVER_WO_SOCKOPT1	0x400
247 
248 
249 /* sysctl variables for tcp */
250 extern int sysctl_tcp_max_orphans;
251 extern long sysctl_tcp_mem[3];
252 
253 #define TCP_RACK_LOSS_DETECTION  0x1 /* Use RACK to detect losses */
254 #define TCP_RACK_STATIC_REO_WND  0x2 /* Use static RACK reo wnd */
255 #define TCP_RACK_NO_DUPTHRESH    0x4 /* Do not use DUPACK threshold in RACK */
256 
257 extern atomic_long_t tcp_memory_allocated;
258 extern struct percpu_counter tcp_sockets_allocated;
259 extern unsigned long tcp_memory_pressure;
260 
261 /* optimized version of sk_under_memory_pressure() for TCP sockets */
tcp_under_memory_pressure(const struct sock * sk)262 static inline bool tcp_under_memory_pressure(const struct sock *sk)
263 {
264 	if (mem_cgroup_sockets_enabled && sk->sk_memcg &&
265 	    mem_cgroup_under_socket_pressure(sk->sk_memcg))
266 		return true;
267 
268 	return READ_ONCE(tcp_memory_pressure);
269 }
270 /*
271  * The next routines deal with comparing 32 bit unsigned ints
272  * and worry about wraparound (automatic with unsigned arithmetic).
273  */
274 
before(__u32 seq1,__u32 seq2)275 static inline bool before(__u32 seq1, __u32 seq2)
276 {
277         return (__s32)(seq1-seq2) < 0;
278 }
279 #define after(seq2, seq1) 	before(seq1, seq2)
280 
281 /* is s2<=s1<=s3 ? */
between(__u32 seq1,__u32 seq2,__u32 seq3)282 static inline bool between(__u32 seq1, __u32 seq2, __u32 seq3)
283 {
284 	return seq3 - seq2 >= seq1 - seq2;
285 }
286 
tcp_out_of_memory(struct sock * sk)287 static inline bool tcp_out_of_memory(struct sock *sk)
288 {
289 	if (sk->sk_wmem_queued > SOCK_MIN_SNDBUF &&
290 	    sk_memory_allocated(sk) > sk_prot_mem_limits(sk, 2))
291 		return true;
292 	return false;
293 }
294 
295 void sk_forced_mem_schedule(struct sock *sk, int size);
296 
297 bool tcp_check_oom(struct sock *sk, int shift);
298 
299 
300 extern struct proto tcp_prot;
301 
302 #define TCP_INC_STATS(net, field)	SNMP_INC_STATS((net)->mib.tcp_statistics, field)
303 #define __TCP_INC_STATS(net, field)	__SNMP_INC_STATS((net)->mib.tcp_statistics, field)
304 #define TCP_DEC_STATS(net, field)	SNMP_DEC_STATS((net)->mib.tcp_statistics, field)
305 #define TCP_ADD_STATS(net, field, val)	SNMP_ADD_STATS((net)->mib.tcp_statistics, field, val)
306 
307 void tcp_tasklet_init(void);
308 
309 int tcp_v4_err(struct sk_buff *skb, u32);
310 
311 void tcp_shutdown(struct sock *sk, int how);
312 
313 int tcp_v4_early_demux(struct sk_buff *skb);
314 int tcp_v4_rcv(struct sk_buff *skb);
315 
316 int tcp_v4_tw_remember_stamp(struct inet_timewait_sock *tw);
317 int tcp_sendmsg(struct sock *sk, struct msghdr *msg, size_t size);
318 int tcp_sendmsg_locked(struct sock *sk, struct msghdr *msg, size_t size);
319 int tcp_sendpage(struct sock *sk, struct page *page, int offset, size_t size,
320 		 int flags);
321 int tcp_sendpage_locked(struct sock *sk, struct page *page, int offset,
322 			size_t size, int flags);
323 ssize_t do_tcp_sendpages(struct sock *sk, struct page *page, int offset,
324 		 size_t size, int flags);
325 int tcp_send_mss(struct sock *sk, int *size_goal, int flags);
326 void tcp_push(struct sock *sk, int flags, int mss_now, int nonagle,
327 	      int size_goal);
328 void tcp_release_cb(struct sock *sk);
329 void tcp_wfree(struct sk_buff *skb);
330 void tcp_write_timer_handler(struct sock *sk);
331 void tcp_delack_timer_handler(struct sock *sk);
332 int tcp_ioctl(struct sock *sk, int cmd, unsigned long arg);
333 int tcp_rcv_state_process(struct sock *sk, struct sk_buff *skb);
334 void tcp_rcv_established(struct sock *sk, struct sk_buff *skb);
335 void tcp_rcv_space_adjust(struct sock *sk);
336 int tcp_twsk_unique(struct sock *sk, struct sock *sktw, void *twp);
337 void tcp_twsk_destructor(struct sock *sk);
338 ssize_t tcp_splice_read(struct socket *sk, loff_t *ppos,
339 			struct pipe_inode_info *pipe, size_t len,
340 			unsigned int flags);
341 
342 void tcp_enter_quickack_mode(struct sock *sk, unsigned int max_quickacks);
tcp_dec_quickack_mode(struct sock * sk,const unsigned int pkts)343 static inline void tcp_dec_quickack_mode(struct sock *sk,
344 					 const unsigned int pkts)
345 {
346 	struct inet_connection_sock *icsk = inet_csk(sk);
347 
348 	if (icsk->icsk_ack.quick) {
349 		if (pkts >= icsk->icsk_ack.quick) {
350 			icsk->icsk_ack.quick = 0;
351 			/* Leaving quickack mode we deflate ATO. */
352 			icsk->icsk_ack.ato   = TCP_ATO_MIN;
353 		} else
354 			icsk->icsk_ack.quick -= pkts;
355 	}
356 }
357 
358 #define	TCP_ECN_OK		1
359 #define	TCP_ECN_QUEUE_CWR	2
360 #define	TCP_ECN_DEMAND_CWR	4
361 #define	TCP_ECN_SEEN		8
362 
363 enum tcp_tw_status {
364 	TCP_TW_SUCCESS = 0,
365 	TCP_TW_RST = 1,
366 	TCP_TW_ACK = 2,
367 	TCP_TW_SYN = 3
368 };
369 
370 
371 enum tcp_tw_status tcp_timewait_state_process(struct inet_timewait_sock *tw,
372 					      struct sk_buff *skb,
373 					      const struct tcphdr *th);
374 struct sock *tcp_check_req(struct sock *sk, struct sk_buff *skb,
375 			   struct request_sock *req, bool fastopen,
376 			   bool *lost_race);
377 int tcp_child_process(struct sock *parent, struct sock *child,
378 		      struct sk_buff *skb);
379 void tcp_enter_loss(struct sock *sk);
380 void tcp_cwnd_reduction(struct sock *sk, int newly_acked_sacked, int flag);
381 void tcp_clear_retrans(struct tcp_sock *tp);
382 void tcp_update_metrics(struct sock *sk);
383 void tcp_init_metrics(struct sock *sk);
384 void tcp_metrics_init(void);
385 bool tcp_peer_is_proven(struct request_sock *req, struct dst_entry *dst);
386 void __tcp_close(struct sock *sk, long timeout);
387 void tcp_close(struct sock *sk, long timeout);
388 void tcp_init_sock(struct sock *sk);
389 void tcp_init_transfer(struct sock *sk, int bpf_op, struct sk_buff *skb);
390 __poll_t tcp_poll(struct file *file, struct socket *sock,
391 		      struct poll_table_struct *wait);
392 int tcp_getsockopt(struct sock *sk, int level, int optname,
393 		   char __user *optval, int __user *optlen);
394 int tcp_setsockopt(struct sock *sk, int level, int optname, sockptr_t optval,
395 		   unsigned int optlen);
396 void tcp_set_keepalive(struct sock *sk, int val);
397 void tcp_syn_ack_timeout(const struct request_sock *req);
398 int tcp_recvmsg(struct sock *sk, struct msghdr *msg, size_t len, int nonblock,
399 		int flags, int *addr_len);
400 int tcp_set_rcvlowat(struct sock *sk, int val);
401 void tcp_data_ready(struct sock *sk);
402 #ifdef CONFIG_MMU
403 int tcp_mmap(struct file *file, struct socket *sock,
404 	     struct vm_area_struct *vma);
405 #endif
406 void tcp_parse_options(const struct net *net, const struct sk_buff *skb,
407 		       struct tcp_options_received *opt_rx,
408 		       int estab, struct tcp_fastopen_cookie *foc);
409 const u8 *tcp_parse_md5sig_option(const struct tcphdr *th);
410 
411 /*
412  *	BPF SKB-less helpers
413  */
414 u16 tcp_v4_get_syncookie(struct sock *sk, struct iphdr *iph,
415 			 struct tcphdr *th, u32 *cookie);
416 u16 tcp_v6_get_syncookie(struct sock *sk, struct ipv6hdr *iph,
417 			 struct tcphdr *th, u32 *cookie);
418 u16 tcp_get_syncookie_mss(struct request_sock_ops *rsk_ops,
419 			  const struct tcp_request_sock_ops *af_ops,
420 			  struct sock *sk, struct tcphdr *th);
421 /*
422  *	TCP v4 functions exported for the inet6 API
423  */
424 
425 void tcp_v4_send_check(struct sock *sk, struct sk_buff *skb);
426 void tcp_v4_mtu_reduced(struct sock *sk);
427 void tcp_req_err(struct sock *sk, u32 seq, bool abort);
428 void tcp_ld_RTO_revert(struct sock *sk, u32 seq);
429 int tcp_v4_conn_request(struct sock *sk, struct sk_buff *skb);
430 struct sock *tcp_create_openreq_child(const struct sock *sk,
431 				      struct request_sock *req,
432 				      struct sk_buff *skb);
433 void tcp_ca_openreq_child(struct sock *sk, const struct dst_entry *dst);
434 struct sock *tcp_v4_syn_recv_sock(const struct sock *sk, struct sk_buff *skb,
435 				  struct request_sock *req,
436 				  struct dst_entry *dst,
437 				  struct request_sock *req_unhash,
438 				  bool *own_req);
439 int tcp_v4_do_rcv(struct sock *sk, struct sk_buff *skb);
440 int tcp_v4_connect(struct sock *sk, struct sockaddr *uaddr, int addr_len);
441 int tcp_connect(struct sock *sk);
442 enum tcp_synack_type {
443 	TCP_SYNACK_NORMAL,
444 	TCP_SYNACK_FASTOPEN,
445 	TCP_SYNACK_COOKIE,
446 };
447 struct sk_buff *tcp_make_synack(const struct sock *sk, struct dst_entry *dst,
448 				struct request_sock *req,
449 				struct tcp_fastopen_cookie *foc,
450 				enum tcp_synack_type synack_type,
451 				struct sk_buff *syn_skb);
452 int tcp_disconnect(struct sock *sk, int flags);
453 
454 void tcp_finish_connect(struct sock *sk, struct sk_buff *skb);
455 int tcp_send_rcvq(struct sock *sk, struct msghdr *msg, size_t size);
456 void inet_sk_rx_dst_set(struct sock *sk, const struct sk_buff *skb);
457 
458 /* From syncookies.c */
459 struct sock *tcp_get_cookie_sock(struct sock *sk, struct sk_buff *skb,
460 				 struct request_sock *req,
461 				 struct dst_entry *dst, u32 tsoff);
462 int __cookie_v4_check(const struct iphdr *iph, const struct tcphdr *th,
463 		      u32 cookie);
464 struct sock *cookie_v4_check(struct sock *sk, struct sk_buff *skb);
465 struct request_sock *cookie_tcp_reqsk_alloc(const struct request_sock_ops *ops,
466 					    const struct tcp_request_sock_ops *af_ops,
467 					    struct sock *sk, struct sk_buff *skb);
468 #ifdef CONFIG_SYN_COOKIES
469 
470 /* Syncookies use a monotonic timer which increments every 60 seconds.
471  * This counter is used both as a hash input and partially encoded into
472  * the cookie value.  A cookie is only validated further if the delta
473  * between the current counter value and the encoded one is less than this,
474  * i.e. a sent cookie is valid only at most for 2*60 seconds (or less if
475  * the counter advances immediately after a cookie is generated).
476  */
477 #define MAX_SYNCOOKIE_AGE	2
478 #define TCP_SYNCOOKIE_PERIOD	(60 * HZ)
479 #define TCP_SYNCOOKIE_VALID	(MAX_SYNCOOKIE_AGE * TCP_SYNCOOKIE_PERIOD)
480 
481 /* syncookies: remember time of last synqueue overflow
482  * But do not dirty this field too often (once per second is enough)
483  * It is racy as we do not hold a lock, but race is very minor.
484  */
tcp_synq_overflow(const struct sock * sk)485 static inline void tcp_synq_overflow(const struct sock *sk)
486 {
487 	unsigned int last_overflow;
488 	unsigned int now = jiffies;
489 
490 	if (sk->sk_reuseport) {
491 		struct sock_reuseport *reuse;
492 
493 		reuse = rcu_dereference(sk->sk_reuseport_cb);
494 		if (likely(reuse)) {
495 			last_overflow = READ_ONCE(reuse->synq_overflow_ts);
496 			if (!time_between32(now, last_overflow,
497 					    last_overflow + HZ))
498 				WRITE_ONCE(reuse->synq_overflow_ts, now);
499 			return;
500 		}
501 	}
502 
503 	last_overflow = READ_ONCE(tcp_sk(sk)->rx_opt.ts_recent_stamp);
504 	if (!time_between32(now, last_overflow, last_overflow + HZ))
505 		WRITE_ONCE(tcp_sk(sk)->rx_opt.ts_recent_stamp, now);
506 }
507 
508 /* syncookies: no recent synqueue overflow on this listening socket? */
tcp_synq_no_recent_overflow(const struct sock * sk)509 static inline bool tcp_synq_no_recent_overflow(const struct sock *sk)
510 {
511 	unsigned int last_overflow;
512 	unsigned int now = jiffies;
513 
514 	if (sk->sk_reuseport) {
515 		struct sock_reuseport *reuse;
516 
517 		reuse = rcu_dereference(sk->sk_reuseport_cb);
518 		if (likely(reuse)) {
519 			last_overflow = READ_ONCE(reuse->synq_overflow_ts);
520 			return !time_between32(now, last_overflow - HZ,
521 					       last_overflow +
522 					       TCP_SYNCOOKIE_VALID);
523 		}
524 	}
525 
526 	last_overflow = READ_ONCE(tcp_sk(sk)->rx_opt.ts_recent_stamp);
527 
528 	/* If last_overflow <= jiffies <= last_overflow + TCP_SYNCOOKIE_VALID,
529 	 * then we're under synflood. However, we have to use
530 	 * 'last_overflow - HZ' as lower bound. That's because a concurrent
531 	 * tcp_synq_overflow() could update .ts_recent_stamp after we read
532 	 * jiffies but before we store .ts_recent_stamp into last_overflow,
533 	 * which could lead to rejecting a valid syncookie.
534 	 */
535 	return !time_between32(now, last_overflow - HZ,
536 			       last_overflow + TCP_SYNCOOKIE_VALID);
537 }
538 
tcp_cookie_time(void)539 static inline u32 tcp_cookie_time(void)
540 {
541 	u64 val = get_jiffies_64();
542 
543 	do_div(val, TCP_SYNCOOKIE_PERIOD);
544 	return val;
545 }
546 
547 u32 __cookie_v4_init_sequence(const struct iphdr *iph, const struct tcphdr *th,
548 			      u16 *mssp);
549 __u32 cookie_v4_init_sequence(const struct sk_buff *skb, __u16 *mss);
550 u64 cookie_init_timestamp(struct request_sock *req, u64 now);
551 bool cookie_timestamp_decode(const struct net *net,
552 			     struct tcp_options_received *opt);
553 bool cookie_ecn_ok(const struct tcp_options_received *opt,
554 		   const struct net *net, const struct dst_entry *dst);
555 
556 /* From net/ipv6/syncookies.c */
557 int __cookie_v6_check(const struct ipv6hdr *iph, const struct tcphdr *th,
558 		      u32 cookie);
559 struct sock *cookie_v6_check(struct sock *sk, struct sk_buff *skb);
560 
561 u32 __cookie_v6_init_sequence(const struct ipv6hdr *iph,
562 			      const struct tcphdr *th, u16 *mssp);
563 __u32 cookie_v6_init_sequence(const struct sk_buff *skb, __u16 *mss);
564 #endif
565 /* tcp_output.c */
566 
567 void __tcp_push_pending_frames(struct sock *sk, unsigned int cur_mss,
568 			       int nonagle);
569 int __tcp_retransmit_skb(struct sock *sk, struct sk_buff *skb, int segs);
570 int tcp_retransmit_skb(struct sock *sk, struct sk_buff *skb, int segs);
571 void tcp_retransmit_timer(struct sock *sk);
572 void tcp_xmit_retransmit_queue(struct sock *);
573 void tcp_simple_retransmit(struct sock *);
574 void tcp_enter_recovery(struct sock *sk, bool ece_ack);
575 int tcp_trim_head(struct sock *, struct sk_buff *, u32);
576 enum tcp_queue {
577 	TCP_FRAG_IN_WRITE_QUEUE,
578 	TCP_FRAG_IN_RTX_QUEUE,
579 };
580 int tcp_fragment(struct sock *sk, enum tcp_queue tcp_queue,
581 		 struct sk_buff *skb, u32 len,
582 		 unsigned int mss_now, gfp_t gfp);
583 
584 void tcp_send_probe0(struct sock *);
585 void tcp_send_partial(struct sock *);
586 int tcp_write_wakeup(struct sock *, int mib);
587 void tcp_send_fin(struct sock *sk);
588 void tcp_send_active_reset(struct sock *sk, gfp_t priority);
589 int tcp_send_synack(struct sock *);
590 void tcp_push_one(struct sock *, unsigned int mss_now);
591 void __tcp_send_ack(struct sock *sk, u32 rcv_nxt);
592 void tcp_send_ack(struct sock *sk);
593 void tcp_send_delayed_ack(struct sock *sk);
594 void tcp_send_loss_probe(struct sock *sk);
595 bool tcp_schedule_loss_probe(struct sock *sk, bool advancing_rto);
596 void tcp_skb_collapse_tstamp(struct sk_buff *skb,
597 			     const struct sk_buff *next_skb);
598 
599 /* tcp_input.c */
600 void tcp_rearm_rto(struct sock *sk);
601 void tcp_synack_rtt_meas(struct sock *sk, struct request_sock *req);
602 void tcp_reset(struct sock *sk);
603 void tcp_skb_mark_lost_uncond_verify(struct tcp_sock *tp, struct sk_buff *skb);
604 void tcp_fin(struct sock *sk);
605 void tcp_check_space(struct sock *sk);
606 
607 /* tcp_timer.c */
608 void tcp_init_xmit_timers(struct sock *);
tcp_clear_xmit_timers(struct sock * sk)609 static inline void tcp_clear_xmit_timers(struct sock *sk)
610 {
611 	if (hrtimer_try_to_cancel(&tcp_sk(sk)->pacing_timer) == 1)
612 		__sock_put(sk);
613 
614 	if (hrtimer_try_to_cancel(&tcp_sk(sk)->compressed_ack_timer) == 1)
615 		__sock_put(sk);
616 
617 	inet_csk_clear_xmit_timers(sk);
618 }
619 
620 unsigned int tcp_sync_mss(struct sock *sk, u32 pmtu);
621 unsigned int tcp_current_mss(struct sock *sk);
622 u32 tcp_clamp_probe0_to_user_timeout(const struct sock *sk, u32 when);
623 
624 /* Bound MSS / TSO packet size with the half of the window */
tcp_bound_to_half_wnd(struct tcp_sock * tp,int pktsize)625 static inline int tcp_bound_to_half_wnd(struct tcp_sock *tp, int pktsize)
626 {
627 	int cutoff;
628 
629 	/* When peer uses tiny windows, there is no use in packetizing
630 	 * to sub-MSS pieces for the sake of SWS or making sure there
631 	 * are enough packets in the pipe for fast recovery.
632 	 *
633 	 * On the other hand, for extremely large MSS devices, handling
634 	 * smaller than MSS windows in this way does make sense.
635 	 */
636 	if (tp->max_window > TCP_MSS_DEFAULT)
637 		cutoff = (tp->max_window >> 1);
638 	else
639 		cutoff = tp->max_window;
640 
641 	if (cutoff && pktsize > cutoff)
642 		return max_t(int, cutoff, 68U - tp->tcp_header_len);
643 	else
644 		return pktsize;
645 }
646 
647 /* tcp.c */
648 void tcp_get_info(struct sock *, struct tcp_info *);
649 
650 /* Read 'sendfile()'-style from a TCP socket */
651 int tcp_read_sock(struct sock *sk, read_descriptor_t *desc,
652 		  sk_read_actor_t recv_actor);
653 
654 void tcp_initialize_rcv_mss(struct sock *sk);
655 
656 int tcp_mtu_to_mss(struct sock *sk, int pmtu);
657 int tcp_mss_to_mtu(struct sock *sk, int mss);
658 void tcp_mtup_init(struct sock *sk);
659 
tcp_bound_rto(const struct sock * sk)660 static inline void tcp_bound_rto(const struct sock *sk)
661 {
662 	if (inet_csk(sk)->icsk_rto > TCP_RTO_MAX)
663 		inet_csk(sk)->icsk_rto = TCP_RTO_MAX;
664 }
665 
__tcp_set_rto(const struct tcp_sock * tp)666 static inline u32 __tcp_set_rto(const struct tcp_sock *tp)
667 {
668 	return usecs_to_jiffies((tp->srtt_us >> 3) + tp->rttvar_us);
669 }
670 
__tcp_fast_path_on(struct tcp_sock * tp,u32 snd_wnd)671 static inline void __tcp_fast_path_on(struct tcp_sock *tp, u32 snd_wnd)
672 {
673 	/* mptcp hooks are only on the slow path */
674 	if (sk_is_mptcp((struct sock *)tp))
675 		return;
676 
677 	tp->pred_flags = htonl((tp->tcp_header_len << 26) |
678 			       ntohl(TCP_FLAG_ACK) |
679 			       snd_wnd);
680 }
681 
tcp_fast_path_on(struct tcp_sock * tp)682 static inline void tcp_fast_path_on(struct tcp_sock *tp)
683 {
684 	__tcp_fast_path_on(tp, tp->snd_wnd >> tp->rx_opt.snd_wscale);
685 }
686 
tcp_fast_path_check(struct sock * sk)687 static inline void tcp_fast_path_check(struct sock *sk)
688 {
689 	struct tcp_sock *tp = tcp_sk(sk);
690 
691 	if (RB_EMPTY_ROOT(&tp->out_of_order_queue) &&
692 	    tp->rcv_wnd &&
693 	    atomic_read(&sk->sk_rmem_alloc) < sk->sk_rcvbuf &&
694 	    !tp->urg_data)
695 		tcp_fast_path_on(tp);
696 }
697 
698 /* Compute the actual rto_min value */
tcp_rto_min(struct sock * sk)699 static inline u32 tcp_rto_min(struct sock *sk)
700 {
701 	const struct dst_entry *dst = __sk_dst_get(sk);
702 	u32 rto_min = inet_csk(sk)->icsk_rto_min;
703 
704 	if (dst && dst_metric_locked(dst, RTAX_RTO_MIN))
705 		rto_min = dst_metric_rtt(dst, RTAX_RTO_MIN);
706 	return rto_min;
707 }
708 
tcp_rto_min_us(struct sock * sk)709 static inline u32 tcp_rto_min_us(struct sock *sk)
710 {
711 	return jiffies_to_usecs(tcp_rto_min(sk));
712 }
713 
tcp_ca_dst_locked(const struct dst_entry * dst)714 static inline bool tcp_ca_dst_locked(const struct dst_entry *dst)
715 {
716 	return dst_metric_locked(dst, RTAX_CC_ALGO);
717 }
718 
719 /* Minimum RTT in usec. ~0 means not available. */
tcp_min_rtt(const struct tcp_sock * tp)720 static inline u32 tcp_min_rtt(const struct tcp_sock *tp)
721 {
722 	return minmax_get(&tp->rtt_min);
723 }
724 
725 /* Compute the actual receive window we are currently advertising.
726  * Rcv_nxt can be after the window if our peer push more data
727  * than the offered window.
728  */
tcp_receive_window(const struct tcp_sock * tp)729 static inline u32 tcp_receive_window(const struct tcp_sock *tp)
730 {
731 	s32 win = tp->rcv_wup + tp->rcv_wnd - tp->rcv_nxt;
732 
733 	if (win < 0)
734 		win = 0;
735 	return (u32) win;
736 }
737 
738 /* Choose a new window, without checks for shrinking, and without
739  * scaling applied to the result.  The caller does these things
740  * if necessary.  This is a "raw" window selection.
741  */
742 u32 __tcp_select_window(struct sock *sk);
743 
744 void tcp_send_window_probe(struct sock *sk);
745 
746 /* TCP uses 32bit jiffies to save some space.
747  * Note that this is different from tcp_time_stamp, which
748  * historically has been the same until linux-4.13.
749  */
750 #define tcp_jiffies32 ((u32)jiffies)
751 
752 /*
753  * Deliver a 32bit value for TCP timestamp option (RFC 7323)
754  * It is no longer tied to jiffies, but to 1 ms clock.
755  * Note: double check if you want to use tcp_jiffies32 instead of this.
756  */
757 #define TCP_TS_HZ	1000
758 
tcp_clock_ns(void)759 static inline u64 tcp_clock_ns(void)
760 {
761 	return ktime_get_ns();
762 }
763 
tcp_clock_us(void)764 static inline u64 tcp_clock_us(void)
765 {
766 	return div_u64(tcp_clock_ns(), NSEC_PER_USEC);
767 }
768 
769 /* This should only be used in contexts where tp->tcp_mstamp is up to date */
tcp_time_stamp(const struct tcp_sock * tp)770 static inline u32 tcp_time_stamp(const struct tcp_sock *tp)
771 {
772 	return div_u64(tp->tcp_mstamp, USEC_PER_SEC / TCP_TS_HZ);
773 }
774 
775 /* Convert a nsec timestamp into TCP TSval timestamp (ms based currently) */
tcp_ns_to_ts(u64 ns)776 static inline u32 tcp_ns_to_ts(u64 ns)
777 {
778 	return div_u64(ns, NSEC_PER_SEC / TCP_TS_HZ);
779 }
780 
781 /* Could use tcp_clock_us() / 1000, but this version uses a single divide */
tcp_time_stamp_raw(void)782 static inline u32 tcp_time_stamp_raw(void)
783 {
784 	return tcp_ns_to_ts(tcp_clock_ns());
785 }
786 
787 void tcp_mstamp_refresh(struct tcp_sock *tp);
788 
tcp_stamp_us_delta(u64 t1,u64 t0)789 static inline u32 tcp_stamp_us_delta(u64 t1, u64 t0)
790 {
791 	return max_t(s64, t1 - t0, 0);
792 }
793 
tcp_skb_timestamp(const struct sk_buff * skb)794 static inline u32 tcp_skb_timestamp(const struct sk_buff *skb)
795 {
796 	return tcp_ns_to_ts(skb->skb_mstamp_ns);
797 }
798 
799 /* provide the departure time in us unit */
tcp_skb_timestamp_us(const struct sk_buff * skb)800 static inline u64 tcp_skb_timestamp_us(const struct sk_buff *skb)
801 {
802 	return div_u64(skb->skb_mstamp_ns, NSEC_PER_USEC);
803 }
804 
805 
806 #define tcp_flag_byte(th) (((u_int8_t *)th)[13])
807 
808 #define TCPHDR_FIN 0x01
809 #define TCPHDR_SYN 0x02
810 #define TCPHDR_RST 0x04
811 #define TCPHDR_PSH 0x08
812 #define TCPHDR_ACK 0x10
813 #define TCPHDR_URG 0x20
814 #define TCPHDR_ECE 0x40
815 #define TCPHDR_CWR 0x80
816 
817 #define TCPHDR_SYN_ECN	(TCPHDR_SYN | TCPHDR_ECE | TCPHDR_CWR)
818 
819 /* This is what the send packet queuing engine uses to pass
820  * TCP per-packet control information to the transmission code.
821  * We also store the host-order sequence numbers in here too.
822  * This is 44 bytes if IPV6 is enabled.
823  * If this grows please adjust skbuff.h:skbuff->cb[xxx] size appropriately.
824  */
825 struct tcp_skb_cb {
826 	__u32		seq;		/* Starting sequence number	*/
827 	__u32		end_seq;	/* SEQ + FIN + SYN + datalen	*/
828 	union {
829 		/* Note : tcp_tw_isn is used in input path only
830 		 *	  (isn chosen by tcp_timewait_state_process())
831 		 *
832 		 * 	  tcp_gso_segs/size are used in write queue only,
833 		 *	  cf tcp_skb_pcount()/tcp_skb_mss()
834 		 */
835 		__u32		tcp_tw_isn;
836 		struct {
837 			u16	tcp_gso_segs;
838 			u16	tcp_gso_size;
839 		};
840 	};
841 	__u8		tcp_flags;	/* TCP header flags. (tcp[13])	*/
842 
843 	__u8		sacked;		/* State flags for SACK.	*/
844 #define TCPCB_SACKED_ACKED	0x01	/* SKB ACK'd by a SACK block	*/
845 #define TCPCB_SACKED_RETRANS	0x02	/* SKB retransmitted		*/
846 #define TCPCB_LOST		0x04	/* SKB is lost			*/
847 #define TCPCB_TAGBITS		0x07	/* All tag bits			*/
848 #define TCPCB_REPAIRED		0x10	/* SKB repaired (no skb_mstamp_ns)	*/
849 #define TCPCB_EVER_RETRANS	0x80	/* Ever retransmitted frame	*/
850 #define TCPCB_RETRANS		(TCPCB_SACKED_RETRANS|TCPCB_EVER_RETRANS| \
851 				TCPCB_REPAIRED)
852 
853 	__u8		ip_dsfield;	/* IPv4 tos or IPv6 dsfield	*/
854 	__u8		txstamp_ack:1,	/* Record TX timestamp for ack? */
855 			eor:1,		/* Is skb MSG_EOR marked? */
856 			has_rxtstamp:1,	/* SKB has a RX timestamp	*/
857 			unused:5;
858 	__u32		ack_seq;	/* Sequence number ACK'd	*/
859 	union {
860 		struct {
861 			/* There is space for up to 24 bytes */
862 			__u32 in_flight:30,/* Bytes in flight at transmit */
863 			      is_app_limited:1, /* cwnd not fully used? */
864 			      unused:1;
865 			/* pkts S/ACKed so far upon tx of skb, incl retrans: */
866 			__u32 delivered;
867 			/* start of send pipeline phase */
868 			u64 first_tx_mstamp;
869 			/* when we reached the "delivered" count */
870 			u64 delivered_mstamp;
871 		} tx;   /* only used for outgoing skbs */
872 		union {
873 			struct inet_skb_parm	h4;
874 #if IS_ENABLED(CONFIG_IPV6)
875 			struct inet6_skb_parm	h6;
876 #endif
877 #if IS_ENABLED(CONFIG_NEWIP)
878 			struct ninet_skb_parm	hnip; /* NIP */
879 #endif
880 		} header;	/* For incoming skbs */
881 		struct {
882 			__u32 flags;
883 			struct sock *sk_redir;
884 			void *data_end;
885 		} bpf;
886 	};
887 };
888 
889 #define TCP_SKB_CB(__skb)	((struct tcp_skb_cb *)&((__skb)->cb[0]))
890 
bpf_compute_data_end_sk_skb(struct sk_buff * skb)891 static inline void bpf_compute_data_end_sk_skb(struct sk_buff *skb)
892 {
893 	TCP_SKB_CB(skb)->bpf.data_end = skb->data + skb_headlen(skb);
894 }
895 
tcp_skb_bpf_ingress(const struct sk_buff * skb)896 static inline bool tcp_skb_bpf_ingress(const struct sk_buff *skb)
897 {
898 	return TCP_SKB_CB(skb)->bpf.flags & BPF_F_INGRESS;
899 }
900 
tcp_skb_bpf_redirect_fetch(struct sk_buff * skb)901 static inline struct sock *tcp_skb_bpf_redirect_fetch(struct sk_buff *skb)
902 {
903 	return TCP_SKB_CB(skb)->bpf.sk_redir;
904 }
905 
tcp_skb_bpf_redirect_clear(struct sk_buff * skb)906 static inline void tcp_skb_bpf_redirect_clear(struct sk_buff *skb)
907 {
908 	TCP_SKB_CB(skb)->bpf.sk_redir = NULL;
909 }
910 
911 extern const struct inet_connection_sock_af_ops ipv4_specific;
912 
913 #if IS_ENABLED(CONFIG_IPV6)
914 /* This is the variant of inet6_iif() that must be used by TCP,
915  * as TCP moves IP6CB into a different location in skb->cb[]
916  */
tcp_v6_iif(const struct sk_buff * skb)917 static inline int tcp_v6_iif(const struct sk_buff *skb)
918 {
919 	return TCP_SKB_CB(skb)->header.h6.iif;
920 }
921 
tcp_v6_iif_l3_slave(const struct sk_buff * skb)922 static inline int tcp_v6_iif_l3_slave(const struct sk_buff *skb)
923 {
924 	bool l3_slave = ipv6_l3mdev_skb(TCP_SKB_CB(skb)->header.h6.flags);
925 
926 	return l3_slave ? skb->skb_iif : TCP_SKB_CB(skb)->header.h6.iif;
927 }
928 
929 /* TCP_SKB_CB reference means this can not be used from early demux */
tcp_v6_sdif(const struct sk_buff * skb)930 static inline int tcp_v6_sdif(const struct sk_buff *skb)
931 {
932 #if IS_ENABLED(CONFIG_NET_L3_MASTER_DEV)
933 	if (skb && ipv6_l3mdev_skb(TCP_SKB_CB(skb)->header.h6.flags))
934 		return TCP_SKB_CB(skb)->header.h6.iif;
935 #endif
936 	return 0;
937 }
938 
939 extern const struct inet_connection_sock_af_ops ipv6_specific;
940 
941 INDIRECT_CALLABLE_DECLARE(void tcp_v6_send_check(struct sock *sk, struct sk_buff *skb));
942 INDIRECT_CALLABLE_DECLARE(int tcp_v6_rcv(struct sk_buff *skb));
943 void tcp_v6_early_demux(struct sk_buff *skb);
944 
945 #endif
946 
947 /* TCP_SKB_CB reference means this can not be used from early demux */
tcp_v4_sdif(struct sk_buff * skb)948 static inline int tcp_v4_sdif(struct sk_buff *skb)
949 {
950 #if IS_ENABLED(CONFIG_NET_L3_MASTER_DEV)
951 	if (skb && ipv4_l3mdev_skb(TCP_SKB_CB(skb)->header.h4.flags))
952 		return TCP_SKB_CB(skb)->header.h4.iif;
953 #endif
954 	return 0;
955 }
956 
957 /* Due to TSO, an SKB can be composed of multiple actual
958  * packets.  To keep these tracked properly, we use this.
959  */
tcp_skb_pcount(const struct sk_buff * skb)960 static inline int tcp_skb_pcount(const struct sk_buff *skb)
961 {
962 	return TCP_SKB_CB(skb)->tcp_gso_segs;
963 }
964 
tcp_skb_pcount_set(struct sk_buff * skb,int segs)965 static inline void tcp_skb_pcount_set(struct sk_buff *skb, int segs)
966 {
967 	TCP_SKB_CB(skb)->tcp_gso_segs = segs;
968 }
969 
tcp_skb_pcount_add(struct sk_buff * skb,int segs)970 static inline void tcp_skb_pcount_add(struct sk_buff *skb, int segs)
971 {
972 	TCP_SKB_CB(skb)->tcp_gso_segs += segs;
973 }
974 
975 /* This is valid iff skb is in write queue and tcp_skb_pcount() > 1. */
tcp_skb_mss(const struct sk_buff * skb)976 static inline int tcp_skb_mss(const struct sk_buff *skb)
977 {
978 	return TCP_SKB_CB(skb)->tcp_gso_size;
979 }
980 
tcp_skb_can_collapse_to(const struct sk_buff * skb)981 static inline bool tcp_skb_can_collapse_to(const struct sk_buff *skb)
982 {
983 	return likely(!TCP_SKB_CB(skb)->eor);
984 }
985 
tcp_skb_can_collapse(const struct sk_buff * to,const struct sk_buff * from)986 static inline bool tcp_skb_can_collapse(const struct sk_buff *to,
987 					const struct sk_buff *from)
988 {
989 	return likely(tcp_skb_can_collapse_to(to) &&
990 		      mptcp_skb_can_collapse(to, from));
991 }
992 
993 /* Events passed to congestion control interface */
994 enum tcp_ca_event {
995 	CA_EVENT_TX_START,	/* first transmit when no packets in flight */
996 	CA_EVENT_CWND_RESTART,	/* congestion window restart */
997 	CA_EVENT_COMPLETE_CWR,	/* end of congestion recovery */
998 	CA_EVENT_LOSS,		/* loss timeout */
999 	CA_EVENT_ECN_NO_CE,	/* ECT set, but not CE marked */
1000 	CA_EVENT_ECN_IS_CE,	/* received CE marked IP packet */
1001 };
1002 
1003 /* Information about inbound ACK, passed to cong_ops->in_ack_event() */
1004 enum tcp_ca_ack_event_flags {
1005 	CA_ACK_SLOWPATH		= (1 << 0),	/* In slow path processing */
1006 	CA_ACK_WIN_UPDATE	= (1 << 1),	/* ACK updated window */
1007 	CA_ACK_ECE		= (1 << 2),	/* ECE bit is set on ack */
1008 };
1009 
1010 /*
1011  * Interface for adding new TCP congestion control handlers
1012  */
1013 #define TCP_CA_NAME_MAX	16
1014 #define TCP_CA_MAX	128
1015 #define TCP_CA_BUF_MAX	(TCP_CA_NAME_MAX*TCP_CA_MAX)
1016 
1017 #define TCP_CA_UNSPEC	0
1018 
1019 /* Algorithm can be set on socket without CAP_NET_ADMIN privileges */
1020 #define TCP_CONG_NON_RESTRICTED 0x1
1021 /* Requires ECN/ECT set on all packets */
1022 #define TCP_CONG_NEEDS_ECN	0x2
1023 #define TCP_CONG_MASK	(TCP_CONG_NON_RESTRICTED | TCP_CONG_NEEDS_ECN)
1024 
1025 union tcp_cc_info;
1026 
1027 struct ack_sample {
1028 	u32 pkts_acked;
1029 	s32 rtt_us;
1030 	u32 in_flight;
1031 };
1032 
1033 /* A rate sample measures the number of (original/retransmitted) data
1034  * packets delivered "delivered" over an interval of time "interval_us".
1035  * The tcp_rate.c code fills in the rate sample, and congestion
1036  * control modules that define a cong_control function to run at the end
1037  * of ACK processing can optionally chose to consult this sample when
1038  * setting cwnd and pacing rate.
1039  * A sample is invalid if "delivered" or "interval_us" is negative.
1040  */
1041 struct rate_sample {
1042 	u64  prior_mstamp; /* starting timestamp for interval */
1043 	u32  prior_delivered;	/* tp->delivered at "prior_mstamp" */
1044 	s32  delivered;		/* number of packets delivered over interval */
1045 	long interval_us;	/* time for tp->delivered to incr "delivered" */
1046 	u32 snd_interval_us;	/* snd interval for delivered packets */
1047 	u32 rcv_interval_us;	/* rcv interval for delivered packets */
1048 	long rtt_us;		/* RTT of last (S)ACKed packet (or -1) */
1049 	int  losses;		/* number of packets marked lost upon ACK */
1050 	u32  acked_sacked;	/* number of packets newly (S)ACKed upon ACK */
1051 	u32  prior_in_flight;	/* in flight before this ACK */
1052 	u32  last_end_seq;	/* end_seq of most recently ACKed packet */
1053 	bool is_app_limited;	/* is sample from packet with bubble in pipe? */
1054 	bool is_retrans;	/* is sample from retransmission? */
1055 	bool is_ack_delayed;	/* is this (likely) a delayed ACK? */
1056 };
1057 
1058 struct tcp_congestion_ops {
1059 	struct list_head	list;
1060 	u32 key;
1061 	u32 flags;
1062 
1063 	/* initialize private data (optional) */
1064 	void (*init)(struct sock *sk);
1065 	/* cleanup private data  (optional) */
1066 	void (*release)(struct sock *sk);
1067 
1068 	/* return slow start threshold (required) */
1069 	u32 (*ssthresh)(struct sock *sk);
1070 	/* do new cwnd calculation (required) */
1071 	void (*cong_avoid)(struct sock *sk, u32 ack, u32 acked);
1072 	/* call before changing ca_state (optional) */
1073 	void (*set_state)(struct sock *sk, u8 new_state);
1074 	/* call when cwnd event occurs (optional) */
1075 	void (*cwnd_event)(struct sock *sk, enum tcp_ca_event ev);
1076 	/* call when ack arrives (optional) */
1077 	void (*in_ack_event)(struct sock *sk, u32 flags);
1078 	/* new value of cwnd after loss (required) */
1079 	u32  (*undo_cwnd)(struct sock *sk);
1080 	/* hook for packet ack accounting (optional) */
1081 	void (*pkts_acked)(struct sock *sk, const struct ack_sample *sample);
1082 	/* override sysctl_tcp_min_tso_segs */
1083 	u32 (*min_tso_segs)(struct sock *sk);
1084 	/* returns the multiplier used in tcp_sndbuf_expand (optional) */
1085 	u32 (*sndbuf_expand)(struct sock *sk);
1086 	/* call when packets are delivered to update cwnd and pacing rate,
1087 	 * after all the ca_state processing. (optional)
1088 	 */
1089 	void (*cong_control)(struct sock *sk, const struct rate_sample *rs);
1090 	/* get info for inet_diag (optional) */
1091 	size_t (*get_info)(struct sock *sk, u32 ext, int *attr,
1092 			   union tcp_cc_info *info);
1093 
1094 	char 		name[TCP_CA_NAME_MAX];
1095 	struct module 	*owner;
1096 };
1097 
1098 int tcp_register_congestion_control(struct tcp_congestion_ops *type);
1099 void tcp_unregister_congestion_control(struct tcp_congestion_ops *type);
1100 
1101 void tcp_assign_congestion_control(struct sock *sk);
1102 void tcp_init_congestion_control(struct sock *sk);
1103 void tcp_cleanup_congestion_control(struct sock *sk);
1104 int tcp_set_default_congestion_control(struct net *net, const char *name);
1105 void tcp_get_default_congestion_control(struct net *net, char *name);
1106 void tcp_get_available_congestion_control(char *buf, size_t len);
1107 void tcp_get_allowed_congestion_control(char *buf, size_t len);
1108 int tcp_set_allowed_congestion_control(char *allowed);
1109 int tcp_set_congestion_control(struct sock *sk, const char *name, bool load,
1110 			       bool cap_net_admin);
1111 u32 tcp_slow_start(struct tcp_sock *tp, u32 acked);
1112 void tcp_cong_avoid_ai(struct tcp_sock *tp, u32 w, u32 acked);
1113 
1114 u32 tcp_reno_ssthresh(struct sock *sk);
1115 u32 tcp_reno_undo_cwnd(struct sock *sk);
1116 void tcp_reno_cong_avoid(struct sock *sk, u32 ack, u32 acked);
1117 extern struct tcp_congestion_ops tcp_reno;
1118 
1119 struct tcp_congestion_ops *tcp_ca_find(const char *name);
1120 struct tcp_congestion_ops *tcp_ca_find_key(u32 key);
1121 u32 tcp_ca_get_key_by_name(struct net *net, const char *name, bool *ecn_ca);
1122 #ifdef CONFIG_INET
1123 char *tcp_ca_get_name_by_key(u32 key, char *buffer);
1124 #else
tcp_ca_get_name_by_key(u32 key,char * buffer)1125 static inline char *tcp_ca_get_name_by_key(u32 key, char *buffer)
1126 {
1127 	return NULL;
1128 }
1129 #endif
1130 
tcp_ca_needs_ecn(const struct sock * sk)1131 static inline bool tcp_ca_needs_ecn(const struct sock *sk)
1132 {
1133 	const struct inet_connection_sock *icsk = inet_csk(sk);
1134 
1135 	return icsk->icsk_ca_ops->flags & TCP_CONG_NEEDS_ECN;
1136 }
1137 
tcp_set_ca_state(struct sock * sk,const u8 ca_state)1138 static inline void tcp_set_ca_state(struct sock *sk, const u8 ca_state)
1139 {
1140 	struct inet_connection_sock *icsk = inet_csk(sk);
1141 
1142 	if (icsk->icsk_ca_ops->set_state)
1143 		icsk->icsk_ca_ops->set_state(sk, ca_state);
1144 	icsk->icsk_ca_state = ca_state;
1145 }
1146 
tcp_ca_event(struct sock * sk,const enum tcp_ca_event event)1147 static inline void tcp_ca_event(struct sock *sk, const enum tcp_ca_event event)
1148 {
1149 	const struct inet_connection_sock *icsk = inet_csk(sk);
1150 
1151 	if (icsk->icsk_ca_ops->cwnd_event)
1152 		icsk->icsk_ca_ops->cwnd_event(sk, event);
1153 }
1154 
1155 /* From tcp_rate.c */
1156 void tcp_rate_skb_sent(struct sock *sk, struct sk_buff *skb);
1157 void tcp_rate_skb_delivered(struct sock *sk, struct sk_buff *skb,
1158 			    struct rate_sample *rs);
1159 void tcp_rate_gen(struct sock *sk, u32 delivered, u32 lost,
1160 		  bool is_sack_reneg, struct rate_sample *rs);
1161 void tcp_rate_check_app_limited(struct sock *sk);
1162 
tcp_skb_sent_after(u64 t1,u64 t2,u32 seq1,u32 seq2)1163 static inline bool tcp_skb_sent_after(u64 t1, u64 t2, u32 seq1, u32 seq2)
1164 {
1165 	return t1 > t2 || (t1 == t2 && after(seq1, seq2));
1166 }
1167 
1168 /* These functions determine how the current flow behaves in respect of SACK
1169  * handling. SACK is negotiated with the peer, and therefore it can vary
1170  * between different flows.
1171  *
1172  * tcp_is_sack - SACK enabled
1173  * tcp_is_reno - No SACK
1174  */
tcp_is_sack(const struct tcp_sock * tp)1175 static inline int tcp_is_sack(const struct tcp_sock *tp)
1176 {
1177 	return likely(tp->rx_opt.sack_ok);
1178 }
1179 
tcp_is_reno(const struct tcp_sock * tp)1180 static inline bool tcp_is_reno(const struct tcp_sock *tp)
1181 {
1182 	return !tcp_is_sack(tp);
1183 }
1184 
tcp_left_out(const struct tcp_sock * tp)1185 static inline unsigned int tcp_left_out(const struct tcp_sock *tp)
1186 {
1187 	return tp->sacked_out + tp->lost_out;
1188 }
1189 
1190 /* This determines how many packets are "in the network" to the best
1191  * of our knowledge.  In many cases it is conservative, but where
1192  * detailed information is available from the receiver (via SACK
1193  * blocks etc.) we can make more aggressive calculations.
1194  *
1195  * Use this for decisions involving congestion control, use just
1196  * tp->packets_out to determine if the send queue is empty or not.
1197  *
1198  * Read this equation as:
1199  *
1200  *	"Packets sent once on transmission queue" MINUS
1201  *	"Packets left network, but not honestly ACKed yet" PLUS
1202  *	"Packets fast retransmitted"
1203  */
tcp_packets_in_flight(const struct tcp_sock * tp)1204 static inline unsigned int tcp_packets_in_flight(const struct tcp_sock *tp)
1205 {
1206 	return tp->packets_out - tcp_left_out(tp) + tp->retrans_out;
1207 }
1208 
1209 #define TCP_INFINITE_SSTHRESH	0x7fffffff
1210 
tcp_in_slow_start(const struct tcp_sock * tp)1211 static inline bool tcp_in_slow_start(const struct tcp_sock *tp)
1212 {
1213 	return tp->snd_cwnd < tp->snd_ssthresh;
1214 }
1215 
tcp_in_initial_slowstart(const struct tcp_sock * tp)1216 static inline bool tcp_in_initial_slowstart(const struct tcp_sock *tp)
1217 {
1218 	return tp->snd_ssthresh >= TCP_INFINITE_SSTHRESH;
1219 }
1220 
tcp_in_cwnd_reduction(const struct sock * sk)1221 static inline bool tcp_in_cwnd_reduction(const struct sock *sk)
1222 {
1223 	return (TCPF_CA_CWR | TCPF_CA_Recovery) &
1224 	       (1 << inet_csk(sk)->icsk_ca_state);
1225 }
1226 
1227 /* If cwnd > ssthresh, we may raise ssthresh to be half-way to cwnd.
1228  * The exception is cwnd reduction phase, when cwnd is decreasing towards
1229  * ssthresh.
1230  */
tcp_current_ssthresh(const struct sock * sk)1231 static inline __u32 tcp_current_ssthresh(const struct sock *sk)
1232 {
1233 	const struct tcp_sock *tp = tcp_sk(sk);
1234 
1235 	if (tcp_in_cwnd_reduction(sk))
1236 		return tp->snd_ssthresh;
1237 	else
1238 		return max(tp->snd_ssthresh,
1239 			   ((tp->snd_cwnd >> 1) +
1240 			    (tp->snd_cwnd >> 2)));
1241 }
1242 
1243 /* Use define here intentionally to get WARN_ON location shown at the caller */
1244 #define tcp_verify_left_out(tp)	WARN_ON(tcp_left_out(tp) > tp->packets_out)
1245 
1246 void tcp_enter_cwr(struct sock *sk);
1247 __u32 tcp_init_cwnd(const struct tcp_sock *tp, const struct dst_entry *dst);
1248 
1249 /* The maximum number of MSS of available cwnd for which TSO defers
1250  * sending if not using sysctl_tcp_tso_win_divisor.
1251  */
tcp_max_tso_deferred_mss(const struct tcp_sock * tp)1252 static inline __u32 tcp_max_tso_deferred_mss(const struct tcp_sock *tp)
1253 {
1254 	return 3;
1255 }
1256 
1257 /* Returns end sequence number of the receiver's advertised window */
tcp_wnd_end(const struct tcp_sock * tp)1258 static inline u32 tcp_wnd_end(const struct tcp_sock *tp)
1259 {
1260 	return tp->snd_una + tp->snd_wnd;
1261 }
1262 
1263 /* We follow the spirit of RFC2861 to validate cwnd but implement a more
1264  * flexible approach. The RFC suggests cwnd should not be raised unless
1265  * it was fully used previously. And that's exactly what we do in
1266  * congestion avoidance mode. But in slow start we allow cwnd to grow
1267  * as long as the application has used half the cwnd.
1268  * Example :
1269  *    cwnd is 10 (IW10), but application sends 9 frames.
1270  *    We allow cwnd to reach 18 when all frames are ACKed.
1271  * This check is safe because it's as aggressive as slow start which already
1272  * risks 100% overshoot. The advantage is that we discourage application to
1273  * either send more filler packets or data to artificially blow up the cwnd
1274  * usage, and allow application-limited process to probe bw more aggressively.
1275  */
tcp_is_cwnd_limited(const struct sock * sk)1276 static inline bool tcp_is_cwnd_limited(const struct sock *sk)
1277 {
1278 	const struct tcp_sock *tp = tcp_sk(sk);
1279 
1280 	if (tp->is_cwnd_limited)
1281 		return true;
1282 
1283 	/* If in slow start, ensure cwnd grows to twice what was ACKed. */
1284 	if (tcp_in_slow_start(tp))
1285 		return tp->snd_cwnd < 2 * tp->max_packets_out;
1286 
1287 	return false;
1288 }
1289 
1290 /* BBR congestion control needs pacing.
1291  * Same remark for SO_MAX_PACING_RATE.
1292  * sch_fq packet scheduler is efficiently handling pacing,
1293  * but is not always installed/used.
1294  * Return true if TCP stack should pace packets itself.
1295  */
tcp_needs_internal_pacing(const struct sock * sk)1296 static inline bool tcp_needs_internal_pacing(const struct sock *sk)
1297 {
1298 	return smp_load_acquire(&sk->sk_pacing_status) == SK_PACING_NEEDED;
1299 }
1300 
1301 /* Estimates in how many jiffies next packet for this flow can be sent.
1302  * Scheduling a retransmit timer too early would be silly.
1303  */
tcp_pacing_delay(const struct sock * sk)1304 static inline unsigned long tcp_pacing_delay(const struct sock *sk)
1305 {
1306 	s64 delay = tcp_sk(sk)->tcp_wstamp_ns - tcp_sk(sk)->tcp_clock_cache;
1307 
1308 	return delay > 0 ? nsecs_to_jiffies(delay) : 0;
1309 }
1310 
tcp_reset_xmit_timer(struct sock * sk,const int what,unsigned long when,const unsigned long max_when)1311 static inline void tcp_reset_xmit_timer(struct sock *sk,
1312 					const int what,
1313 					unsigned long when,
1314 					const unsigned long max_when)
1315 {
1316 	inet_csk_reset_xmit_timer(sk, what, when + tcp_pacing_delay(sk),
1317 				  max_when);
1318 }
1319 
1320 /* Something is really bad, we could not queue an additional packet,
1321  * because qdisc is full or receiver sent a 0 window, or we are paced.
1322  * We do not want to add fuel to the fire, or abort too early,
1323  * so make sure the timer we arm now is at least 200ms in the future,
1324  * regardless of current icsk_rto value (as it could be ~2ms)
1325  */
tcp_probe0_base(const struct sock * sk)1326 static inline unsigned long tcp_probe0_base(const struct sock *sk)
1327 {
1328 	return max_t(unsigned long, inet_csk(sk)->icsk_rto, TCP_RTO_MIN);
1329 }
1330 
1331 /* Variant of inet_csk_rto_backoff() used for zero window probes */
tcp_probe0_when(const struct sock * sk,unsigned long max_when)1332 static inline unsigned long tcp_probe0_when(const struct sock *sk,
1333 					    unsigned long max_when)
1334 {
1335 	u64 when = (u64)tcp_probe0_base(sk) << inet_csk(sk)->icsk_backoff;
1336 
1337 	return (unsigned long)min_t(u64, when, max_when);
1338 }
1339 
tcp_check_probe_timer(struct sock * sk)1340 static inline void tcp_check_probe_timer(struct sock *sk)
1341 {
1342 	if (!tcp_sk(sk)->packets_out && !inet_csk(sk)->icsk_pending)
1343 		tcp_reset_xmit_timer(sk, ICSK_TIME_PROBE0,
1344 				     tcp_probe0_base(sk), TCP_RTO_MAX);
1345 }
1346 
tcp_init_wl(struct tcp_sock * tp,u32 seq)1347 static inline void tcp_init_wl(struct tcp_sock *tp, u32 seq)
1348 {
1349 	tp->snd_wl1 = seq;
1350 }
1351 
tcp_update_wl(struct tcp_sock * tp,u32 seq)1352 static inline void tcp_update_wl(struct tcp_sock *tp, u32 seq)
1353 {
1354 	tp->snd_wl1 = seq;
1355 }
1356 
1357 /*
1358  * Calculate(/check) TCP checksum
1359  */
tcp_v4_check(int len,__be32 saddr,__be32 daddr,__wsum base)1360 static inline __sum16 tcp_v4_check(int len, __be32 saddr,
1361 				   __be32 daddr, __wsum base)
1362 {
1363 	return csum_tcpudp_magic(saddr, daddr, len, IPPROTO_TCP, base);
1364 }
1365 
tcp_checksum_complete(struct sk_buff * skb)1366 static inline bool tcp_checksum_complete(struct sk_buff *skb)
1367 {
1368 	return !skb_csum_unnecessary(skb) &&
1369 		__skb_checksum_complete(skb);
1370 }
1371 
1372 bool tcp_add_backlog(struct sock *sk, struct sk_buff *skb);
1373 int tcp_filter(struct sock *sk, struct sk_buff *skb);
1374 void tcp_set_state(struct sock *sk, int state);
1375 void tcp_done(struct sock *sk);
1376 int tcp_abort(struct sock *sk, int err);
1377 
tcp_sack_reset(struct tcp_options_received * rx_opt)1378 static inline void tcp_sack_reset(struct tcp_options_received *rx_opt)
1379 {
1380 	rx_opt->dsack = 0;
1381 	rx_opt->num_sacks = 0;
1382 }
1383 
1384 void tcp_cwnd_restart(struct sock *sk, s32 delta);
1385 
tcp_slow_start_after_idle_check(struct sock * sk)1386 static inline void tcp_slow_start_after_idle_check(struct sock *sk)
1387 {
1388 	const struct tcp_congestion_ops *ca_ops = inet_csk(sk)->icsk_ca_ops;
1389 	struct tcp_sock *tp = tcp_sk(sk);
1390 	s32 delta;
1391 
1392 	if (!READ_ONCE(sock_net(sk)->ipv4.sysctl_tcp_slow_start_after_idle) ||
1393 	    tp->packets_out || ca_ops->cong_control)
1394 		return;
1395 	delta = tcp_jiffies32 - tp->lsndtime;
1396 	if (delta > inet_csk(sk)->icsk_rto)
1397 		tcp_cwnd_restart(sk, delta);
1398 }
1399 
1400 /* Determine a window scaling and initial window to offer. */
1401 void tcp_select_initial_window(const struct sock *sk, int __space,
1402 			       __u32 mss, __u32 *rcv_wnd,
1403 			       __u32 *window_clamp, int wscale_ok,
1404 			       __u8 *rcv_wscale, __u32 init_rcv_wnd);
1405 
tcp_win_from_space(const struct sock * sk,int space)1406 static inline int tcp_win_from_space(const struct sock *sk, int space)
1407 {
1408 	int tcp_adv_win_scale = READ_ONCE(sock_net(sk)->ipv4.sysctl_tcp_adv_win_scale);
1409 
1410 	return tcp_adv_win_scale <= 0 ?
1411 		(space>>(-tcp_adv_win_scale)) :
1412 		space - (space>>tcp_adv_win_scale);
1413 }
1414 
1415 /* Note: caller must be prepared to deal with negative returns */
tcp_space(const struct sock * sk)1416 static inline int tcp_space(const struct sock *sk)
1417 {
1418 	return tcp_win_from_space(sk, READ_ONCE(sk->sk_rcvbuf) -
1419 				  READ_ONCE(sk->sk_backlog.len) -
1420 				  atomic_read(&sk->sk_rmem_alloc));
1421 }
1422 
tcp_full_space(const struct sock * sk)1423 static inline int tcp_full_space(const struct sock *sk)
1424 {
1425 	return tcp_win_from_space(sk, READ_ONCE(sk->sk_rcvbuf));
1426 }
1427 
1428 void tcp_cleanup_rbuf(struct sock *sk, int copied);
1429 
1430 /* We provision sk_rcvbuf around 200% of sk_rcvlowat.
1431  * If 87.5 % (7/8) of the space has been consumed, we want to override
1432  * SO_RCVLOWAT constraint, since we are receiving skbs with too small
1433  * len/truesize ratio.
1434  */
tcp_rmem_pressure(const struct sock * sk)1435 static inline bool tcp_rmem_pressure(const struct sock *sk)
1436 {
1437 	int rcvbuf, threshold;
1438 
1439 	if (tcp_under_memory_pressure(sk))
1440 		return true;
1441 
1442 	rcvbuf = READ_ONCE(sk->sk_rcvbuf);
1443 	threshold = rcvbuf - (rcvbuf >> 3);
1444 
1445 	return atomic_read(&sk->sk_rmem_alloc) > threshold;
1446 }
1447 
1448 extern void tcp_openreq_init_rwin(struct request_sock *req,
1449 				  const struct sock *sk_listener,
1450 				  const struct dst_entry *dst);
1451 
1452 void tcp_enter_memory_pressure(struct sock *sk);
1453 void tcp_leave_memory_pressure(struct sock *sk);
1454 
keepalive_intvl_when(const struct tcp_sock * tp)1455 static inline int keepalive_intvl_when(const struct tcp_sock *tp)
1456 {
1457 	struct net *net = sock_net((struct sock *)tp);
1458 
1459 	return tp->keepalive_intvl ? :
1460 		READ_ONCE(net->ipv4.sysctl_tcp_keepalive_intvl);
1461 }
1462 
keepalive_time_when(const struct tcp_sock * tp)1463 static inline int keepalive_time_when(const struct tcp_sock *tp)
1464 {
1465 	struct net *net = sock_net((struct sock *)tp);
1466 
1467 	return tp->keepalive_time ? :
1468 		READ_ONCE(net->ipv4.sysctl_tcp_keepalive_time);
1469 }
1470 
keepalive_probes(const struct tcp_sock * tp)1471 static inline int keepalive_probes(const struct tcp_sock *tp)
1472 {
1473 	struct net *net = sock_net((struct sock *)tp);
1474 
1475 	return tp->keepalive_probes ? :
1476 		READ_ONCE(net->ipv4.sysctl_tcp_keepalive_probes);
1477 }
1478 
keepalive_time_elapsed(const struct tcp_sock * tp)1479 static inline u32 keepalive_time_elapsed(const struct tcp_sock *tp)
1480 {
1481 	const struct inet_connection_sock *icsk = &tp->inet_conn;
1482 
1483 	return min_t(u32, tcp_jiffies32 - icsk->icsk_ack.lrcvtime,
1484 			  tcp_jiffies32 - tp->rcv_tstamp);
1485 }
1486 
tcp_fin_time(const struct sock * sk)1487 static inline int tcp_fin_time(const struct sock *sk)
1488 {
1489 	int fin_timeout = tcp_sk(sk)->linger2 ? :
1490 		READ_ONCE(sock_net(sk)->ipv4.sysctl_tcp_fin_timeout);
1491 	const int rto = inet_csk(sk)->icsk_rto;
1492 
1493 	if (fin_timeout < (rto << 2) - (rto >> 1))
1494 		fin_timeout = (rto << 2) - (rto >> 1);
1495 
1496 	return fin_timeout;
1497 }
1498 
tcp_paws_check(const struct tcp_options_received * rx_opt,int paws_win)1499 static inline bool tcp_paws_check(const struct tcp_options_received *rx_opt,
1500 				  int paws_win)
1501 {
1502 	if ((s32)(rx_opt->ts_recent - rx_opt->rcv_tsval) <= paws_win)
1503 		return true;
1504 	if (unlikely(!time_before32(ktime_get_seconds(),
1505 				    rx_opt->ts_recent_stamp + TCP_PAWS_24DAYS)))
1506 		return true;
1507 	/*
1508 	 * Some OSes send SYN and SYNACK messages with tsval=0 tsecr=0,
1509 	 * then following tcp messages have valid values. Ignore 0 value,
1510 	 * or else 'negative' tsval might forbid us to accept their packets.
1511 	 */
1512 	if (!rx_opt->ts_recent)
1513 		return true;
1514 	return false;
1515 }
1516 
tcp_paws_reject(const struct tcp_options_received * rx_opt,int rst)1517 static inline bool tcp_paws_reject(const struct tcp_options_received *rx_opt,
1518 				   int rst)
1519 {
1520 	if (tcp_paws_check(rx_opt, 0))
1521 		return false;
1522 
1523 	/* RST segments are not recommended to carry timestamp,
1524 	   and, if they do, it is recommended to ignore PAWS because
1525 	   "their cleanup function should take precedence over timestamps."
1526 	   Certainly, it is mistake. It is necessary to understand the reasons
1527 	   of this constraint to relax it: if peer reboots, clock may go
1528 	   out-of-sync and half-open connections will not be reset.
1529 	   Actually, the problem would be not existing if all
1530 	   the implementations followed draft about maintaining clock
1531 	   via reboots. Linux-2.2 DOES NOT!
1532 
1533 	   However, we can relax time bounds for RST segments to MSL.
1534 	 */
1535 	if (rst && !time_before32(ktime_get_seconds(),
1536 				  rx_opt->ts_recent_stamp + TCP_PAWS_MSL))
1537 		return false;
1538 	return true;
1539 }
1540 
1541 bool tcp_oow_rate_limited(struct net *net, const struct sk_buff *skb,
1542 			  int mib_idx, u32 *last_oow_ack_time);
1543 
tcp_mib_init(struct net * net)1544 static inline void tcp_mib_init(struct net *net)
1545 {
1546 	/* See RFC 2012 */
1547 	TCP_ADD_STATS(net, TCP_MIB_RTOALGORITHM, 1);
1548 	TCP_ADD_STATS(net, TCP_MIB_RTOMIN, TCP_RTO_MIN*1000/HZ);
1549 	TCP_ADD_STATS(net, TCP_MIB_RTOMAX, TCP_RTO_MAX*1000/HZ);
1550 	TCP_ADD_STATS(net, TCP_MIB_MAXCONN, -1);
1551 }
1552 
1553 /* from STCP */
tcp_clear_retrans_hints_partial(struct tcp_sock * tp)1554 static inline void tcp_clear_retrans_hints_partial(struct tcp_sock *tp)
1555 {
1556 	tp->lost_skb_hint = NULL;
1557 }
1558 
tcp_clear_all_retrans_hints(struct tcp_sock * tp)1559 static inline void tcp_clear_all_retrans_hints(struct tcp_sock *tp)
1560 {
1561 	tcp_clear_retrans_hints_partial(tp);
1562 	tp->retransmit_skb_hint = NULL;
1563 }
1564 
1565 union tcp_md5_addr {
1566 	struct in_addr  a4;
1567 #if IS_ENABLED(CONFIG_IPV6)
1568 	struct in6_addr	a6;
1569 #endif
1570 };
1571 
1572 /* - key database */
1573 struct tcp_md5sig_key {
1574 	struct hlist_node	node;
1575 	u8			keylen;
1576 	u8			family; /* AF_INET or AF_INET6 */
1577 	u8			prefixlen;
1578 	union tcp_md5_addr	addr;
1579 	int			l3index; /* set if key added with L3 scope */
1580 	u8			key[TCP_MD5SIG_MAXKEYLEN];
1581 	struct rcu_head		rcu;
1582 };
1583 
1584 /* - sock block */
1585 struct tcp_md5sig_info {
1586 	struct hlist_head	head;
1587 	struct rcu_head		rcu;
1588 };
1589 
1590 /* - pseudo header */
1591 struct tcp4_pseudohdr {
1592 	__be32		saddr;
1593 	__be32		daddr;
1594 	__u8		pad;
1595 	__u8		protocol;
1596 	__be16		len;
1597 };
1598 
1599 struct tcp6_pseudohdr {
1600 	struct in6_addr	saddr;
1601 	struct in6_addr daddr;
1602 	__be32		len;
1603 	__be32		protocol;	/* including padding */
1604 };
1605 
1606 union tcp_md5sum_block {
1607 	struct tcp4_pseudohdr ip4;
1608 #if IS_ENABLED(CONFIG_IPV6)
1609 	struct tcp6_pseudohdr ip6;
1610 #endif
1611 };
1612 
1613 /* - pool: digest algorithm, hash description and scratch buffer */
1614 struct tcp_md5sig_pool {
1615 	struct ahash_request	*md5_req;
1616 	void			*scratch;
1617 };
1618 
1619 /* - functions */
1620 int tcp_v4_md5_hash_skb(char *md5_hash, const struct tcp_md5sig_key *key,
1621 			const struct sock *sk, const struct sk_buff *skb);
1622 int tcp_md5_do_add(struct sock *sk, const union tcp_md5_addr *addr,
1623 		   int family, u8 prefixlen, int l3index,
1624 		   const u8 *newkey, u8 newkeylen, gfp_t gfp);
1625 int tcp_md5_do_del(struct sock *sk, const union tcp_md5_addr *addr,
1626 		   int family, u8 prefixlen, int l3index);
1627 struct tcp_md5sig_key *tcp_v4_md5_lookup(const struct sock *sk,
1628 					 const struct sock *addr_sk);
1629 
1630 #ifdef CONFIG_TCP_MD5SIG
1631 #include <linux/jump_label.h>
1632 extern struct static_key_false tcp_md5_needed;
1633 struct tcp_md5sig_key *__tcp_md5_do_lookup(const struct sock *sk, int l3index,
1634 					   const union tcp_md5_addr *addr,
1635 					   int family);
1636 static inline struct tcp_md5sig_key *
tcp_md5_do_lookup(const struct sock * sk,int l3index,const union tcp_md5_addr * addr,int family)1637 tcp_md5_do_lookup(const struct sock *sk, int l3index,
1638 		  const union tcp_md5_addr *addr, int family)
1639 {
1640 	if (!static_branch_unlikely(&tcp_md5_needed))
1641 		return NULL;
1642 	return __tcp_md5_do_lookup(sk, l3index, addr, family);
1643 }
1644 
1645 #define tcp_twsk_md5_key(twsk)	((twsk)->tw_md5_key)
1646 #else
1647 static inline struct tcp_md5sig_key *
tcp_md5_do_lookup(const struct sock * sk,int l3index,const union tcp_md5_addr * addr,int family)1648 tcp_md5_do_lookup(const struct sock *sk, int l3index,
1649 		  const union tcp_md5_addr *addr, int family)
1650 {
1651 	return NULL;
1652 }
1653 #define tcp_twsk_md5_key(twsk)	NULL
1654 #endif
1655 
1656 bool tcp_alloc_md5sig_pool(void);
1657 
1658 struct tcp_md5sig_pool *tcp_get_md5sig_pool(void);
tcp_put_md5sig_pool(void)1659 static inline void tcp_put_md5sig_pool(void)
1660 {
1661 	local_bh_enable();
1662 }
1663 
1664 int tcp_md5_hash_skb_data(struct tcp_md5sig_pool *, const struct sk_buff *,
1665 			  unsigned int header_len);
1666 int tcp_md5_hash_key(struct tcp_md5sig_pool *hp,
1667 		     const struct tcp_md5sig_key *key);
1668 
1669 /* From tcp_fastopen.c */
1670 void tcp_fastopen_cache_get(struct sock *sk, u16 *mss,
1671 			    struct tcp_fastopen_cookie *cookie);
1672 void tcp_fastopen_cache_set(struct sock *sk, u16 mss,
1673 			    struct tcp_fastopen_cookie *cookie, bool syn_lost,
1674 			    u16 try_exp);
1675 struct tcp_fastopen_request {
1676 	/* Fast Open cookie. Size 0 means a cookie request */
1677 	struct tcp_fastopen_cookie	cookie;
1678 	struct msghdr			*data;  /* data in MSG_FASTOPEN */
1679 	size_t				size;
1680 	int				copied;	/* queued in tcp_connect() */
1681 	struct ubuf_info		*uarg;
1682 };
1683 void tcp_free_fastopen_req(struct tcp_sock *tp);
1684 void tcp_fastopen_destroy_cipher(struct sock *sk);
1685 void tcp_fastopen_ctx_destroy(struct net *net);
1686 int tcp_fastopen_reset_cipher(struct net *net, struct sock *sk,
1687 			      void *primary_key, void *backup_key);
1688 int tcp_fastopen_get_cipher(struct net *net, struct inet_connection_sock *icsk,
1689 			    u64 *key);
1690 void tcp_fastopen_add_skb(struct sock *sk, struct sk_buff *skb);
1691 struct sock *tcp_try_fastopen(struct sock *sk, struct sk_buff *skb,
1692 			      struct request_sock *req,
1693 			      struct tcp_fastopen_cookie *foc,
1694 			      const struct dst_entry *dst);
1695 void tcp_fastopen_init_key_once(struct net *net);
1696 bool tcp_fastopen_cookie_check(struct sock *sk, u16 *mss,
1697 			     struct tcp_fastopen_cookie *cookie);
1698 bool tcp_fastopen_defer_connect(struct sock *sk, int *err);
1699 #define TCP_FASTOPEN_KEY_LENGTH sizeof(siphash_key_t)
1700 #define TCP_FASTOPEN_KEY_MAX 2
1701 #define TCP_FASTOPEN_KEY_BUF_LENGTH \
1702 	(TCP_FASTOPEN_KEY_LENGTH * TCP_FASTOPEN_KEY_MAX)
1703 
1704 /* Fastopen key context */
1705 struct tcp_fastopen_context {
1706 	siphash_key_t	key[TCP_FASTOPEN_KEY_MAX];
1707 	int		num;
1708 	struct rcu_head	rcu;
1709 };
1710 
1711 extern unsigned int sysctl_tcp_fastopen_blackhole_timeout;
1712 void tcp_fastopen_active_disable(struct sock *sk);
1713 bool tcp_fastopen_active_should_disable(struct sock *sk);
1714 void tcp_fastopen_active_disable_ofo_check(struct sock *sk);
1715 void tcp_fastopen_active_detect_blackhole(struct sock *sk, bool expired);
1716 
1717 /* Caller needs to wrap with rcu_read_(un)lock() */
1718 static inline
tcp_fastopen_get_ctx(const struct sock * sk)1719 struct tcp_fastopen_context *tcp_fastopen_get_ctx(const struct sock *sk)
1720 {
1721 	struct tcp_fastopen_context *ctx;
1722 
1723 	ctx = rcu_dereference(inet_csk(sk)->icsk_accept_queue.fastopenq.ctx);
1724 	if (!ctx)
1725 		ctx = rcu_dereference(sock_net(sk)->ipv4.tcp_fastopen_ctx);
1726 	return ctx;
1727 }
1728 
1729 static inline
tcp_fastopen_cookie_match(const struct tcp_fastopen_cookie * foc,const struct tcp_fastopen_cookie * orig)1730 bool tcp_fastopen_cookie_match(const struct tcp_fastopen_cookie *foc,
1731 			       const struct tcp_fastopen_cookie *orig)
1732 {
1733 	if (orig->len == TCP_FASTOPEN_COOKIE_SIZE &&
1734 	    orig->len == foc->len &&
1735 	    !memcmp(orig->val, foc->val, foc->len))
1736 		return true;
1737 	return false;
1738 }
1739 
1740 static inline
tcp_fastopen_context_len(const struct tcp_fastopen_context * ctx)1741 int tcp_fastopen_context_len(const struct tcp_fastopen_context *ctx)
1742 {
1743 	return ctx->num;
1744 }
1745 
1746 /* Latencies incurred by various limits for a sender. They are
1747  * chronograph-like stats that are mutually exclusive.
1748  */
1749 enum tcp_chrono {
1750 	TCP_CHRONO_UNSPEC,
1751 	TCP_CHRONO_BUSY, /* Actively sending data (non-empty write queue) */
1752 	TCP_CHRONO_RWND_LIMITED, /* Stalled by insufficient receive window */
1753 	TCP_CHRONO_SNDBUF_LIMITED, /* Stalled by insufficient send buffer */
1754 	__TCP_CHRONO_MAX,
1755 };
1756 
1757 void tcp_chrono_start(struct sock *sk, const enum tcp_chrono type);
1758 void tcp_chrono_stop(struct sock *sk, const enum tcp_chrono type);
1759 
1760 /* This helper is needed, because skb->tcp_tsorted_anchor uses
1761  * the same memory storage than skb->destructor/_skb_refdst
1762  */
tcp_skb_tsorted_anchor_cleanup(struct sk_buff * skb)1763 static inline void tcp_skb_tsorted_anchor_cleanup(struct sk_buff *skb)
1764 {
1765 	skb->destructor = NULL;
1766 	skb->_skb_refdst = 0UL;
1767 }
1768 
1769 #define tcp_skb_tsorted_save(skb) {		\
1770 	unsigned long _save = skb->_skb_refdst;	\
1771 	skb->_skb_refdst = 0UL;
1772 
1773 #define tcp_skb_tsorted_restore(skb)		\
1774 	skb->_skb_refdst = _save;		\
1775 }
1776 
1777 void tcp_write_queue_purge(struct sock *sk);
1778 
tcp_rtx_queue_head(const struct sock * sk)1779 static inline struct sk_buff *tcp_rtx_queue_head(const struct sock *sk)
1780 {
1781 	return skb_rb_first(&sk->tcp_rtx_queue);
1782 }
1783 
tcp_rtx_queue_tail(const struct sock * sk)1784 static inline struct sk_buff *tcp_rtx_queue_tail(const struct sock *sk)
1785 {
1786 	return skb_rb_last(&sk->tcp_rtx_queue);
1787 }
1788 
tcp_write_queue_head(const struct sock * sk)1789 static inline struct sk_buff *tcp_write_queue_head(const struct sock *sk)
1790 {
1791 	return skb_peek(&sk->sk_write_queue);
1792 }
1793 
tcp_write_queue_tail(const struct sock * sk)1794 static inline struct sk_buff *tcp_write_queue_tail(const struct sock *sk)
1795 {
1796 	return skb_peek_tail(&sk->sk_write_queue);
1797 }
1798 
1799 #define tcp_for_write_queue_from_safe(skb, tmp, sk)			\
1800 	skb_queue_walk_from_safe(&(sk)->sk_write_queue, skb, tmp)
1801 
tcp_send_head(const struct sock * sk)1802 static inline struct sk_buff *tcp_send_head(const struct sock *sk)
1803 {
1804 	return skb_peek(&sk->sk_write_queue);
1805 }
1806 
tcp_skb_is_last(const struct sock * sk,const struct sk_buff * skb)1807 static inline bool tcp_skb_is_last(const struct sock *sk,
1808 				   const struct sk_buff *skb)
1809 {
1810 	return skb_queue_is_last(&sk->sk_write_queue, skb);
1811 }
1812 
1813 /**
1814  * tcp_write_queue_empty - test if any payload (or FIN) is available in write queue
1815  * @sk: socket
1816  *
1817  * Since the write queue can have a temporary empty skb in it,
1818  * we must not use "return skb_queue_empty(&sk->sk_write_queue)"
1819  */
tcp_write_queue_empty(const struct sock * sk)1820 static inline bool tcp_write_queue_empty(const struct sock *sk)
1821 {
1822 	const struct tcp_sock *tp = tcp_sk(sk);
1823 
1824 	return tp->write_seq == tp->snd_nxt;
1825 }
1826 
tcp_rtx_queue_empty(const struct sock * sk)1827 static inline bool tcp_rtx_queue_empty(const struct sock *sk)
1828 {
1829 	return RB_EMPTY_ROOT(&sk->tcp_rtx_queue);
1830 }
1831 
tcp_rtx_and_write_queues_empty(const struct sock * sk)1832 static inline bool tcp_rtx_and_write_queues_empty(const struct sock *sk)
1833 {
1834 	return tcp_rtx_queue_empty(sk) && tcp_write_queue_empty(sk);
1835 }
1836 
tcp_add_write_queue_tail(struct sock * sk,struct sk_buff * skb)1837 static inline void tcp_add_write_queue_tail(struct sock *sk, struct sk_buff *skb)
1838 {
1839 	__skb_queue_tail(&sk->sk_write_queue, skb);
1840 
1841 	/* Queue it, remembering where we must start sending. */
1842 	if (sk->sk_write_queue.next == skb)
1843 		tcp_chrono_start(sk, TCP_CHRONO_BUSY);
1844 }
1845 
1846 /* Insert new before skb on the write queue of sk.  */
tcp_insert_write_queue_before(struct sk_buff * new,struct sk_buff * skb,struct sock * sk)1847 static inline void tcp_insert_write_queue_before(struct sk_buff *new,
1848 						  struct sk_buff *skb,
1849 						  struct sock *sk)
1850 {
1851 	__skb_queue_before(&sk->sk_write_queue, skb, new);
1852 }
1853 
tcp_unlink_write_queue(struct sk_buff * skb,struct sock * sk)1854 static inline void tcp_unlink_write_queue(struct sk_buff *skb, struct sock *sk)
1855 {
1856 	tcp_skb_tsorted_anchor_cleanup(skb);
1857 	__skb_unlink(skb, &sk->sk_write_queue);
1858 }
1859 
1860 void tcp_rbtree_insert(struct rb_root *root, struct sk_buff *skb);
1861 
tcp_rtx_queue_unlink(struct sk_buff * skb,struct sock * sk)1862 static inline void tcp_rtx_queue_unlink(struct sk_buff *skb, struct sock *sk)
1863 {
1864 	tcp_skb_tsorted_anchor_cleanup(skb);
1865 	rb_erase(&skb->rbnode, &sk->tcp_rtx_queue);
1866 }
1867 
tcp_rtx_queue_unlink_and_free(struct sk_buff * skb,struct sock * sk)1868 static inline void tcp_rtx_queue_unlink_and_free(struct sk_buff *skb, struct sock *sk)
1869 {
1870 	list_del(&skb->tcp_tsorted_anchor);
1871 	tcp_rtx_queue_unlink(skb, sk);
1872 	sk_wmem_free_skb(sk, skb);
1873 }
1874 
tcp_push_pending_frames(struct sock * sk)1875 static inline void tcp_push_pending_frames(struct sock *sk)
1876 {
1877 	if (tcp_send_head(sk)) {
1878 		struct tcp_sock *tp = tcp_sk(sk);
1879 
1880 		__tcp_push_pending_frames(sk, tcp_current_mss(sk), tp->nonagle);
1881 	}
1882 }
1883 
1884 /* Start sequence of the skb just after the highest skb with SACKed
1885  * bit, valid only if sacked_out > 0 or when the caller has ensured
1886  * validity by itself.
1887  */
tcp_highest_sack_seq(struct tcp_sock * tp)1888 static inline u32 tcp_highest_sack_seq(struct tcp_sock *tp)
1889 {
1890 	if (!tp->sacked_out)
1891 		return tp->snd_una;
1892 
1893 	if (tp->highest_sack == NULL)
1894 		return tp->snd_nxt;
1895 
1896 	return TCP_SKB_CB(tp->highest_sack)->seq;
1897 }
1898 
tcp_advance_highest_sack(struct sock * sk,struct sk_buff * skb)1899 static inline void tcp_advance_highest_sack(struct sock *sk, struct sk_buff *skb)
1900 {
1901 	tcp_sk(sk)->highest_sack = skb_rb_next(skb);
1902 }
1903 
tcp_highest_sack(struct sock * sk)1904 static inline struct sk_buff *tcp_highest_sack(struct sock *sk)
1905 {
1906 	return tcp_sk(sk)->highest_sack;
1907 }
1908 
tcp_highest_sack_reset(struct sock * sk)1909 static inline void tcp_highest_sack_reset(struct sock *sk)
1910 {
1911 	tcp_sk(sk)->highest_sack = tcp_rtx_queue_head(sk);
1912 }
1913 
1914 /* Called when old skb is about to be deleted and replaced by new skb */
tcp_highest_sack_replace(struct sock * sk,struct sk_buff * old,struct sk_buff * new)1915 static inline void tcp_highest_sack_replace(struct sock *sk,
1916 					    struct sk_buff *old,
1917 					    struct sk_buff *new)
1918 {
1919 	if (old == tcp_highest_sack(sk))
1920 		tcp_sk(sk)->highest_sack = new;
1921 }
1922 
1923 /* This helper checks if socket has IP_TRANSPARENT set */
inet_sk_transparent(const struct sock * sk)1924 static inline bool inet_sk_transparent(const struct sock *sk)
1925 {
1926 	switch (sk->sk_state) {
1927 	case TCP_TIME_WAIT:
1928 		return inet_twsk(sk)->tw_transparent;
1929 	case TCP_NEW_SYN_RECV:
1930 		return inet_rsk(inet_reqsk(sk))->no_srccheck;
1931 	}
1932 	return inet_sk(sk)->transparent;
1933 }
1934 
1935 /* Determines whether this is a thin stream (which may suffer from
1936  * increased latency). Used to trigger latency-reducing mechanisms.
1937  */
tcp_stream_is_thin(struct tcp_sock * tp)1938 static inline bool tcp_stream_is_thin(struct tcp_sock *tp)
1939 {
1940 	return tp->packets_out < 4 && !tcp_in_initial_slowstart(tp);
1941 }
1942 
1943 /* /proc */
1944 enum tcp_seq_states {
1945 	TCP_SEQ_STATE_LISTENING,
1946 	TCP_SEQ_STATE_ESTABLISHED,
1947 };
1948 
1949 void *tcp_seq_start(struct seq_file *seq, loff_t *pos);
1950 void *tcp_seq_next(struct seq_file *seq, void *v, loff_t *pos);
1951 void tcp_seq_stop(struct seq_file *seq, void *v);
1952 
1953 struct tcp_seq_afinfo {
1954 	sa_family_t			family;
1955 };
1956 
1957 struct tcp_iter_state {
1958 	struct seq_net_private	p;
1959 	enum tcp_seq_states	state;
1960 	struct sock		*syn_wait_sk;
1961 	struct tcp_seq_afinfo	*bpf_seq_afinfo;
1962 	int			bucket, offset, sbucket, num;
1963 	loff_t			last_pos;
1964 };
1965 
1966 extern struct request_sock_ops tcp_request_sock_ops;
1967 extern struct request_sock_ops tcp6_request_sock_ops;
1968 
1969 void tcp_v4_destroy_sock(struct sock *sk);
1970 
1971 struct sk_buff *tcp_gso_segment(struct sk_buff *skb,
1972 				netdev_features_t features);
1973 struct sk_buff *tcp_gro_receive(struct list_head *head, struct sk_buff *skb);
1974 INDIRECT_CALLABLE_DECLARE(int tcp4_gro_complete(struct sk_buff *skb, int thoff));
1975 INDIRECT_CALLABLE_DECLARE(struct sk_buff *tcp4_gro_receive(struct list_head *head, struct sk_buff *skb));
1976 INDIRECT_CALLABLE_DECLARE(int tcp6_gro_complete(struct sk_buff *skb, int thoff));
1977 INDIRECT_CALLABLE_DECLARE(struct sk_buff *tcp6_gro_receive(struct list_head *head, struct sk_buff *skb));
1978 int tcp_gro_complete(struct sk_buff *skb);
1979 
1980 void __tcp_v4_send_check(struct sk_buff *skb, __be32 saddr, __be32 daddr);
1981 
tcp_notsent_lowat(const struct tcp_sock * tp)1982 static inline u32 tcp_notsent_lowat(const struct tcp_sock *tp)
1983 {
1984 	struct net *net = sock_net((struct sock *)tp);
1985 	return tp->notsent_lowat ?: READ_ONCE(net->ipv4.sysctl_tcp_notsent_lowat);
1986 }
1987 
1988 /* @wake is one when sk_stream_write_space() calls us.
1989  * This sends EPOLLOUT only if notsent_bytes is half the limit.
1990  * This mimics the strategy used in sock_def_write_space().
1991  */
tcp_stream_memory_free(const struct sock * sk,int wake)1992 static inline bool tcp_stream_memory_free(const struct sock *sk, int wake)
1993 {
1994 	const struct tcp_sock *tp = tcp_sk(sk);
1995 	u32 notsent_bytes = READ_ONCE(tp->write_seq) -
1996 			    READ_ONCE(tp->snd_nxt);
1997 
1998 	return (notsent_bytes << wake) < tcp_notsent_lowat(tp);
1999 }
2000 
2001 #ifdef CONFIG_PROC_FS
2002 int tcp4_proc_init(void);
2003 void tcp4_proc_exit(void);
2004 #endif
2005 
2006 int tcp_rtx_synack(const struct sock *sk, struct request_sock *req);
2007 int tcp_conn_request(struct request_sock_ops *rsk_ops,
2008 		     const struct tcp_request_sock_ops *af_ops,
2009 		     struct sock *sk, struct sk_buff *skb);
2010 
2011 /* TCP af-specific functions */
2012 struct tcp_sock_af_ops {
2013 #ifdef CONFIG_TCP_MD5SIG
2014 	struct tcp_md5sig_key	*(*md5_lookup) (const struct sock *sk,
2015 						const struct sock *addr_sk);
2016 	int		(*calc_md5_hash)(char *location,
2017 					 const struct tcp_md5sig_key *md5,
2018 					 const struct sock *sk,
2019 					 const struct sk_buff *skb);
2020 	int		(*md5_parse)(struct sock *sk,
2021 				     int optname,
2022 				     sockptr_t optval,
2023 				     int optlen);
2024 #endif
2025 };
2026 
2027 struct tcp_request_sock_ops {
2028 	u16 mss_clamp;
2029 #ifdef CONFIG_TCP_MD5SIG
2030 	struct tcp_md5sig_key *(*req_md5_lookup)(const struct sock *sk,
2031 						 const struct sock *addr_sk);
2032 	int		(*calc_md5_hash) (char *location,
2033 					  const struct tcp_md5sig_key *md5,
2034 					  const struct sock *sk,
2035 					  const struct sk_buff *skb);
2036 #endif
2037 	void (*init_req)(struct request_sock *req,
2038 			 const struct sock *sk_listener,
2039 			 struct sk_buff *skb);
2040 #ifdef CONFIG_SYN_COOKIES
2041 	__u32 (*cookie_init_seq)(const struct sk_buff *skb,
2042 				 __u16 *mss);
2043 #endif
2044 	struct dst_entry *(*route_req)(const struct sock *sk, struct flowi *fl,
2045 				       const struct request_sock *req);
2046 	u32 (*init_seq)(const struct sk_buff *skb);
2047 	u32 (*init_ts_off)(const struct net *net, const struct sk_buff *skb);
2048 	int (*send_synack)(const struct sock *sk, struct dst_entry *dst,
2049 			   struct flowi *fl, struct request_sock *req,
2050 			   struct tcp_fastopen_cookie *foc,
2051 			   enum tcp_synack_type synack_type,
2052 			   struct sk_buff *syn_skb);
2053 };
2054 
2055 extern const struct tcp_request_sock_ops tcp_request_sock_ipv4_ops;
2056 #if IS_ENABLED(CONFIG_IPV6)
2057 extern const struct tcp_request_sock_ops tcp_request_sock_ipv6_ops;
2058 #endif
2059 
2060 #ifdef CONFIG_SYN_COOKIES
cookie_init_sequence(const struct tcp_request_sock_ops * ops,const struct sock * sk,struct sk_buff * skb,__u16 * mss)2061 static inline __u32 cookie_init_sequence(const struct tcp_request_sock_ops *ops,
2062 					 const struct sock *sk, struct sk_buff *skb,
2063 					 __u16 *mss)
2064 {
2065 	tcp_synq_overflow(sk);
2066 	__NET_INC_STATS(sock_net(sk), LINUX_MIB_SYNCOOKIESSENT);
2067 	return ops->cookie_init_seq(skb, mss);
2068 }
2069 #else
cookie_init_sequence(const struct tcp_request_sock_ops * ops,const struct sock * sk,struct sk_buff * skb,__u16 * mss)2070 static inline __u32 cookie_init_sequence(const struct tcp_request_sock_ops *ops,
2071 					 const struct sock *sk, struct sk_buff *skb,
2072 					 __u16 *mss)
2073 {
2074 	return 0;
2075 }
2076 #endif
2077 
2078 int tcpv4_offload_init(void);
2079 
2080 void tcp_v4_init(void);
2081 void tcp_init(void);
2082 
2083 /* tcp_recovery.c */
2084 void tcp_mark_skb_lost(struct sock *sk, struct sk_buff *skb);
2085 void tcp_newreno_mark_lost(struct sock *sk, bool snd_una_advanced);
2086 extern s32 tcp_rack_skb_timeout(struct tcp_sock *tp, struct sk_buff *skb,
2087 				u32 reo_wnd);
2088 extern bool tcp_rack_mark_lost(struct sock *sk);
2089 extern void tcp_rack_advance(struct tcp_sock *tp, u8 sacked, u32 end_seq,
2090 			     u64 xmit_time);
2091 extern void tcp_rack_reo_timeout(struct sock *sk);
2092 extern void tcp_rack_update_reo_wnd(struct sock *sk, struct rate_sample *rs);
2093 
2094 /* At how many usecs into the future should the RTO fire? */
tcp_rto_delta_us(const struct sock * sk)2095 static inline s64 tcp_rto_delta_us(const struct sock *sk)
2096 {
2097 	const struct sk_buff *skb = tcp_rtx_queue_head(sk);
2098 	u32 rto = inet_csk(sk)->icsk_rto;
2099 	u64 rto_time_stamp_us = tcp_skb_timestamp_us(skb) + jiffies_to_usecs(rto);
2100 
2101 	return rto_time_stamp_us - tcp_sk(sk)->tcp_mstamp;
2102 }
2103 
2104 /*
2105  * Save and compile IPv4 options, return a pointer to it
2106  */
tcp_v4_save_options(struct net * net,struct sk_buff * skb)2107 static inline struct ip_options_rcu *tcp_v4_save_options(struct net *net,
2108 							 struct sk_buff *skb)
2109 {
2110 	const struct ip_options *opt = &TCP_SKB_CB(skb)->header.h4.opt;
2111 	struct ip_options_rcu *dopt = NULL;
2112 
2113 	if (opt->optlen) {
2114 		int opt_size = sizeof(*dopt) + opt->optlen;
2115 
2116 		dopt = kmalloc(opt_size, GFP_ATOMIC);
2117 		if (dopt && __ip_options_echo(net, &dopt->opt, skb, opt)) {
2118 			kfree(dopt);
2119 			dopt = NULL;
2120 		}
2121 	}
2122 	return dopt;
2123 }
2124 
2125 /* locally generated TCP pure ACKs have skb->truesize == 2
2126  * (check tcp_send_ack() in net/ipv4/tcp_output.c )
2127  * This is much faster than dissecting the packet to find out.
2128  * (Think of GRE encapsulations, IPv4, IPv6, ...)
2129  */
skb_is_tcp_pure_ack(const struct sk_buff * skb)2130 static inline bool skb_is_tcp_pure_ack(const struct sk_buff *skb)
2131 {
2132 	return skb->truesize == 2;
2133 }
2134 
skb_set_tcp_pure_ack(struct sk_buff * skb)2135 static inline void skb_set_tcp_pure_ack(struct sk_buff *skb)
2136 {
2137 	skb->truesize = 2;
2138 }
2139 
tcp_inq(struct sock * sk)2140 static inline int tcp_inq(struct sock *sk)
2141 {
2142 	struct tcp_sock *tp = tcp_sk(sk);
2143 	int answ;
2144 
2145 	if ((1 << sk->sk_state) & (TCPF_SYN_SENT | TCPF_SYN_RECV)) {
2146 		answ = 0;
2147 	} else if (sock_flag(sk, SOCK_URGINLINE) ||
2148 		   !tp->urg_data ||
2149 		   before(tp->urg_seq, tp->copied_seq) ||
2150 		   !before(tp->urg_seq, tp->rcv_nxt)) {
2151 
2152 		answ = tp->rcv_nxt - tp->copied_seq;
2153 
2154 		/* Subtract 1, if FIN was received */
2155 		if (answ && sock_flag(sk, SOCK_DONE))
2156 			answ--;
2157 	} else {
2158 		answ = tp->urg_seq - tp->copied_seq;
2159 	}
2160 
2161 	return answ;
2162 }
2163 
2164 int tcp_peek_len(struct socket *sock);
2165 
tcp_segs_in(struct tcp_sock * tp,const struct sk_buff * skb)2166 static inline void tcp_segs_in(struct tcp_sock *tp, const struct sk_buff *skb)
2167 {
2168 	u16 segs_in;
2169 
2170 	segs_in = max_t(u16, 1, skb_shinfo(skb)->gso_segs);
2171 	tp->segs_in += segs_in;
2172 	if (skb->len > tcp_hdrlen(skb))
2173 		tp->data_segs_in += segs_in;
2174 }
2175 
2176 /*
2177  * TCP listen path runs lockless.
2178  * We forced "struct sock" to be const qualified to make sure
2179  * we don't modify one of its field by mistake.
2180  * Here, we increment sk_drops which is an atomic_t, so we can safely
2181  * make sock writable again.
2182  */
tcp_listendrop(const struct sock * sk)2183 static inline void tcp_listendrop(const struct sock *sk)
2184 {
2185 	atomic_inc(&((struct sock *)sk)->sk_drops);
2186 	__NET_INC_STATS(sock_net(sk), LINUX_MIB_LISTENDROPS);
2187 }
2188 
2189 enum hrtimer_restart tcp_pace_kick(struct hrtimer *timer);
2190 
2191 /*
2192  * Interface for adding Upper Level Protocols over TCP
2193  */
2194 
2195 #define TCP_ULP_NAME_MAX	16
2196 #define TCP_ULP_MAX		128
2197 #define TCP_ULP_BUF_MAX		(TCP_ULP_NAME_MAX*TCP_ULP_MAX)
2198 
2199 struct tcp_ulp_ops {
2200 	struct list_head	list;
2201 
2202 	/* initialize ulp */
2203 	int (*init)(struct sock *sk);
2204 	/* update ulp */
2205 	void (*update)(struct sock *sk, struct proto *p,
2206 		       void (*write_space)(struct sock *sk));
2207 	/* cleanup ulp */
2208 	void (*release)(struct sock *sk);
2209 	/* diagnostic */
2210 	int (*get_info)(const struct sock *sk, struct sk_buff *skb);
2211 	size_t (*get_info_size)(const struct sock *sk);
2212 	/* clone ulp */
2213 	void (*clone)(const struct request_sock *req, struct sock *newsk,
2214 		      const gfp_t priority);
2215 
2216 	char		name[TCP_ULP_NAME_MAX];
2217 	struct module	*owner;
2218 };
2219 int tcp_register_ulp(struct tcp_ulp_ops *type);
2220 void tcp_unregister_ulp(struct tcp_ulp_ops *type);
2221 int tcp_set_ulp(struct sock *sk, const char *name);
2222 void tcp_get_available_ulp(char *buf, size_t len);
2223 void tcp_cleanup_ulp(struct sock *sk);
2224 void tcp_update_ulp(struct sock *sk, struct proto *p,
2225 		    void (*write_space)(struct sock *sk));
2226 
2227 #define MODULE_ALIAS_TCP_ULP(name)				\
2228 	__MODULE_INFO(alias, alias_userspace, name);		\
2229 	__MODULE_INFO(alias, alias_tcp_ulp, "tcp-ulp-" name)
2230 
2231 struct sk_msg;
2232 struct sk_psock;
2233 
2234 #ifdef CONFIG_BPF_STREAM_PARSER
2235 struct proto *tcp_bpf_get_proto(struct sock *sk, struct sk_psock *psock);
2236 void tcp_bpf_clone(const struct sock *sk, struct sock *newsk);
2237 #else
tcp_bpf_clone(const struct sock * sk,struct sock * newsk)2238 static inline void tcp_bpf_clone(const struct sock *sk, struct sock *newsk)
2239 {
2240 }
2241 #endif /* CONFIG_BPF_STREAM_PARSER */
2242 
2243 #ifdef CONFIG_NET_SOCK_MSG
2244 int tcp_bpf_sendmsg_redir(struct sock *sk, struct sk_msg *msg, u32 bytes,
2245 			  int flags);
2246 int __tcp_bpf_recvmsg(struct sock *sk, struct sk_psock *psock,
2247 		      struct msghdr *msg, int len, int flags);
2248 #endif /* CONFIG_NET_SOCK_MSG */
2249 
2250 #ifdef CONFIG_CGROUP_BPF
bpf_skops_init_skb(struct bpf_sock_ops_kern * skops,struct sk_buff * skb,unsigned int end_offset)2251 static inline void bpf_skops_init_skb(struct bpf_sock_ops_kern *skops,
2252 				      struct sk_buff *skb,
2253 				      unsigned int end_offset)
2254 {
2255 	skops->skb = skb;
2256 	skops->skb_data_end = skb->data + end_offset;
2257 }
2258 #else
bpf_skops_init_skb(struct bpf_sock_ops_kern * skops,struct sk_buff * skb,unsigned int end_offset)2259 static inline void bpf_skops_init_skb(struct bpf_sock_ops_kern *skops,
2260 				      struct sk_buff *skb,
2261 				      unsigned int end_offset)
2262 {
2263 }
2264 #endif
2265 
2266 /* Call BPF_SOCK_OPS program that returns an int. If the return value
2267  * is < 0, then the BPF op failed (for example if the loaded BPF
2268  * program does not support the chosen operation or there is no BPF
2269  * program loaded).
2270  */
2271 #ifdef CONFIG_BPF
tcp_call_bpf(struct sock * sk,int op,u32 nargs,u32 * args)2272 static inline int tcp_call_bpf(struct sock *sk, int op, u32 nargs, u32 *args)
2273 {
2274 	struct bpf_sock_ops_kern sock_ops;
2275 	int ret;
2276 
2277 	memset(&sock_ops, 0, offsetof(struct bpf_sock_ops_kern, temp));
2278 	if (sk_fullsock(sk)) {
2279 		sock_ops.is_fullsock = 1;
2280 		sock_owned_by_me(sk);
2281 	}
2282 
2283 	sock_ops.sk = sk;
2284 	sock_ops.op = op;
2285 	if (nargs > 0)
2286 		memcpy(sock_ops.args, args, nargs * sizeof(*args));
2287 
2288 	ret = BPF_CGROUP_RUN_PROG_SOCK_OPS(&sock_ops);
2289 	if (ret == 0)
2290 		ret = sock_ops.reply;
2291 	else
2292 		ret = -1;
2293 	return ret;
2294 }
2295 
tcp_call_bpf_2arg(struct sock * sk,int op,u32 arg1,u32 arg2)2296 static inline int tcp_call_bpf_2arg(struct sock *sk, int op, u32 arg1, u32 arg2)
2297 {
2298 	u32 args[2] = {arg1, arg2};
2299 
2300 	return tcp_call_bpf(sk, op, 2, args);
2301 }
2302 
tcp_call_bpf_3arg(struct sock * sk,int op,u32 arg1,u32 arg2,u32 arg3)2303 static inline int tcp_call_bpf_3arg(struct sock *sk, int op, u32 arg1, u32 arg2,
2304 				    u32 arg3)
2305 {
2306 	u32 args[3] = {arg1, arg2, arg3};
2307 
2308 	return tcp_call_bpf(sk, op, 3, args);
2309 }
2310 
2311 #else
tcp_call_bpf(struct sock * sk,int op,u32 nargs,u32 * args)2312 static inline int tcp_call_bpf(struct sock *sk, int op, u32 nargs, u32 *args)
2313 {
2314 	return -EPERM;
2315 }
2316 
tcp_call_bpf_2arg(struct sock * sk,int op,u32 arg1,u32 arg2)2317 static inline int tcp_call_bpf_2arg(struct sock *sk, int op, u32 arg1, u32 arg2)
2318 {
2319 	return -EPERM;
2320 }
2321 
tcp_call_bpf_3arg(struct sock * sk,int op,u32 arg1,u32 arg2,u32 arg3)2322 static inline int tcp_call_bpf_3arg(struct sock *sk, int op, u32 arg1, u32 arg2,
2323 				    u32 arg3)
2324 {
2325 	return -EPERM;
2326 }
2327 
2328 #endif
2329 
tcp_timeout_init(struct sock * sk)2330 static inline u32 tcp_timeout_init(struct sock *sk)
2331 {
2332 	int timeout;
2333 
2334 	timeout = tcp_call_bpf(sk, BPF_SOCK_OPS_TIMEOUT_INIT, 0, NULL);
2335 
2336 	if (timeout <= 0)
2337 		timeout = TCP_TIMEOUT_INIT;
2338 	return timeout;
2339 }
2340 
tcp_rwnd_init_bpf(struct sock * sk)2341 static inline u32 tcp_rwnd_init_bpf(struct sock *sk)
2342 {
2343 	int rwnd;
2344 
2345 	rwnd = tcp_call_bpf(sk, BPF_SOCK_OPS_RWND_INIT, 0, NULL);
2346 
2347 	if (rwnd < 0)
2348 		rwnd = 0;
2349 	return rwnd;
2350 }
2351 
tcp_bpf_ca_needs_ecn(struct sock * sk)2352 static inline bool tcp_bpf_ca_needs_ecn(struct sock *sk)
2353 {
2354 	return (tcp_call_bpf(sk, BPF_SOCK_OPS_NEEDS_ECN, 0, NULL) == 1);
2355 }
2356 
tcp_bpf_rtt(struct sock * sk)2357 static inline void tcp_bpf_rtt(struct sock *sk)
2358 {
2359 	if (BPF_SOCK_OPS_TEST_FLAG(tcp_sk(sk), BPF_SOCK_OPS_RTT_CB_FLAG))
2360 		tcp_call_bpf(sk, BPF_SOCK_OPS_RTT_CB, 0, NULL);
2361 }
2362 
2363 #if IS_ENABLED(CONFIG_SMC)
2364 extern struct static_key_false tcp_have_smc;
2365 #endif
2366 
2367 #if IS_ENABLED(CONFIG_TLS_DEVICE)
2368 void clean_acked_data_enable(struct inet_connection_sock *icsk,
2369 			     void (*cad)(struct sock *sk, u32 ack_seq));
2370 void clean_acked_data_disable(struct inet_connection_sock *icsk);
2371 void clean_acked_data_flush(void);
2372 #endif
2373 
2374 DECLARE_STATIC_KEY_FALSE(tcp_tx_delay_enabled);
tcp_add_tx_delay(struct sk_buff * skb,const struct tcp_sock * tp)2375 static inline void tcp_add_tx_delay(struct sk_buff *skb,
2376 				    const struct tcp_sock *tp)
2377 {
2378 	if (static_branch_unlikely(&tcp_tx_delay_enabled))
2379 		skb->skb_mstamp_ns += (u64)tp->tcp_tx_delay * NSEC_PER_USEC;
2380 }
2381 
2382 /* Compute Earliest Departure Time for some control packets
2383  * like ACK or RST for TIME_WAIT or non ESTABLISHED sockets.
2384  */
tcp_transmit_time(const struct sock * sk)2385 static inline u64 tcp_transmit_time(const struct sock *sk)
2386 {
2387 	if (static_branch_unlikely(&tcp_tx_delay_enabled)) {
2388 		u32 delay = (sk->sk_state == TCP_TIME_WAIT) ?
2389 			tcp_twsk(sk)->tw_tx_delay : tcp_sk(sk)->tcp_tx_delay;
2390 
2391 		return tcp_clock_ns() + (u64)delay * NSEC_PER_USEC;
2392 	}
2393 	return 0;
2394 }
2395 
2396 #endif	/* _TCP_H */
2397