1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */ 2 /* 3 * IP Virtual Server 4 * data structure and functionality definitions 5 */ 6 7 #ifndef _IP_VS_H 8 #define _IP_VS_H 9 10 #include <linux/types.h> /* For __beXX types in userland */ 11 12 #define IP_VS_VERSION_CODE 0x010201 13 #define NVERSION(version) \ 14 (version >> 16) & 0xFF, \ 15 (version >> 8) & 0xFF, \ 16 version & 0xFF 17 18 /* 19 * Virtual Service Flags 20 */ 21 #define IP_VS_SVC_F_PERSISTENT 0x0001 /* persistent port */ 22 #define IP_VS_SVC_F_HASHED 0x0002 /* hashed entry */ 23 #define IP_VS_SVC_F_ONEPACKET 0x0004 /* one-packet scheduling */ 24 #define IP_VS_SVC_F_SCHED1 0x0008 /* scheduler flag 1 */ 25 #define IP_VS_SVC_F_SCHED2 0x0010 /* scheduler flag 2 */ 26 #define IP_VS_SVC_F_SCHED3 0x0020 /* scheduler flag 3 */ 27 28 #define IP_VS_SVC_F_SCHED_SH_FALLBACK IP_VS_SVC_F_SCHED1 /* SH fallback */ 29 #define IP_VS_SVC_F_SCHED_SH_PORT IP_VS_SVC_F_SCHED2 /* SH use port */ 30 31 /* 32 * Destination Server Flags 33 */ 34 #define IP_VS_DEST_F_AVAILABLE 0x0001 /* server is available */ 35 #define IP_VS_DEST_F_OVERLOAD 0x0002 /* server is overloaded */ 36 37 /* 38 * IPVS sync daemon states 39 */ 40 #define IP_VS_STATE_NONE 0x0000 /* daemon is stopped */ 41 #define IP_VS_STATE_MASTER 0x0001 /* started as master */ 42 #define IP_VS_STATE_BACKUP 0x0002 /* started as backup */ 43 44 /* 45 * IPVS socket options 46 */ 47 #define IP_VS_BASE_CTL (64+1024+64) /* base */ 48 49 #define IP_VS_SO_SET_NONE IP_VS_BASE_CTL /* just peek */ 50 #define IP_VS_SO_SET_INSERT (IP_VS_BASE_CTL+1) 51 #define IP_VS_SO_SET_ADD (IP_VS_BASE_CTL+2) 52 #define IP_VS_SO_SET_EDIT (IP_VS_BASE_CTL+3) 53 #define IP_VS_SO_SET_DEL (IP_VS_BASE_CTL+4) 54 #define IP_VS_SO_SET_FLUSH (IP_VS_BASE_CTL+5) 55 #define IP_VS_SO_SET_LIST (IP_VS_BASE_CTL+6) 56 #define IP_VS_SO_SET_ADDDEST (IP_VS_BASE_CTL+7) 57 #define IP_VS_SO_SET_DELDEST (IP_VS_BASE_CTL+8) 58 #define IP_VS_SO_SET_EDITDEST (IP_VS_BASE_CTL+9) 59 #define IP_VS_SO_SET_TIMEOUT (IP_VS_BASE_CTL+10) 60 #define IP_VS_SO_SET_STARTDAEMON (IP_VS_BASE_CTL+11) 61 #define IP_VS_SO_SET_STOPDAEMON (IP_VS_BASE_CTL+12) 62 #define IP_VS_SO_SET_RESTORE (IP_VS_BASE_CTL+13) 63 #define IP_VS_SO_SET_SAVE (IP_VS_BASE_CTL+14) 64 #define IP_VS_SO_SET_ZERO (IP_VS_BASE_CTL+15) 65 #define IP_VS_SO_SET_MAX IP_VS_SO_SET_ZERO 66 67 #define IP_VS_SO_GET_VERSION IP_VS_BASE_CTL 68 #define IP_VS_SO_GET_INFO (IP_VS_BASE_CTL+1) 69 #define IP_VS_SO_GET_SERVICES (IP_VS_BASE_CTL+2) 70 #define IP_VS_SO_GET_SERVICE (IP_VS_BASE_CTL+3) 71 #define IP_VS_SO_GET_DESTS (IP_VS_BASE_CTL+4) 72 #define IP_VS_SO_GET_DEST (IP_VS_BASE_CTL+5) /* not used now */ 73 #define IP_VS_SO_GET_TIMEOUT (IP_VS_BASE_CTL+6) 74 #define IP_VS_SO_GET_DAEMON (IP_VS_BASE_CTL+7) 75 #define IP_VS_SO_GET_MAX IP_VS_SO_GET_DAEMON 76 77 78 /* 79 * IPVS Connection Flags 80 * Only flags 0..15 are sent to backup server 81 */ 82 #define IP_VS_CONN_F_FWD_MASK 0x0007 /* mask for the fwd methods */ 83 #define IP_VS_CONN_F_MASQ 0x0000 /* masquerading/NAT */ 84 #define IP_VS_CONN_F_LOCALNODE 0x0001 /* local node */ 85 #define IP_VS_CONN_F_TUNNEL 0x0002 /* tunneling */ 86 #define IP_VS_CONN_F_DROUTE 0x0003 /* direct routing */ 87 #define IP_VS_CONN_F_BYPASS 0x0004 /* cache bypass */ 88 #define IP_VS_CONN_F_SYNC 0x0020 /* entry created by sync */ 89 #define IP_VS_CONN_F_HASHED 0x0040 /* hashed entry */ 90 #define IP_VS_CONN_F_NOOUTPUT 0x0080 /* no output packets */ 91 #define IP_VS_CONN_F_INACTIVE 0x0100 /* not established */ 92 #define IP_VS_CONN_F_OUT_SEQ 0x0200 /* must do output seq adjust */ 93 #define IP_VS_CONN_F_IN_SEQ 0x0400 /* must do input seq adjust */ 94 #define IP_VS_CONN_F_SEQ_MASK 0x0600 /* in/out sequence mask */ 95 #define IP_VS_CONN_F_NO_CPORT 0x0800 /* no client port set yet */ 96 #define IP_VS_CONN_F_TEMPLATE 0x1000 /* template, not connection */ 97 #define IP_VS_CONN_F_ONE_PACKET 0x2000 /* forward only one packet */ 98 99 /* Initial bits allowed in backup server */ 100 #define IP_VS_CONN_F_BACKUP_MASK (IP_VS_CONN_F_FWD_MASK | \ 101 IP_VS_CONN_F_NOOUTPUT | \ 102 IP_VS_CONN_F_INACTIVE | \ 103 IP_VS_CONN_F_SEQ_MASK | \ 104 IP_VS_CONN_F_NO_CPORT | \ 105 IP_VS_CONN_F_TEMPLATE \ 106 ) 107 108 /* Bits allowed to update in backup server */ 109 #define IP_VS_CONN_F_BACKUP_UPD_MASK (IP_VS_CONN_F_INACTIVE | \ 110 IP_VS_CONN_F_SEQ_MASK) 111 112 /* Flags that are not sent to backup server start from bit 16 */ 113 #define IP_VS_CONN_F_NFCT (1 << 16) /* use netfilter conntrack */ 114 115 /* Connection flags from destination that can be changed by user space */ 116 #define IP_VS_CONN_F_DEST_MASK (IP_VS_CONN_F_FWD_MASK | \ 117 IP_VS_CONN_F_ONE_PACKET | \ 118 IP_VS_CONN_F_NFCT | \ 119 0) 120 121 #define IP_VS_SCHEDNAME_MAXLEN 16 122 #define IP_VS_PENAME_MAXLEN 16 123 #define IP_VS_IFNAME_MAXLEN 16 124 125 #define IP_VS_PEDATA_MAXLEN 255 126 127 /* Tunnel types */ 128 enum { 129 IP_VS_CONN_F_TUNNEL_TYPE_IPIP = 0, /* IPIP */ 130 IP_VS_CONN_F_TUNNEL_TYPE_GUE, /* GUE */ 131 IP_VS_CONN_F_TUNNEL_TYPE_GRE, /* GRE */ 132 IP_VS_CONN_F_TUNNEL_TYPE_MAX, 133 }; 134 135 /* Tunnel encapsulation flags */ 136 #define IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM (0) 137 #define IP_VS_TUNNEL_ENCAP_FLAG_CSUM (1 << 0) 138 #define IP_VS_TUNNEL_ENCAP_FLAG_REMCSUM (1 << 1) 139 140 /* 141 * The struct ip_vs_service_user and struct ip_vs_dest_user are 142 * used to set IPVS rules through setsockopt. 143 */ 144 struct ip_vs_service_user { 145 /* virtual service addresses */ 146 __u16 protocol; 147 __be32 addr; /* virtual ip address */ 148 __be16 port; 149 __u32 fwmark; /* firwall mark of service */ 150 151 /* virtual service options */ 152 char sched_name[IP_VS_SCHEDNAME_MAXLEN]; 153 unsigned int flags; /* virtual service flags */ 154 unsigned int timeout; /* persistent timeout in sec */ 155 __be32 netmask; /* persistent netmask */ 156 }; 157 158 159 struct ip_vs_dest_user { 160 /* destination server address */ 161 __be32 addr; 162 __be16 port; 163 164 /* real server options */ 165 unsigned int conn_flags; /* connection flags */ 166 int weight; /* destination weight */ 167 168 /* thresholds for active connections */ 169 __u32 u_threshold; /* upper threshold */ 170 __u32 l_threshold; /* lower threshold */ 171 }; 172 173 174 /* 175 * IPVS statistics object (for user space) 176 */ 177 struct ip_vs_stats_user { 178 __u32 conns; /* connections scheduled */ 179 __u32 inpkts; /* incoming packets */ 180 __u32 outpkts; /* outgoing packets */ 181 __u64 inbytes; /* incoming bytes */ 182 __u64 outbytes; /* outgoing bytes */ 183 184 __u32 cps; /* current connection rate */ 185 __u32 inpps; /* current in packet rate */ 186 __u32 outpps; /* current out packet rate */ 187 __u32 inbps; /* current in byte rate */ 188 __u32 outbps; /* current out byte rate */ 189 }; 190 191 192 /* The argument to IP_VS_SO_GET_INFO */ 193 struct ip_vs_getinfo { 194 /* version number */ 195 unsigned int version; 196 197 /* size of connection hash table */ 198 unsigned int size; 199 200 /* number of virtual services */ 201 unsigned int num_services; 202 }; 203 204 205 /* The argument to IP_VS_SO_GET_SERVICE */ 206 struct ip_vs_service_entry { 207 /* which service: user fills in these */ 208 __u16 protocol; 209 __be32 addr; /* virtual address */ 210 __be16 port; 211 __u32 fwmark; /* firwall mark of service */ 212 213 /* service options */ 214 char sched_name[IP_VS_SCHEDNAME_MAXLEN]; 215 unsigned int flags; /* virtual service flags */ 216 unsigned int timeout; /* persistent timeout */ 217 __be32 netmask; /* persistent netmask */ 218 219 /* number of real servers */ 220 unsigned int num_dests; 221 222 /* statistics */ 223 struct ip_vs_stats_user stats; 224 }; 225 226 227 struct ip_vs_dest_entry { 228 __be32 addr; /* destination address */ 229 __be16 port; 230 unsigned int conn_flags; /* connection flags */ 231 int weight; /* destination weight */ 232 233 __u32 u_threshold; /* upper threshold */ 234 __u32 l_threshold; /* lower threshold */ 235 236 __u32 activeconns; /* active connections */ 237 __u32 inactconns; /* inactive connections */ 238 __u32 persistconns; /* persistent connections */ 239 240 /* statistics */ 241 struct ip_vs_stats_user stats; 242 }; 243 244 245 /* The argument to IP_VS_SO_GET_DESTS */ 246 struct ip_vs_get_dests { 247 /* which service: user fills in these */ 248 __u16 protocol; 249 __be32 addr; /* virtual address */ 250 __be16 port; 251 __u32 fwmark; /* firwall mark of service */ 252 253 /* number of real servers */ 254 unsigned int num_dests; 255 256 /* the real servers */ 257 struct ip_vs_dest_entry entrytable[0]; 258 }; 259 260 261 /* The argument to IP_VS_SO_GET_SERVICES */ 262 struct ip_vs_get_services { 263 /* number of virtual services */ 264 unsigned int num_services; 265 266 /* service table */ 267 struct ip_vs_service_entry entrytable[0]; 268 }; 269 270 271 /* The argument to IP_VS_SO_GET_TIMEOUT */ 272 struct ip_vs_timeout_user { 273 int tcp_timeout; 274 int tcp_fin_timeout; 275 int udp_timeout; 276 }; 277 278 279 /* The argument to IP_VS_SO_GET_DAEMON */ 280 struct ip_vs_daemon_user { 281 /* sync daemon state (master/backup) */ 282 int state; 283 284 /* multicast interface name */ 285 char mcast_ifn[IP_VS_IFNAME_MAXLEN]; 286 287 /* SyncID we belong to */ 288 int syncid; 289 }; 290 291 /* 292 * 293 * IPVS Generic Netlink interface definitions 294 * 295 */ 296 297 /* Generic Netlink family info */ 298 299 #define IPVS_GENL_NAME "IPVS" 300 #define IPVS_GENL_VERSION 0x1 301 302 struct ip_vs_flags { 303 __u32 flags; 304 __u32 mask; 305 }; 306 307 /* Generic Netlink command attributes */ 308 enum { 309 IPVS_CMD_UNSPEC = 0, 310 311 IPVS_CMD_NEW_SERVICE, /* add service */ 312 IPVS_CMD_SET_SERVICE, /* modify service */ 313 IPVS_CMD_DEL_SERVICE, /* delete service */ 314 IPVS_CMD_GET_SERVICE, /* get service info */ 315 316 IPVS_CMD_NEW_DEST, /* add destination */ 317 IPVS_CMD_SET_DEST, /* modify destination */ 318 IPVS_CMD_DEL_DEST, /* delete destination */ 319 IPVS_CMD_GET_DEST, /* get destination info */ 320 321 IPVS_CMD_NEW_DAEMON, /* start sync daemon */ 322 IPVS_CMD_DEL_DAEMON, /* stop sync daemon */ 323 IPVS_CMD_GET_DAEMON, /* get sync daemon status */ 324 325 IPVS_CMD_SET_CONFIG, /* set config settings */ 326 IPVS_CMD_GET_CONFIG, /* get config settings */ 327 328 IPVS_CMD_SET_INFO, /* only used in GET_INFO reply */ 329 IPVS_CMD_GET_INFO, /* get general IPVS info */ 330 331 IPVS_CMD_ZERO, /* zero all counters and stats */ 332 IPVS_CMD_FLUSH, /* flush services and dests */ 333 334 __IPVS_CMD_MAX, 335 }; 336 337 #define IPVS_CMD_MAX (__IPVS_CMD_MAX - 1) 338 339 /* Attributes used in the first level of commands */ 340 enum { 341 IPVS_CMD_ATTR_UNSPEC = 0, 342 IPVS_CMD_ATTR_SERVICE, /* nested service attribute */ 343 IPVS_CMD_ATTR_DEST, /* nested destination attribute */ 344 IPVS_CMD_ATTR_DAEMON, /* nested sync daemon attribute */ 345 IPVS_CMD_ATTR_TIMEOUT_TCP, /* TCP connection timeout */ 346 IPVS_CMD_ATTR_TIMEOUT_TCP_FIN, /* TCP FIN wait timeout */ 347 IPVS_CMD_ATTR_TIMEOUT_UDP, /* UDP timeout */ 348 __IPVS_CMD_ATTR_MAX, 349 }; 350 351 #define IPVS_CMD_ATTR_MAX (__IPVS_CMD_ATTR_MAX - 1) 352 353 /* 354 * Attributes used to describe a service 355 * 356 * Used inside nested attribute IPVS_CMD_ATTR_SERVICE 357 */ 358 enum { 359 IPVS_SVC_ATTR_UNSPEC = 0, 360 IPVS_SVC_ATTR_AF, /* address family */ 361 IPVS_SVC_ATTR_PROTOCOL, /* virtual service protocol */ 362 IPVS_SVC_ATTR_ADDR, /* virtual service address */ 363 IPVS_SVC_ATTR_PORT, /* virtual service port */ 364 IPVS_SVC_ATTR_FWMARK, /* firewall mark of service */ 365 366 IPVS_SVC_ATTR_SCHED_NAME, /* name of scheduler */ 367 IPVS_SVC_ATTR_FLAGS, /* virtual service flags */ 368 IPVS_SVC_ATTR_TIMEOUT, /* persistent timeout */ 369 IPVS_SVC_ATTR_NETMASK, /* persistent netmask */ 370 371 IPVS_SVC_ATTR_STATS, /* nested attribute for service stats */ 372 373 IPVS_SVC_ATTR_PE_NAME, /* name of ct retriever */ 374 375 IPVS_SVC_ATTR_STATS64, /* nested attribute for service stats */ 376 377 __IPVS_SVC_ATTR_MAX, 378 }; 379 380 #define IPVS_SVC_ATTR_MAX (__IPVS_SVC_ATTR_MAX - 1) 381 382 /* 383 * Attributes used to describe a destination (real server) 384 * 385 * Used inside nested attribute IPVS_CMD_ATTR_DEST 386 */ 387 enum { 388 IPVS_DEST_ATTR_UNSPEC = 0, 389 IPVS_DEST_ATTR_ADDR, /* real server address */ 390 IPVS_DEST_ATTR_PORT, /* real server port */ 391 392 IPVS_DEST_ATTR_FWD_METHOD, /* forwarding method */ 393 IPVS_DEST_ATTR_WEIGHT, /* destination weight */ 394 395 IPVS_DEST_ATTR_U_THRESH, /* upper threshold */ 396 IPVS_DEST_ATTR_L_THRESH, /* lower threshold */ 397 398 IPVS_DEST_ATTR_ACTIVE_CONNS, /* active connections */ 399 IPVS_DEST_ATTR_INACT_CONNS, /* inactive connections */ 400 IPVS_DEST_ATTR_PERSIST_CONNS, /* persistent connections */ 401 402 IPVS_DEST_ATTR_STATS, /* nested attribute for dest stats */ 403 404 IPVS_DEST_ATTR_ADDR_FAMILY, /* Address family of address */ 405 406 IPVS_DEST_ATTR_STATS64, /* nested attribute for dest stats */ 407 408 IPVS_DEST_ATTR_TUN_TYPE, /* tunnel type */ 409 410 IPVS_DEST_ATTR_TUN_PORT, /* tunnel port */ 411 412 IPVS_DEST_ATTR_TUN_FLAGS, /* tunnel flags */ 413 414 __IPVS_DEST_ATTR_MAX, 415 }; 416 417 #define IPVS_DEST_ATTR_MAX (__IPVS_DEST_ATTR_MAX - 1) 418 419 /* 420 * Attributes describing a sync daemon 421 * 422 * Used inside nested attribute IPVS_CMD_ATTR_DAEMON 423 */ 424 enum { 425 IPVS_DAEMON_ATTR_UNSPEC = 0, 426 IPVS_DAEMON_ATTR_STATE, /* sync daemon state (master/backup) */ 427 IPVS_DAEMON_ATTR_MCAST_IFN, /* multicast interface name */ 428 IPVS_DAEMON_ATTR_SYNC_ID, /* SyncID we belong to */ 429 IPVS_DAEMON_ATTR_SYNC_MAXLEN, /* UDP Payload Size */ 430 IPVS_DAEMON_ATTR_MCAST_GROUP, /* IPv4 Multicast Address */ 431 IPVS_DAEMON_ATTR_MCAST_GROUP6, /* IPv6 Multicast Address */ 432 IPVS_DAEMON_ATTR_MCAST_PORT, /* Multicast Port (base) */ 433 IPVS_DAEMON_ATTR_MCAST_TTL, /* Multicast TTL */ 434 __IPVS_DAEMON_ATTR_MAX, 435 }; 436 437 #define IPVS_DAEMON_ATTR_MAX (__IPVS_DAEMON_ATTR_MAX - 1) 438 439 /* 440 * Attributes used to describe service or destination entry statistics 441 * 442 * Used inside nested attributes IPVS_SVC_ATTR_STATS, IPVS_DEST_ATTR_STATS, 443 * IPVS_SVC_ATTR_STATS64 and IPVS_DEST_ATTR_STATS64. 444 */ 445 enum { 446 IPVS_STATS_ATTR_UNSPEC = 0, 447 IPVS_STATS_ATTR_CONNS, /* connections scheduled */ 448 IPVS_STATS_ATTR_INPKTS, /* incoming packets */ 449 IPVS_STATS_ATTR_OUTPKTS, /* outgoing packets */ 450 IPVS_STATS_ATTR_INBYTES, /* incoming bytes */ 451 IPVS_STATS_ATTR_OUTBYTES, /* outgoing bytes */ 452 453 IPVS_STATS_ATTR_CPS, /* current connection rate */ 454 IPVS_STATS_ATTR_INPPS, /* current in packet rate */ 455 IPVS_STATS_ATTR_OUTPPS, /* current out packet rate */ 456 IPVS_STATS_ATTR_INBPS, /* current in byte rate */ 457 IPVS_STATS_ATTR_OUTBPS, /* current out byte rate */ 458 IPVS_STATS_ATTR_PAD, 459 __IPVS_STATS_ATTR_MAX, 460 }; 461 462 #define IPVS_STATS_ATTR_MAX (__IPVS_STATS_ATTR_MAX - 1) 463 464 /* Attributes used in response to IPVS_CMD_GET_INFO command */ 465 enum { 466 IPVS_INFO_ATTR_UNSPEC = 0, 467 IPVS_INFO_ATTR_VERSION, /* IPVS version number */ 468 IPVS_INFO_ATTR_CONN_TAB_SIZE, /* size of connection hash table */ 469 __IPVS_INFO_ATTR_MAX, 470 }; 471 472 #define IPVS_INFO_ATTR_MAX (__IPVS_INFO_ATTR_MAX - 1) 473 474 #endif /* _IP_VS_H */ 475