16#include <linux/netfilter/nf_tables.h>
19#include <libmnl/libmnl.h>
20#include <libnftnl/expr.h>
21#include <libnftnl/rule.h>
24 enum nft_hash_types type;
25 enum nft_registers sreg;
26 enum nft_registers dreg;
34nftnl_expr_hash_set(
struct nftnl_expr *e, uint16_t type,
35 const void *data, uint32_t data_len)
39 case NFTNL_EXPR_HASH_SREG:
40 memcpy(&hash->sreg, data,
sizeof(hash->sreg));
42 case NFTNL_EXPR_HASH_DREG:
43 memcpy(&hash->dreg, data,
sizeof(hash->dreg));
45 case NFTNL_EXPR_HASH_LEN:
46 memcpy(&hash->len, data,
sizeof(hash->len));
48 case NFTNL_EXPR_HASH_MODULUS:
49 memcpy(&hash->modulus, data,
sizeof(hash->modulus));
51 case NFTNL_EXPR_HASH_SEED:
52 memcpy(&hash->seed, data,
sizeof(hash->seed));
54 case NFTNL_EXPR_HASH_OFFSET:
55 memcpy(&hash->offset, data,
sizeof(hash->offset));
57 case NFTNL_EXPR_HASH_TYPE:
58 memcpy(&hash->type, data,
sizeof(hash->type));
67nftnl_expr_hash_get(
const struct nftnl_expr *e, uint16_t type,
73 case NFTNL_EXPR_HASH_SREG:
74 *data_len =
sizeof(hash->sreg);
76 case NFTNL_EXPR_HASH_DREG:
77 *data_len =
sizeof(hash->dreg);
79 case NFTNL_EXPR_HASH_LEN:
80 *data_len =
sizeof(hash->len);
82 case NFTNL_EXPR_HASH_MODULUS:
83 *data_len =
sizeof(hash->modulus);
84 return &hash->modulus;
85 case NFTNL_EXPR_HASH_SEED:
86 *data_len =
sizeof(hash->seed);
88 case NFTNL_EXPR_HASH_OFFSET:
89 *data_len =
sizeof(hash->offset);
91 case NFTNL_EXPR_HASH_TYPE:
92 *data_len =
sizeof(hash->type);
98static int nftnl_expr_hash_cb(
const struct nlattr *attr,
void *data)
100 const struct nlattr **tb = data;
101 int type = mnl_attr_get_type(attr);
103 if (mnl_attr_type_valid(attr, NFTA_HASH_MAX) < 0)
110 case NFTA_HASH_MODULUS:
112 case NFTA_HASH_OFFSET:
114 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
124nftnl_expr_hash_build(
struct nlmsghdr *nlh,
const struct nftnl_expr *e)
128 if (e->flags & (1 << NFTNL_EXPR_HASH_SREG))
129 mnl_attr_put_u32(nlh, NFTA_HASH_SREG, htonl(hash->sreg));
130 if (e->flags & (1 << NFTNL_EXPR_HASH_DREG))
131 mnl_attr_put_u32(nlh, NFTA_HASH_DREG, htonl(hash->dreg));
132 if (e->flags & (1 << NFTNL_EXPR_HASH_LEN))
133 mnl_attr_put_u32(nlh, NFTA_HASH_LEN, htonl(hash->len));
134 if (e->flags & (1 << NFTNL_EXPR_HASH_MODULUS))
135 mnl_attr_put_u32(nlh, NFTA_HASH_MODULUS, htonl(hash->modulus));
136 if (e->flags & (1 << NFTNL_EXPR_HASH_SEED))
137 mnl_attr_put_u32(nlh, NFTA_HASH_SEED, htonl(hash->seed));
138 if (e->flags & (1 << NFTNL_EXPR_HASH_OFFSET))
139 mnl_attr_put_u32(nlh, NFTA_HASH_OFFSET, htonl(hash->offset));
140 if (e->flags & (1 << NFTNL_EXPR_HASH_TYPE))
141 mnl_attr_put_u32(nlh, NFTA_HASH_TYPE, htonl(hash->type));
145nftnl_expr_hash_parse(
struct nftnl_expr *e,
struct nlattr *attr)
148 struct nlattr *tb[NFTA_HASH_MAX+1] = {};
151 if (mnl_attr_parse_nested(attr, nftnl_expr_hash_cb, tb) < 0)
154 if (tb[NFTA_HASH_SREG]) {
155 hash->sreg = ntohl(mnl_attr_get_u32(tb[NFTA_HASH_SREG]));
156 e->flags |= (1 << NFTNL_EXPR_HASH_SREG);
158 if (tb[NFTA_HASH_DREG]) {
159 hash->dreg = ntohl(mnl_attr_get_u32(tb[NFTA_HASH_DREG]));
160 e->flags |= (1 << NFTNL_EXPR_HASH_DREG);
162 if (tb[NFTA_HASH_LEN]) {
163 hash->len = ntohl(mnl_attr_get_u32(tb[NFTA_HASH_LEN]));
164 e->flags |= (1 << NFTNL_EXPR_HASH_LEN);
166 if (tb[NFTA_HASH_MODULUS]) {
167 hash->modulus = ntohl(mnl_attr_get_u32(tb[NFTA_HASH_MODULUS]));
168 e->flags |= (1 << NFTNL_EXPR_HASH_MODULUS);
170 if (tb[NFTA_HASH_SEED]) {
171 hash->seed = ntohl(mnl_attr_get_u32(tb[NFTA_HASH_SEED]));
172 e->flags |= (1 << NFTNL_EXPR_HASH_SEED);
174 if (tb[NFTA_HASH_OFFSET]) {
175 hash->offset = ntohl(mnl_attr_get_u32(tb[NFTA_HASH_OFFSET]));
176 e->flags |= (1 << NFTNL_EXPR_HASH_OFFSET);
178 if (tb[NFTA_HASH_TYPE]) {
179 hash->type = ntohl(mnl_attr_get_u32(tb[NFTA_HASH_TYPE]));
180 e->flags |= (1 << NFTNL_EXPR_HASH_TYPE);
187nftnl_expr_hash_snprintf(
char *buf,
size_t remain,
188 uint32_t flags,
const struct nftnl_expr *e)
193 switch (hash->type) {
196 snprintf(buf, remain,
"reg %u = symhash() %% mod %u ",
199 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
201 case NFT_HASH_JENKINS:
204 snprintf(buf, remain,
205 "reg %u = jhash(reg %u, %u, 0x%x) %% mod %u ",
206 hash->dreg, hash->sreg, hash->len, hash->seed,
208 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
213 ret = snprintf(buf + offset, remain,
"offset %u ",
215 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
221struct expr_ops expr_ops_hash = {
224 .max_attr = NFTA_HASH_MAX,
225 .set = nftnl_expr_hash_set,
226 .get = nftnl_expr_hash_get,
227 .parse = nftnl_expr_hash_parse,
228 .build = nftnl_expr_hash_build,
229 .output = nftnl_expr_hash_snprintf,