2 +++ b/net/sched/act_connmark.c
5 + * Copyright (c) 2011 Felix Fietkau <nbd@openwrt.org>
7 + * This program is free software; you can redistribute it and/or modify it
8 + * under the terms and conditions of the GNU General Public License,
9 + * version 2, as published by the Free Software Foundation.
11 + * This program is distributed in the hope it will be useful, but WITHOUT
12 + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 + * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
16 + * You should have received a copy of the GNU General Public License along with
17 + * this program; if not, write to the Free Software Foundation, Inc., 59 Temple
18 + * Place - Suite 330, Boston, MA 02111-1307 USA.
21 +#include <linux/module.h>
22 +#include <linux/init.h>
23 +#include <linux/kernel.h>
24 +#include <linux/skbuff.h>
25 +#include <linux/rtnetlink.h>
26 +#include <linux/pkt_cls.h>
27 +#include <linux/ip.h>
28 +#include <linux/ipv6.h>
29 +#include <net/netlink.h>
30 +#include <net/pkt_sched.h>
31 +#include <net/act_api.h>
33 +#include <net/netfilter/nf_conntrack.h>
34 +#include <net/netfilter/nf_conntrack_core.h>
36 +#define TCA_ACT_CONNMARK 20
38 +#define CONNMARK_TAB_MASK 3
40 +static struct tcf_hashinfo connmark_hash_info;
42 +static int tcf_connmark(struct sk_buff *skb, const struct tc_action *a,
43 + struct tcf_result *res)
46 + enum ip_conntrack_info ctinfo;
50 + if (skb->protocol == htons(ETH_P_IP)) {
51 + if (skb->len < sizeof(struct iphdr))
54 + } else if (skb->protocol == htons(ETH_P_IPV6)) {
55 + if (skb->len < sizeof(struct ipv6hdr))
61 + r = nf_conntrack_in(dev_net(skb->dev), proto, NF_INET_PRE_ROUTING, skb);
65 + c = nf_ct_get(skb, &ctinfo);
69 + skb->mark = c->mark;
70 + nf_conntrack_put(skb->nfct);
77 +static int tcf_connmark_init(struct net *net, struct nlattr *nla,
78 + struct nlattr *est, struct tc_action *a,
81 + struct tcf_common *pc;
84 + pc = tcf_hash_check(0, a, bind);
86 + pc = tcf_hash_create(0, est, a, sizeof(*pc), bind);
90 + tcf_hash_insert(pc, &connmark_hash_info);
91 + ret = ACT_P_CREATED;
94 + tcf_hash_release(pc, bind, &connmark_hash_info);
102 +static inline int tcf_connmark_cleanup(struct tc_action *a, int bind)
105 + return tcf_hash_release(a->priv, bind, &connmark_hash_info);
109 +static inline int tcf_connmark_dump(struct sk_buff *skb, struct tc_action *a,
115 +static struct tc_action_ops act_connmark_ops = {
116 + .kind = "connmark",
117 + .hinfo = &connmark_hash_info,
118 + .type = TCA_ACT_CONNMARK,
119 + .owner = THIS_MODULE,
120 + .act = tcf_connmark,
121 + .dump = tcf_connmark_dump,
122 + .cleanup = tcf_connmark_cleanup,
123 + .init = tcf_connmark_init,
126 +MODULE_AUTHOR("Felix Fietkau <nbd@openwrt.org>");
127 +MODULE_DESCRIPTION("Connection tracking mark restoring");
128 +MODULE_LICENSE("GPL");
130 +static int __init connmark_init_module(void)
134 + ret = tcf_hashinfo_init(&connmark_hash_info, CONNMARK_TAB_MASK);
138 + return tcf_register_action(&act_connmark_ops);
141 +static void __exit connmark_cleanup_module(void)
143 + tcf_unregister_action(&act_connmark_ops);
146 +module_init(connmark_init_module);
147 +module_exit(connmark_cleanup_module);
148 --- a/net/sched/Kconfig
149 +++ b/net/sched/Kconfig
150 @@ -717,6 +717,19 @@ config NET_ACT_CSUM
151 To compile this code as a module, choose M here: the
152 module will be called act_csum.
154 +config NET_ACT_CONNMARK
155 + tristate "Connection Tracking Marking"
156 + depends on NET_CLS_ACT
157 + depends on NF_CONNTRACK
158 + depends on NF_CONNTRACK_MARK
160 + Say Y here to restore the connmark from a scheduler action
164 + To compile this code as a module, choose M here: the
165 + module will be called act_connmark.
168 bool "Incoming device classification"
169 depends on NET_CLS_U32 || NET_CLS_FW
170 --- a/net/sched/Makefile
171 +++ b/net/sched/Makefile
172 @@ -16,6 +16,7 @@ obj-$(CONFIG_NET_ACT_PEDIT) += act_pedit
173 obj-$(CONFIG_NET_ACT_SIMP) += act_simple.o
174 obj-$(CONFIG_NET_ACT_SKBEDIT) += act_skbedit.o
175 obj-$(CONFIG_NET_ACT_CSUM) += act_csum.o
176 +obj-$(CONFIG_NET_ACT_CONNMARK) += act_connmark.o
177 obj-$(CONFIG_NET_SCH_FIFO) += sch_fifo.o
178 obj-$(CONFIG_NET_SCH_CBQ) += sch_cbq.o
179 obj-$(CONFIG_NET_SCH_HTB) += sch_htb.o