port_fwd: Simplify get_bound_ports_*() to port_fwd_scan_*()
get_bound_ports_*() now only use their context and ns parameters to determine which forwarding maps they're operating on. Each function needs the map they're actually updating, as well as the map for the other direction, to avoid creating forwarding loops. The UDP function also requires the corresponding TCP map, to implement the behaviour where we forward UDP ports of the same number as bound TCP ports for tools like iperf3. Passing those maps directly as parameters simplifies the code without making the callers life harder, because those already know the relevant maps. IMO, invoking these functions in terms of where they're looking for updated forwarding also makes more logical sense than in terms of where they're looking for bound ports. Given that new way of looking at the functions, also rename them to port_fwd_scan_*(). Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
This commit is contained in:
parent
dcf5c0eb1e
commit
c09d0d0f60
3 changed files with 21 additions and 38 deletions
50
port_fwd.c
50
port_fwd.c
|
@ -68,46 +68,26 @@ static void procfs_scan_listen(int fd, unsigned int lstate,
|
|||
}
|
||||
|
||||
/**
|
||||
* get_bound_ports_tcp() - Get maps of TCP ports with bound sockets
|
||||
* @c: Execution context
|
||||
* @ns: If set, set bitmaps for ports to tap/ns -- to init otherwise
|
||||
* port_fwd_scan_tcp() - Scan /proc to update TCP forwarding map
|
||||
* @fwd: Forwarding information to update
|
||||
* @rev: Forwarding information for the reverse direction
|
||||
*/
|
||||
void get_bound_ports_tcp(struct ctx *c, int ns)
|
||||
void port_fwd_scan_tcp(struct port_fwd *fwd, const struct port_fwd *rev)
|
||||
{
|
||||
struct port_fwd *fwd, *rev;
|
||||
|
||||
if (ns) {
|
||||
fwd = &c->tcp.fwd_in;
|
||||
rev = &c->tcp.fwd_out;
|
||||
} else {
|
||||
fwd = &c->tcp.fwd_out;
|
||||
rev = &c->tcp.fwd_in;
|
||||
}
|
||||
|
||||
memset(fwd->map, 0, PORT_BITMAP_SIZE);
|
||||
procfs_scan_listen(fwd->scan4, TCP_LISTEN, fwd->map, rev->map);
|
||||
procfs_scan_listen(fwd->scan6, TCP_LISTEN, fwd->map, rev->map);
|
||||
}
|
||||
|
||||
/**
|
||||
* get_bound_ports_udp() - Get maps of UDP ports with bound sockets
|
||||
* @c: Execution context
|
||||
* @ns: If set, set bitmaps for ports to tap/ns -- to init otherwise
|
||||
* port_fwd_scan_tcp() - Scan /proc to update TCP forwarding map
|
||||
* @fwd: Forwarding information to update
|
||||
* @rev: Forwarding information for the reverse direction
|
||||
* @tcp: Corresponding TCP forwarding information
|
||||
*/
|
||||
void get_bound_ports_udp(struct ctx *c, int ns)
|
||||
void port_fwd_scan_udp(struct port_fwd *fwd, const struct port_fwd *rev,
|
||||
const struct port_fwd *tcp)
|
||||
{
|
||||
struct port_fwd *fwd, *rev, *tcp;
|
||||
|
||||
if (ns) {
|
||||
fwd = &c->udp.fwd_in.f;
|
||||
rev = &c->udp.fwd_out.f;
|
||||
tcp = &c->tcp.fwd_in;
|
||||
} else {
|
||||
fwd = &c->udp.fwd_out.f;
|
||||
rev = &c->udp.fwd_in.f;
|
||||
tcp = &c->tcp.fwd_out;
|
||||
}
|
||||
|
||||
memset(fwd->map, 0, PORT_BITMAP_SIZE);
|
||||
procfs_scan_listen(fwd->scan4, UDP_LISTEN, fwd->map, rev->map);
|
||||
procfs_scan_listen(fwd->scan6, UDP_LISTEN, fwd->map, rev->map);
|
||||
|
@ -137,21 +117,23 @@ void port_fwd_init(struct ctx *c)
|
|||
if (c->tcp.fwd_in.mode == FWD_AUTO) {
|
||||
c->tcp.fwd_in.scan4 = open_in_ns(c, "/proc/net/tcp", flags);
|
||||
c->tcp.fwd_in.scan6 = open_in_ns(c, "/proc/net/tcp6", flags);
|
||||
get_bound_ports_tcp(c, 1);
|
||||
port_fwd_scan_tcp(&c->tcp.fwd_in, &c->tcp.fwd_out);
|
||||
}
|
||||
if (c->udp.fwd_in.f.mode == FWD_AUTO) {
|
||||
c->udp.fwd_in.f.scan4 = open_in_ns(c, "/proc/net/udp", flags);
|
||||
c->udp.fwd_in.f.scan6 = open_in_ns(c, "/proc/net/udp6", flags);
|
||||
get_bound_ports_udp(c, 1);
|
||||
port_fwd_scan_udp(&c->udp.fwd_in.f, &c->udp.fwd_out.f,
|
||||
&c->tcp.fwd_in);
|
||||
}
|
||||
if (c->tcp.fwd_out.mode == FWD_AUTO) {
|
||||
c->tcp.fwd_out.scan4 = open("/proc/net/tcp", flags);
|
||||
c->tcp.fwd_out.scan6 = open("/proc/net/tcp6", flags);
|
||||
get_bound_ports_tcp(c, 0);
|
||||
port_fwd_scan_tcp(&c->tcp.fwd_out, &c->tcp.fwd_in);
|
||||
}
|
||||
if (c->udp.fwd_out.f.mode == FWD_AUTO) {
|
||||
c->udp.fwd_out.f.scan4 = open("/proc/net/udp", flags);
|
||||
c->udp.fwd_out.f.scan6 = open("/proc/net/udp6", flags);
|
||||
get_bound_ports_udp(c, 0);
|
||||
port_fwd_scan_udp(&c->udp.fwd_out.f, &c->udp.fwd_in.f,
|
||||
&c->tcp.fwd_out);
|
||||
}
|
||||
}
|
||||
|
|
|
@ -35,8 +35,9 @@ struct port_fwd {
|
|||
in_port_t delta[NUM_PORTS];
|
||||
};
|
||||
|
||||
void get_bound_ports_tcp(struct ctx *c, int ns);
|
||||
void get_bound_ports_udp(struct ctx *c, int ns);
|
||||
void port_fwd_scan_tcp(struct port_fwd *fwd, const struct port_fwd *rev);
|
||||
void port_fwd_scan_udp(struct port_fwd *fwd, const struct port_fwd *rev,
|
||||
const struct port_fwd *tcp);
|
||||
void port_fwd_init(struct ctx *c);
|
||||
|
||||
#endif /* PORT_FWD_H */
|
||||
|
|
4
tcp.c
4
tcp.c
|
@ -3287,13 +3287,13 @@ void tcp_timer(struct ctx *c, const struct timespec *ts)
|
|||
struct tcp_port_rebind_arg rebind_arg = { c, 0 };
|
||||
|
||||
if (c->tcp.fwd_out.mode == FWD_AUTO) {
|
||||
get_bound_ports_tcp(c, 0);
|
||||
port_fwd_scan_tcp(&c->tcp.fwd_out, &c->tcp.fwd_in);
|
||||
rebind_arg.bind_in_ns = 1;
|
||||
NS_CALL(tcp_port_rebind, &rebind_arg);
|
||||
}
|
||||
|
||||
if (c->tcp.fwd_in.mode == FWD_AUTO) {
|
||||
get_bound_ports_tcp(c, 1);
|
||||
port_fwd_scan_tcp(&c->tcp.fwd_in, &c->tcp.fwd_out);
|
||||
rebind_arg.bind_in_ns = 0;
|
||||
tcp_port_rebind(&rebind_arg);
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue