2 * Bridge multicast support.
4 * Copyright (c) 2010 Herbert Xu <herbert@gondor.apana.org.au>
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the Free
8 * Software Foundation; either version 2 of the License, or (at your option)
13 #include <linux/err.h>
14 #include <linux/export.h>
15 #include <linux/if_ether.h>
16 #include <linux/igmp.h>
18 #include <linux/jhash.h>
19 #include <linux/kernel.h>
20 #include <linux/log2.h>
21 #include <linux/netdevice.h>
22 #include <linux/netfilter_bridge.h>
23 #include <linux/random.h>
24 #include <linux/rculist.h>
25 #include <linux/skbuff.h>
26 #include <linux/slab.h>
27 #include <linux/timer.h>
28 #include <linux/inetdevice.h>
29 #include <linux/mroute.h>
31 #include <net/switchdev.h>
32 #if IS_ENABLED(CONFIG_IPV6)
33 #include <linux/icmpv6.h>
36 #include <net/ip6_checksum.h>
37 #include <net/addrconf.h>
40 #include "br_private.h"
42 static const struct rhashtable_params br_mdb_rht_params = {
43 .head_offset = offsetof(struct net_bridge_mdb_entry, rhnode),
44 .key_offset = offsetof(struct net_bridge_mdb_entry, addr),
45 .key_len = sizeof(struct br_ip),
46 .automatic_shrinking = true,
50 static void br_multicast_start_querier(struct net_bridge *br,
51 struct bridge_mcast_own_query *query);
52 static void br_multicast_add_router(struct net_bridge *br,
53 struct net_bridge_port *port);
54 static void br_ip4_multicast_leave_group(struct net_bridge *br,
55 struct net_bridge_port *port,
58 const unsigned char *src);
60 static void __del_port_router(struct net_bridge_port *p);
61 #if IS_ENABLED(CONFIG_IPV6)
62 static void br_ip6_multicast_leave_group(struct net_bridge *br,
63 struct net_bridge_port *port,
64 const struct in6_addr *group,
65 __u16 vid, const unsigned char *src);
68 static inline int br_ip_equal(const struct br_ip *a, const struct br_ip *b)
70 if (a->proto != b->proto)
76 return a->u.ip4 == b->u.ip4;
77 #if IS_ENABLED(CONFIG_IPV6)
78 case htons(ETH_P_IPV6):
79 return ipv6_addr_equal(&a->u.ip6, &b->u.ip6);
85 static struct net_bridge_mdb_entry *br_mdb_ip_get_rcu(struct net_bridge *br,
88 return rhashtable_lookup(&br->mdb_hash_tbl, dst, br_mdb_rht_params);
91 struct net_bridge_mdb_entry *br_mdb_ip_get(struct net_bridge *br,
94 struct net_bridge_mdb_entry *ent;
96 lockdep_assert_held_once(&br->multicast_lock);
99 ent = rhashtable_lookup(&br->mdb_hash_tbl, dst, br_mdb_rht_params);
105 static struct net_bridge_mdb_entry *br_mdb_ip4_get(struct net_bridge *br,
106 __be32 dst, __u16 vid)
110 memset(&br_dst, 0, sizeof(br_dst));
112 br_dst.proto = htons(ETH_P_IP);
115 return br_mdb_ip_get(br, &br_dst);
118 #if IS_ENABLED(CONFIG_IPV6)
119 static struct net_bridge_mdb_entry *br_mdb_ip6_get(struct net_bridge *br,
120 const struct in6_addr *dst,
125 memset(&br_dst, 0, sizeof(br_dst));
127 br_dst.proto = htons(ETH_P_IPV6);
130 return br_mdb_ip_get(br, &br_dst);
134 struct net_bridge_mdb_entry *br_mdb_get(struct net_bridge *br,
135 struct sk_buff *skb, u16 vid)
139 if (!br_opt_get(br, BROPT_MULTICAST_ENABLED))
142 if (BR_INPUT_SKB_CB(skb)->igmp)
145 memset(&ip, 0, sizeof(ip));
146 ip.proto = skb->protocol;
149 switch (skb->protocol) {
150 case htons(ETH_P_IP):
151 ip.u.ip4 = ip_hdr(skb)->daddr;
153 #if IS_ENABLED(CONFIG_IPV6)
154 case htons(ETH_P_IPV6):
155 ip.u.ip6 = ipv6_hdr(skb)->daddr;
162 return br_mdb_ip_get_rcu(br, &ip);
165 static void br_multicast_group_expired(struct timer_list *t)
167 struct net_bridge_mdb_entry *mp = from_timer(mp, t, timer);
168 struct net_bridge *br = mp->br;
170 spin_lock(&br->multicast_lock);
171 if (!netif_running(br->dev) || timer_pending(&mp->timer))
174 mp->host_joined = false;
175 br_mdb_notify(br->dev, NULL, &mp->addr, RTM_DELMDB, 0);
180 rhashtable_remove_fast(&br->mdb_hash_tbl, &mp->rhnode,
182 hlist_del_rcu(&mp->mdb_node);
187 spin_unlock(&br->multicast_lock);
190 static void br_multicast_del_pg(struct net_bridge *br,
191 struct net_bridge_port_group *pg)
193 struct net_bridge_mdb_entry *mp;
194 struct net_bridge_port_group *p;
195 struct net_bridge_port_group __rcu **pp;
197 mp = br_mdb_ip_get(br, &pg->addr);
201 for (pp = &mp->ports;
202 (p = mlock_dereference(*pp, br)) != NULL;
207 rcu_assign_pointer(*pp, p->next);
208 hlist_del_init(&p->mglist);
209 del_timer(&p->timer);
210 br_mdb_notify(br->dev, p->port, &pg->addr, RTM_DELMDB,
214 if (!mp->ports && !mp->host_joined &&
215 netif_running(br->dev))
216 mod_timer(&mp->timer, jiffies);
224 static void br_multicast_port_group_expired(struct timer_list *t)
226 struct net_bridge_port_group *pg = from_timer(pg, t, timer);
227 struct net_bridge *br = pg->port->br;
229 spin_lock(&br->multicast_lock);
230 if (!netif_running(br->dev) || timer_pending(&pg->timer) ||
231 hlist_unhashed(&pg->mglist) || pg->flags & MDB_PG_FLAGS_PERMANENT)
234 br_multicast_del_pg(br, pg);
237 spin_unlock(&br->multicast_lock);
240 static struct sk_buff *br_ip4_multicast_alloc_query(struct net_bridge *br,
244 struct igmpv3_query *ihv3;
245 size_t igmp_hdr_size;
251 igmp_hdr_size = sizeof(*ih);
252 if (br->multicast_igmp_version == 3)
253 igmp_hdr_size = sizeof(*ihv3);
254 skb = netdev_alloc_skb_ip_align(br->dev, sizeof(*eth) + sizeof(*iph) +
259 skb->protocol = htons(ETH_P_IP);
261 skb_reset_mac_header(skb);
264 ether_addr_copy(eth->h_source, br->dev->dev_addr);
267 eth->h_dest[2] = 0x5e;
271 eth->h_proto = htons(ETH_P_IP);
272 skb_put(skb, sizeof(*eth));
274 skb_set_network_header(skb, skb->len);
280 iph->tot_len = htons(sizeof(*iph) + igmp_hdr_size + 4);
282 iph->frag_off = htons(IP_DF);
284 iph->protocol = IPPROTO_IGMP;
285 iph->saddr = br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR) ?
286 inet_select_addr(br->dev, 0, RT_SCOPE_LINK) : 0;
287 iph->daddr = htonl(INADDR_ALLHOSTS_GROUP);
288 ((u8 *)&iph[1])[0] = IPOPT_RA;
289 ((u8 *)&iph[1])[1] = 4;
290 ((u8 *)&iph[1])[2] = 0;
291 ((u8 *)&iph[1])[3] = 0;
295 skb_set_transport_header(skb, skb->len);
296 *igmp_type = IGMP_HOST_MEMBERSHIP_QUERY;
298 switch (br->multicast_igmp_version) {
301 ih->type = IGMP_HOST_MEMBERSHIP_QUERY;
302 ih->code = (group ? br->multicast_last_member_interval :
303 br->multicast_query_response_interval) /
304 (HZ / IGMP_TIMER_SCALE);
307 ih->csum = ip_compute_csum((void *)ih, sizeof(*ih));
310 ihv3 = igmpv3_query_hdr(skb);
311 ihv3->type = IGMP_HOST_MEMBERSHIP_QUERY;
312 ihv3->code = (group ? br->multicast_last_member_interval :
313 br->multicast_query_response_interval) /
314 (HZ / IGMP_TIMER_SCALE);
316 ihv3->qqic = br->multicast_query_interval / HZ;
322 ihv3->csum = ip_compute_csum((void *)ihv3, sizeof(*ihv3));
326 skb_put(skb, igmp_hdr_size);
327 __skb_pull(skb, sizeof(*eth));
333 #if IS_ENABLED(CONFIG_IPV6)
334 static struct sk_buff *br_ip6_multicast_alloc_query(struct net_bridge *br,
335 const struct in6_addr *grp,
338 struct mld2_query *mld2q;
339 unsigned long interval;
340 struct ipv6hdr *ip6h;
341 struct mld_msg *mldq;
347 mld_hdr_size = sizeof(*mldq);
348 if (br->multicast_mld_version == 2)
349 mld_hdr_size = sizeof(*mld2q);
350 skb = netdev_alloc_skb_ip_align(br->dev, sizeof(*eth) + sizeof(*ip6h) +
355 skb->protocol = htons(ETH_P_IPV6);
357 /* Ethernet header */
358 skb_reset_mac_header(skb);
361 ether_addr_copy(eth->h_source, br->dev->dev_addr);
362 eth->h_proto = htons(ETH_P_IPV6);
363 skb_put(skb, sizeof(*eth));
365 /* IPv6 header + HbH option */
366 skb_set_network_header(skb, skb->len);
367 ip6h = ipv6_hdr(skb);
369 *(__force __be32 *)ip6h = htonl(0x60000000);
370 ip6h->payload_len = htons(8 + mld_hdr_size);
371 ip6h->nexthdr = IPPROTO_HOPOPTS;
373 ipv6_addr_set(&ip6h->daddr, htonl(0xff020000), 0, 0, htonl(1));
374 if (ipv6_dev_get_saddr(dev_net(br->dev), br->dev, &ip6h->daddr, 0,
377 br_opt_toggle(br, BROPT_HAS_IPV6_ADDR, false);
381 br_opt_toggle(br, BROPT_HAS_IPV6_ADDR, true);
382 ipv6_eth_mc_map(&ip6h->daddr, eth->h_dest);
384 hopopt = (u8 *)(ip6h + 1);
385 hopopt[0] = IPPROTO_ICMPV6; /* next hdr */
386 hopopt[1] = 0; /* length of HbH */
387 hopopt[2] = IPV6_TLV_ROUTERALERT; /* Router Alert */
388 hopopt[3] = 2; /* Length of RA Option */
389 hopopt[4] = 0; /* Type = 0x0000 (MLD) */
391 hopopt[6] = IPV6_TLV_PAD1; /* Pad1 */
392 hopopt[7] = IPV6_TLV_PAD1; /* Pad1 */
394 skb_put(skb, sizeof(*ip6h) + 8);
397 skb_set_transport_header(skb, skb->len);
398 interval = ipv6_addr_any(grp) ?
399 br->multicast_query_response_interval :
400 br->multicast_last_member_interval;
401 *igmp_type = ICMPV6_MGM_QUERY;
402 switch (br->multicast_mld_version) {
404 mldq = (struct mld_msg *)icmp6_hdr(skb);
405 mldq->mld_type = ICMPV6_MGM_QUERY;
408 mldq->mld_maxdelay = htons((u16)jiffies_to_msecs(interval));
409 mldq->mld_reserved = 0;
410 mldq->mld_mca = *grp;
411 mldq->mld_cksum = csum_ipv6_magic(&ip6h->saddr, &ip6h->daddr,
412 sizeof(*mldq), IPPROTO_ICMPV6,
418 mld2q = (struct mld2_query *)icmp6_hdr(skb);
419 mld2q->mld2q_mrc = htons((u16)jiffies_to_msecs(interval));
420 mld2q->mld2q_type = ICMPV6_MGM_QUERY;
421 mld2q->mld2q_code = 0;
422 mld2q->mld2q_cksum = 0;
423 mld2q->mld2q_resv1 = 0;
424 mld2q->mld2q_resv2 = 0;
425 mld2q->mld2q_suppress = 0;
426 mld2q->mld2q_qrv = 2;
427 mld2q->mld2q_nsrcs = 0;
428 mld2q->mld2q_qqic = br->multicast_query_interval / HZ;
429 mld2q->mld2q_mca = *grp;
430 mld2q->mld2q_cksum = csum_ipv6_magic(&ip6h->saddr, &ip6h->daddr,
438 skb_put(skb, mld_hdr_size);
440 __skb_pull(skb, sizeof(*eth));
447 static struct sk_buff *br_multicast_alloc_query(struct net_bridge *br,
451 switch (addr->proto) {
452 case htons(ETH_P_IP):
453 return br_ip4_multicast_alloc_query(br, addr->u.ip4, igmp_type);
454 #if IS_ENABLED(CONFIG_IPV6)
455 case htons(ETH_P_IPV6):
456 return br_ip6_multicast_alloc_query(br, &addr->u.ip6,
463 struct net_bridge_mdb_entry *br_multicast_new_group(struct net_bridge *br,
466 struct net_bridge_mdb_entry *mp;
469 mp = br_mdb_ip_get(br, group);
473 if (atomic_read(&br->mdb_hash_tbl.nelems) >= br->hash_max) {
474 br_opt_toggle(br, BROPT_MULTICAST_ENABLED, false);
475 return ERR_PTR(-E2BIG);
478 mp = kzalloc(sizeof(*mp), GFP_ATOMIC);
480 return ERR_PTR(-ENOMEM);
484 timer_setup(&mp->timer, br_multicast_group_expired, 0);
485 err = rhashtable_lookup_insert_fast(&br->mdb_hash_tbl, &mp->rhnode,
491 hlist_add_head_rcu(&mp->mdb_node, &br->mdb_list);
497 struct net_bridge_port_group *br_multicast_new_port_group(
498 struct net_bridge_port *port,
500 struct net_bridge_port_group __rcu *next,
502 const unsigned char *src)
504 struct net_bridge_port_group *p;
506 p = kzalloc(sizeof(*p), GFP_ATOMIC);
513 rcu_assign_pointer(p->next, next);
514 hlist_add_head(&p->mglist, &port->mglist);
515 timer_setup(&p->timer, br_multicast_port_group_expired, 0);
518 memcpy(p->eth_addr, src, ETH_ALEN);
520 memset(p->eth_addr, 0xff, ETH_ALEN);
525 static bool br_port_group_equal(struct net_bridge_port_group *p,
526 struct net_bridge_port *port,
527 const unsigned char *src)
532 if (!(port->flags & BR_MULTICAST_TO_UNICAST))
535 return ether_addr_equal(src, p->eth_addr);
538 static int br_multicast_add_group(struct net_bridge *br,
539 struct net_bridge_port *port,
541 const unsigned char *src)
543 struct net_bridge_port_group __rcu **pp;
544 struct net_bridge_port_group *p;
545 struct net_bridge_mdb_entry *mp;
546 unsigned long now = jiffies;
549 spin_lock(&br->multicast_lock);
550 if (!netif_running(br->dev) ||
551 (port && port->state == BR_STATE_DISABLED))
554 mp = br_multicast_new_group(br, group);
560 if (!mp->host_joined) {
561 mp->host_joined = true;
562 br_mdb_notify(br->dev, NULL, &mp->addr, RTM_NEWMDB, 0);
564 mod_timer(&mp->timer, now + br->multicast_membership_interval);
568 for (pp = &mp->ports;
569 (p = mlock_dereference(*pp, br)) != NULL;
571 if (br_port_group_equal(p, port, src))
573 if ((unsigned long)p->port < (unsigned long)port)
577 p = br_multicast_new_port_group(port, group, *pp, 0, src);
580 rcu_assign_pointer(*pp, p);
581 br_mdb_notify(br->dev, port, group, RTM_NEWMDB, 0);
584 mod_timer(&p->timer, now + br->multicast_membership_interval);
589 spin_unlock(&br->multicast_lock);
593 static int br_ip4_multicast_add_group(struct net_bridge *br,
594 struct net_bridge_port *port,
597 const unsigned char *src)
599 struct br_ip br_group;
601 if (ipv4_is_local_multicast(group))
604 br_group.u.ip4 = group;
605 br_group.proto = htons(ETH_P_IP);
608 return br_multicast_add_group(br, port, &br_group, src);
611 #if IS_ENABLED(CONFIG_IPV6)
612 static int br_ip6_multicast_add_group(struct net_bridge *br,
613 struct net_bridge_port *port,
614 const struct in6_addr *group,
616 const unsigned char *src)
618 struct br_ip br_group;
620 if (ipv6_addr_is_ll_all_nodes(group))
623 memset(&br_group, 0, sizeof(br_group));
624 br_group.u.ip6 = *group;
625 br_group.proto = htons(ETH_P_IPV6);
628 return br_multicast_add_group(br, port, &br_group, src);
632 static void br_multicast_router_expired(struct timer_list *t)
634 struct net_bridge_port *port =
635 from_timer(port, t, multicast_router_timer);
636 struct net_bridge *br = port->br;
638 spin_lock(&br->multicast_lock);
639 if (port->multicast_router == MDB_RTR_TYPE_DISABLED ||
640 port->multicast_router == MDB_RTR_TYPE_PERM ||
641 timer_pending(&port->multicast_router_timer))
644 __del_port_router(port);
646 spin_unlock(&br->multicast_lock);
649 static void br_mc_router_state_change(struct net_bridge *p,
652 struct switchdev_attr attr = {
654 .id = SWITCHDEV_ATTR_ID_BRIDGE_MROUTER,
655 .flags = SWITCHDEV_F_DEFER,
656 .u.mrouter = is_mc_router,
659 switchdev_port_attr_set(p->dev, &attr);
662 static void br_multicast_local_router_expired(struct timer_list *t)
664 struct net_bridge *br = from_timer(br, t, multicast_router_timer);
666 spin_lock(&br->multicast_lock);
667 if (br->multicast_router == MDB_RTR_TYPE_DISABLED ||
668 br->multicast_router == MDB_RTR_TYPE_PERM ||
669 timer_pending(&br->multicast_router_timer))
672 br_mc_router_state_change(br, false);
674 spin_unlock(&br->multicast_lock);
677 static void br_multicast_querier_expired(struct net_bridge *br,
678 struct bridge_mcast_own_query *query)
680 spin_lock(&br->multicast_lock);
681 if (!netif_running(br->dev) || !br_opt_get(br, BROPT_MULTICAST_ENABLED))
684 br_multicast_start_querier(br, query);
687 spin_unlock(&br->multicast_lock);
690 static void br_ip4_multicast_querier_expired(struct timer_list *t)
692 struct net_bridge *br = from_timer(br, t, ip4_other_query.timer);
694 br_multicast_querier_expired(br, &br->ip4_own_query);
697 #if IS_ENABLED(CONFIG_IPV6)
698 static void br_ip6_multicast_querier_expired(struct timer_list *t)
700 struct net_bridge *br = from_timer(br, t, ip6_other_query.timer);
702 br_multicast_querier_expired(br, &br->ip6_own_query);
706 static void br_multicast_select_own_querier(struct net_bridge *br,
710 if (ip->proto == htons(ETH_P_IP))
711 br->ip4_querier.addr.u.ip4 = ip_hdr(skb)->saddr;
712 #if IS_ENABLED(CONFIG_IPV6)
714 br->ip6_querier.addr.u.ip6 = ipv6_hdr(skb)->saddr;
718 static void __br_multicast_send_query(struct net_bridge *br,
719 struct net_bridge_port *port,
725 skb = br_multicast_alloc_query(br, ip, &igmp_type);
730 skb->dev = port->dev;
731 br_multicast_count(br, port, skb, igmp_type,
733 NF_HOOK(NFPROTO_BRIDGE, NF_BR_LOCAL_OUT,
734 dev_net(port->dev), NULL, skb, NULL, skb->dev,
735 br_dev_queue_push_xmit);
737 br_multicast_select_own_querier(br, ip, skb);
738 br_multicast_count(br, port, skb, igmp_type,
744 static void br_multicast_send_query(struct net_bridge *br,
745 struct net_bridge_port *port,
746 struct bridge_mcast_own_query *own_query)
748 struct bridge_mcast_other_query *other_query = NULL;
749 struct br_ip br_group;
752 if (!netif_running(br->dev) ||
753 !br_opt_get(br, BROPT_MULTICAST_ENABLED) ||
754 !br_opt_get(br, BROPT_MULTICAST_QUERIER))
757 memset(&br_group.u, 0, sizeof(br_group.u));
759 if (port ? (own_query == &port->ip4_own_query) :
760 (own_query == &br->ip4_own_query)) {
761 other_query = &br->ip4_other_query;
762 br_group.proto = htons(ETH_P_IP);
763 #if IS_ENABLED(CONFIG_IPV6)
765 other_query = &br->ip6_other_query;
766 br_group.proto = htons(ETH_P_IPV6);
770 if (!other_query || timer_pending(&other_query->timer))
773 __br_multicast_send_query(br, port, &br_group);
776 time += own_query->startup_sent < br->multicast_startup_query_count ?
777 br->multicast_startup_query_interval :
778 br->multicast_query_interval;
779 mod_timer(&own_query->timer, time);
783 br_multicast_port_query_expired(struct net_bridge_port *port,
784 struct bridge_mcast_own_query *query)
786 struct net_bridge *br = port->br;
788 spin_lock(&br->multicast_lock);
789 if (port->state == BR_STATE_DISABLED ||
790 port->state == BR_STATE_BLOCKING)
793 if (query->startup_sent < br->multicast_startup_query_count)
794 query->startup_sent++;
796 br_multicast_send_query(port->br, port, query);
799 spin_unlock(&br->multicast_lock);
802 static void br_ip4_multicast_port_query_expired(struct timer_list *t)
804 struct net_bridge_port *port = from_timer(port, t, ip4_own_query.timer);
806 br_multicast_port_query_expired(port, &port->ip4_own_query);
809 #if IS_ENABLED(CONFIG_IPV6)
810 static void br_ip6_multicast_port_query_expired(struct timer_list *t)
812 struct net_bridge_port *port = from_timer(port, t, ip6_own_query.timer);
814 br_multicast_port_query_expired(port, &port->ip6_own_query);
818 static void br_mc_disabled_update(struct net_device *dev, bool value)
820 struct switchdev_attr attr = {
822 .id = SWITCHDEV_ATTR_ID_BRIDGE_MC_DISABLED,
823 .flags = SWITCHDEV_F_DEFER,
824 .u.mc_disabled = !value,
827 switchdev_port_attr_set(dev, &attr);
830 int br_multicast_add_port(struct net_bridge_port *port)
832 port->multicast_router = MDB_RTR_TYPE_TEMP_QUERY;
834 timer_setup(&port->multicast_router_timer,
835 br_multicast_router_expired, 0);
836 timer_setup(&port->ip4_own_query.timer,
837 br_ip4_multicast_port_query_expired, 0);
838 #if IS_ENABLED(CONFIG_IPV6)
839 timer_setup(&port->ip6_own_query.timer,
840 br_ip6_multicast_port_query_expired, 0);
842 br_mc_disabled_update(port->dev,
843 br_opt_get(port->br, BROPT_MULTICAST_ENABLED));
845 port->mcast_stats = netdev_alloc_pcpu_stats(struct bridge_mcast_stats);
846 if (!port->mcast_stats)
852 void br_multicast_del_port(struct net_bridge_port *port)
854 struct net_bridge *br = port->br;
855 struct net_bridge_port_group *pg;
856 struct hlist_node *n;
858 /* Take care of the remaining groups, only perm ones should be left */
859 spin_lock_bh(&br->multicast_lock);
860 hlist_for_each_entry_safe(pg, n, &port->mglist, mglist)
861 br_multicast_del_pg(br, pg);
862 spin_unlock_bh(&br->multicast_lock);
863 del_timer_sync(&port->multicast_router_timer);
864 free_percpu(port->mcast_stats);
867 static void br_multicast_enable(struct bridge_mcast_own_query *query)
869 query->startup_sent = 0;
871 if (try_to_del_timer_sync(&query->timer) >= 0 ||
872 del_timer(&query->timer))
873 mod_timer(&query->timer, jiffies);
876 static void __br_multicast_enable_port(struct net_bridge_port *port)
878 struct net_bridge *br = port->br;
880 if (!br_opt_get(br, BROPT_MULTICAST_ENABLED) || !netif_running(br->dev))
883 br_multicast_enable(&port->ip4_own_query);
884 #if IS_ENABLED(CONFIG_IPV6)
885 br_multicast_enable(&port->ip6_own_query);
887 if (port->multicast_router == MDB_RTR_TYPE_PERM &&
888 hlist_unhashed(&port->rlist))
889 br_multicast_add_router(br, port);
892 void br_multicast_enable_port(struct net_bridge_port *port)
894 struct net_bridge *br = port->br;
896 spin_lock(&br->multicast_lock);
897 __br_multicast_enable_port(port);
898 spin_unlock(&br->multicast_lock);
901 void br_multicast_disable_port(struct net_bridge_port *port)
903 struct net_bridge *br = port->br;
904 struct net_bridge_port_group *pg;
905 struct hlist_node *n;
907 spin_lock(&br->multicast_lock);
908 hlist_for_each_entry_safe(pg, n, &port->mglist, mglist)
909 if (!(pg->flags & MDB_PG_FLAGS_PERMANENT))
910 br_multicast_del_pg(br, pg);
912 __del_port_router(port);
914 del_timer(&port->multicast_router_timer);
915 del_timer(&port->ip4_own_query.timer);
916 #if IS_ENABLED(CONFIG_IPV6)
917 del_timer(&port->ip6_own_query.timer);
919 spin_unlock(&br->multicast_lock);
922 static int br_ip4_multicast_igmp3_report(struct net_bridge *br,
923 struct net_bridge_port *port,
927 const unsigned char *src;
928 struct igmpv3_report *ih;
929 struct igmpv3_grec *grec;
937 ih = igmpv3_report_hdr(skb);
938 num = ntohs(ih->ngrec);
939 len = skb_transport_offset(skb) + sizeof(*ih);
941 for (i = 0; i < num; i++) {
942 len += sizeof(*grec);
943 if (!ip_mc_may_pull(skb, len))
946 grec = (void *)(skb->data + len - sizeof(*grec));
947 group = grec->grec_mca;
948 type = grec->grec_type;
950 len += ntohs(grec->grec_nsrcs) * 4;
951 if (!ip_mc_may_pull(skb, len))
954 /* We treat this as an IGMPv2 report for now. */
956 case IGMPV3_MODE_IS_INCLUDE:
957 case IGMPV3_MODE_IS_EXCLUDE:
958 case IGMPV3_CHANGE_TO_INCLUDE:
959 case IGMPV3_CHANGE_TO_EXCLUDE:
960 case IGMPV3_ALLOW_NEW_SOURCES:
961 case IGMPV3_BLOCK_OLD_SOURCES:
968 src = eth_hdr(skb)->h_source;
969 if ((type == IGMPV3_CHANGE_TO_INCLUDE ||
970 type == IGMPV3_MODE_IS_INCLUDE) &&
971 ntohs(grec->grec_nsrcs) == 0) {
972 br_ip4_multicast_leave_group(br, port, group, vid, src);
974 err = br_ip4_multicast_add_group(br, port, group, vid,
984 #if IS_ENABLED(CONFIG_IPV6)
985 static int br_ip6_multicast_mld2_report(struct net_bridge *br,
986 struct net_bridge_port *port,
990 unsigned int nsrcs_offset;
991 const unsigned char *src;
992 struct icmp6hdr *icmp6h;
993 struct mld2_grec *grec;
994 unsigned int grec_len;
1000 if (!ipv6_mc_may_pull(skb, sizeof(*icmp6h)))
1003 icmp6h = icmp6_hdr(skb);
1004 num = ntohs(icmp6h->icmp6_dataun.un_data16[1]);
1005 len = skb_transport_offset(skb) + sizeof(*icmp6h);
1007 for (i = 0; i < num; i++) {
1008 __be16 *nsrcs, _nsrcs;
1010 nsrcs_offset = len + offsetof(struct mld2_grec, grec_nsrcs);
1012 if (skb_transport_offset(skb) + ipv6_transport_len(skb) <
1013 nsrcs_offset + sizeof(_nsrcs))
1016 nsrcs = skb_header_pointer(skb, nsrcs_offset,
1017 sizeof(_nsrcs), &_nsrcs);
1021 grec_len = struct_size(grec, grec_src, ntohs(*nsrcs));
1023 if (!ipv6_mc_may_pull(skb, len + grec_len))
1026 grec = (struct mld2_grec *)(skb->data + len);
1029 /* We treat these as MLDv1 reports for now. */
1030 switch (grec->grec_type) {
1031 case MLD2_MODE_IS_INCLUDE:
1032 case MLD2_MODE_IS_EXCLUDE:
1033 case MLD2_CHANGE_TO_INCLUDE:
1034 case MLD2_CHANGE_TO_EXCLUDE:
1035 case MLD2_ALLOW_NEW_SOURCES:
1036 case MLD2_BLOCK_OLD_SOURCES:
1043 src = eth_hdr(skb)->h_source;
1044 if ((grec->grec_type == MLD2_CHANGE_TO_INCLUDE ||
1045 grec->grec_type == MLD2_MODE_IS_INCLUDE) &&
1046 ntohs(*nsrcs) == 0) {
1047 br_ip6_multicast_leave_group(br, port, &grec->grec_mca,
1050 err = br_ip6_multicast_add_group(br, port,
1051 &grec->grec_mca, vid,
1062 static bool br_ip4_multicast_select_querier(struct net_bridge *br,
1063 struct net_bridge_port *port,
1066 if (!timer_pending(&br->ip4_own_query.timer) &&
1067 !timer_pending(&br->ip4_other_query.timer))
1070 if (!br->ip4_querier.addr.u.ip4)
1073 if (ntohl(saddr) <= ntohl(br->ip4_querier.addr.u.ip4))
1079 br->ip4_querier.addr.u.ip4 = saddr;
1081 /* update protected by general multicast_lock by caller */
1082 rcu_assign_pointer(br->ip4_querier.port, port);
1087 #if IS_ENABLED(CONFIG_IPV6)
1088 static bool br_ip6_multicast_select_querier(struct net_bridge *br,
1089 struct net_bridge_port *port,
1090 struct in6_addr *saddr)
1092 if (!timer_pending(&br->ip6_own_query.timer) &&
1093 !timer_pending(&br->ip6_other_query.timer))
1096 if (ipv6_addr_cmp(saddr, &br->ip6_querier.addr.u.ip6) <= 0)
1102 br->ip6_querier.addr.u.ip6 = *saddr;
1104 /* update protected by general multicast_lock by caller */
1105 rcu_assign_pointer(br->ip6_querier.port, port);
1111 static bool br_multicast_select_querier(struct net_bridge *br,
1112 struct net_bridge_port *port,
1113 struct br_ip *saddr)
1115 switch (saddr->proto) {
1116 case htons(ETH_P_IP):
1117 return br_ip4_multicast_select_querier(br, port, saddr->u.ip4);
1118 #if IS_ENABLED(CONFIG_IPV6)
1119 case htons(ETH_P_IPV6):
1120 return br_ip6_multicast_select_querier(br, port, &saddr->u.ip6);
1128 br_multicast_update_query_timer(struct net_bridge *br,
1129 struct bridge_mcast_other_query *query,
1130 unsigned long max_delay)
1132 if (!timer_pending(&query->timer))
1133 query->delay_time = jiffies + max_delay;
1135 mod_timer(&query->timer, jiffies + br->multicast_querier_interval);
1138 static void br_port_mc_router_state_change(struct net_bridge_port *p,
1141 struct switchdev_attr attr = {
1143 .id = SWITCHDEV_ATTR_ID_PORT_MROUTER,
1144 .flags = SWITCHDEV_F_DEFER,
1145 .u.mrouter = is_mc_router,
1148 switchdev_port_attr_set(p->dev, &attr);
1152 * Add port to router_list
1153 * list is maintained ordered by pointer value
1154 * and locked by br->multicast_lock and RCU
1156 static void br_multicast_add_router(struct net_bridge *br,
1157 struct net_bridge_port *port)
1159 struct net_bridge_port *p;
1160 struct hlist_node *slot = NULL;
1162 if (!hlist_unhashed(&port->rlist))
1165 hlist_for_each_entry(p, &br->router_list, rlist) {
1166 if ((unsigned long) port >= (unsigned long) p)
1172 hlist_add_behind_rcu(&port->rlist, slot);
1174 hlist_add_head_rcu(&port->rlist, &br->router_list);
1175 br_rtr_notify(br->dev, port, RTM_NEWMDB);
1176 br_port_mc_router_state_change(port, true);
1179 static void br_multicast_mark_router(struct net_bridge *br,
1180 struct net_bridge_port *port)
1182 unsigned long now = jiffies;
1185 if (br->multicast_router == MDB_RTR_TYPE_TEMP_QUERY) {
1186 if (!timer_pending(&br->multicast_router_timer))
1187 br_mc_router_state_change(br, true);
1188 mod_timer(&br->multicast_router_timer,
1189 now + br->multicast_querier_interval);
1194 if (port->multicast_router == MDB_RTR_TYPE_DISABLED ||
1195 port->multicast_router == MDB_RTR_TYPE_PERM)
1198 br_multicast_add_router(br, port);
1200 mod_timer(&port->multicast_router_timer,
1201 now + br->multicast_querier_interval);
1204 static void br_multicast_query_received(struct net_bridge *br,
1205 struct net_bridge_port *port,
1206 struct bridge_mcast_other_query *query,
1207 struct br_ip *saddr,
1208 unsigned long max_delay)
1210 if (!br_multicast_select_querier(br, port, saddr))
1213 br_multicast_update_query_timer(br, query, max_delay);
1214 br_multicast_mark_router(br, port);
1217 static void br_ip4_multicast_query(struct net_bridge *br,
1218 struct net_bridge_port *port,
1219 struct sk_buff *skb,
1222 unsigned int transport_len = ip_transport_len(skb);
1223 const struct iphdr *iph = ip_hdr(skb);
1224 struct igmphdr *ih = igmp_hdr(skb);
1225 struct net_bridge_mdb_entry *mp;
1226 struct igmpv3_query *ih3;
1227 struct net_bridge_port_group *p;
1228 struct net_bridge_port_group __rcu **pp;
1230 unsigned long max_delay;
1231 unsigned long now = jiffies;
1234 spin_lock(&br->multicast_lock);
1235 if (!netif_running(br->dev) ||
1236 (port && port->state == BR_STATE_DISABLED))
1241 if (transport_len == sizeof(*ih)) {
1242 max_delay = ih->code * (HZ / IGMP_TIMER_SCALE);
1245 max_delay = 10 * HZ;
1248 } else if (transport_len >= sizeof(*ih3)) {
1249 ih3 = igmpv3_query_hdr(skb);
1253 max_delay = ih3->code ?
1254 IGMPV3_MRC(ih3->code) * (HZ / IGMP_TIMER_SCALE) : 1;
1260 saddr.proto = htons(ETH_P_IP);
1261 saddr.u.ip4 = iph->saddr;
1263 br_multicast_query_received(br, port, &br->ip4_other_query,
1268 mp = br_mdb_ip4_get(br, group, vid);
1272 max_delay *= br->multicast_last_member_count;
1274 if (mp->host_joined &&
1275 (timer_pending(&mp->timer) ?
1276 time_after(mp->timer.expires, now + max_delay) :
1277 try_to_del_timer_sync(&mp->timer) >= 0))
1278 mod_timer(&mp->timer, now + max_delay);
1280 for (pp = &mp->ports;
1281 (p = mlock_dereference(*pp, br)) != NULL;
1283 if (timer_pending(&p->timer) ?
1284 time_after(p->timer.expires, now + max_delay) :
1285 try_to_del_timer_sync(&p->timer) >= 0)
1286 mod_timer(&p->timer, now + max_delay);
1290 spin_unlock(&br->multicast_lock);
1293 #if IS_ENABLED(CONFIG_IPV6)
1294 static int br_ip6_multicast_query(struct net_bridge *br,
1295 struct net_bridge_port *port,
1296 struct sk_buff *skb,
1299 unsigned int transport_len = ipv6_transport_len(skb);
1300 const struct ipv6hdr *ip6h = ipv6_hdr(skb);
1301 struct mld_msg *mld;
1302 struct net_bridge_mdb_entry *mp;
1303 struct mld2_query *mld2q;
1304 struct net_bridge_port_group *p;
1305 struct net_bridge_port_group __rcu **pp;
1307 unsigned long max_delay;
1308 unsigned long now = jiffies;
1309 unsigned int offset = skb_transport_offset(skb);
1310 const struct in6_addr *group = NULL;
1311 bool is_general_query;
1314 spin_lock(&br->multicast_lock);
1315 if (!netif_running(br->dev) ||
1316 (port && port->state == BR_STATE_DISABLED))
1319 if (transport_len == sizeof(*mld)) {
1320 if (!pskb_may_pull(skb, offset + sizeof(*mld))) {
1324 mld = (struct mld_msg *) icmp6_hdr(skb);
1325 max_delay = msecs_to_jiffies(ntohs(mld->mld_maxdelay));
1327 group = &mld->mld_mca;
1329 if (!pskb_may_pull(skb, offset + sizeof(*mld2q))) {
1333 mld2q = (struct mld2_query *)icmp6_hdr(skb);
1334 if (!mld2q->mld2q_nsrcs)
1335 group = &mld2q->mld2q_mca;
1337 max_delay = max(msecs_to_jiffies(mldv2_mrc(mld2q)), 1UL);
1340 is_general_query = group && ipv6_addr_any(group);
1342 if (is_general_query) {
1343 saddr.proto = htons(ETH_P_IPV6);
1344 saddr.u.ip6 = ip6h->saddr;
1346 br_multicast_query_received(br, port, &br->ip6_other_query,
1349 } else if (!group) {
1353 mp = br_mdb_ip6_get(br, group, vid);
1357 max_delay *= br->multicast_last_member_count;
1358 if (mp->host_joined &&
1359 (timer_pending(&mp->timer) ?
1360 time_after(mp->timer.expires, now + max_delay) :
1361 try_to_del_timer_sync(&mp->timer) >= 0))
1362 mod_timer(&mp->timer, now + max_delay);
1364 for (pp = &mp->ports;
1365 (p = mlock_dereference(*pp, br)) != NULL;
1367 if (timer_pending(&p->timer) ?
1368 time_after(p->timer.expires, now + max_delay) :
1369 try_to_del_timer_sync(&p->timer) >= 0)
1370 mod_timer(&p->timer, now + max_delay);
1374 spin_unlock(&br->multicast_lock);
1380 br_multicast_leave_group(struct net_bridge *br,
1381 struct net_bridge_port *port,
1382 struct br_ip *group,
1383 struct bridge_mcast_other_query *other_query,
1384 struct bridge_mcast_own_query *own_query,
1385 const unsigned char *src)
1387 struct net_bridge_mdb_entry *mp;
1388 struct net_bridge_port_group *p;
1392 spin_lock(&br->multicast_lock);
1393 if (!netif_running(br->dev) ||
1394 (port && port->state == BR_STATE_DISABLED))
1397 mp = br_mdb_ip_get(br, group);
1401 if (port && (port->flags & BR_MULTICAST_FAST_LEAVE)) {
1402 struct net_bridge_port_group __rcu **pp;
1404 for (pp = &mp->ports;
1405 (p = mlock_dereference(*pp, br)) != NULL;
1407 if (!br_port_group_equal(p, port, src))
1410 rcu_assign_pointer(*pp, p->next);
1411 hlist_del_init(&p->mglist);
1412 del_timer(&p->timer);
1414 br_mdb_notify(br->dev, port, group, RTM_DELMDB,
1417 if (!mp->ports && !mp->host_joined &&
1418 netif_running(br->dev))
1419 mod_timer(&mp->timer, jiffies);
1424 if (timer_pending(&other_query->timer))
1427 if (br_opt_get(br, BROPT_MULTICAST_QUERIER)) {
1428 __br_multicast_send_query(br, port, &mp->addr);
1430 time = jiffies + br->multicast_last_member_count *
1431 br->multicast_last_member_interval;
1433 mod_timer(&own_query->timer, time);
1435 for (p = mlock_dereference(mp->ports, br);
1437 p = mlock_dereference(p->next, br)) {
1438 if (!br_port_group_equal(p, port, src))
1441 if (!hlist_unhashed(&p->mglist) &&
1442 (timer_pending(&p->timer) ?
1443 time_after(p->timer.expires, time) :
1444 try_to_del_timer_sync(&p->timer) >= 0)) {
1445 mod_timer(&p->timer, time);
1453 time = now + br->multicast_last_member_count *
1454 br->multicast_last_member_interval;
1457 if (mp->host_joined &&
1458 (timer_pending(&mp->timer) ?
1459 time_after(mp->timer.expires, time) :
1460 try_to_del_timer_sync(&mp->timer) >= 0)) {
1461 mod_timer(&mp->timer, time);
1467 for (p = mlock_dereference(mp->ports, br);
1469 p = mlock_dereference(p->next, br)) {
1470 if (p->port != port)
1473 if (!hlist_unhashed(&p->mglist) &&
1474 (timer_pending(&p->timer) ?
1475 time_after(p->timer.expires, time) :
1476 try_to_del_timer_sync(&p->timer) >= 0)) {
1477 mod_timer(&p->timer, time);
1483 spin_unlock(&br->multicast_lock);
1486 static void br_ip4_multicast_leave_group(struct net_bridge *br,
1487 struct net_bridge_port *port,
1490 const unsigned char *src)
1492 struct br_ip br_group;
1493 struct bridge_mcast_own_query *own_query;
1495 if (ipv4_is_local_multicast(group))
1498 own_query = port ? &port->ip4_own_query : &br->ip4_own_query;
1500 br_group.u.ip4 = group;
1501 br_group.proto = htons(ETH_P_IP);
1504 br_multicast_leave_group(br, port, &br_group, &br->ip4_other_query,
1508 #if IS_ENABLED(CONFIG_IPV6)
1509 static void br_ip6_multicast_leave_group(struct net_bridge *br,
1510 struct net_bridge_port *port,
1511 const struct in6_addr *group,
1513 const unsigned char *src)
1515 struct br_ip br_group;
1516 struct bridge_mcast_own_query *own_query;
1518 if (ipv6_addr_is_ll_all_nodes(group))
1521 own_query = port ? &port->ip6_own_query : &br->ip6_own_query;
1523 br_group.u.ip6 = *group;
1524 br_group.proto = htons(ETH_P_IPV6);
1527 br_multicast_leave_group(br, port, &br_group, &br->ip6_other_query,
1532 static void br_multicast_err_count(const struct net_bridge *br,
1533 const struct net_bridge_port *p,
1536 struct bridge_mcast_stats __percpu *stats;
1537 struct bridge_mcast_stats *pstats;
1539 if (!br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED))
1543 stats = p->mcast_stats;
1545 stats = br->mcast_stats;
1546 if (WARN_ON(!stats))
1549 pstats = this_cpu_ptr(stats);
1551 u64_stats_update_begin(&pstats->syncp);
1553 case htons(ETH_P_IP):
1554 pstats->mstats.igmp_parse_errors++;
1556 #if IS_ENABLED(CONFIG_IPV6)
1557 case htons(ETH_P_IPV6):
1558 pstats->mstats.mld_parse_errors++;
1562 u64_stats_update_end(&pstats->syncp);
1565 static void br_multicast_pim(struct net_bridge *br,
1566 struct net_bridge_port *port,
1567 const struct sk_buff *skb)
1569 unsigned int offset = skb_transport_offset(skb);
1570 struct pimhdr *pimhdr, _pimhdr;
1572 pimhdr = skb_header_pointer(skb, offset, sizeof(_pimhdr), &_pimhdr);
1573 if (!pimhdr || pim_hdr_version(pimhdr) != PIM_VERSION ||
1574 pim_hdr_type(pimhdr) != PIM_TYPE_HELLO)
1577 br_multicast_mark_router(br, port);
1580 static int br_ip4_multicast_mrd_rcv(struct net_bridge *br,
1581 struct net_bridge_port *port,
1582 struct sk_buff *skb)
1584 if (ip_hdr(skb)->protocol != IPPROTO_IGMP ||
1585 igmp_hdr(skb)->type != IGMP_MRDISC_ADV)
1588 br_multicast_mark_router(br, port);
1593 static int br_multicast_ipv4_rcv(struct net_bridge *br,
1594 struct net_bridge_port *port,
1595 struct sk_buff *skb,
1598 const unsigned char *src;
1602 err = ip_mc_check_igmp(skb);
1604 if (err == -ENOMSG) {
1605 if (!ipv4_is_local_multicast(ip_hdr(skb)->daddr)) {
1606 BR_INPUT_SKB_CB(skb)->mrouters_only = 1;
1607 } else if (pim_ipv4_all_pim_routers(ip_hdr(skb)->daddr)) {
1608 if (ip_hdr(skb)->protocol == IPPROTO_PIM)
1609 br_multicast_pim(br, port, skb);
1610 } else if (ipv4_is_all_snoopers(ip_hdr(skb)->daddr)) {
1611 br_ip4_multicast_mrd_rcv(br, port, skb);
1615 } else if (err < 0) {
1616 br_multicast_err_count(br, port, skb->protocol);
1621 src = eth_hdr(skb)->h_source;
1622 BR_INPUT_SKB_CB(skb)->igmp = ih->type;
1625 case IGMP_HOST_MEMBERSHIP_REPORT:
1626 case IGMPV2_HOST_MEMBERSHIP_REPORT:
1627 BR_INPUT_SKB_CB(skb)->mrouters_only = 1;
1628 err = br_ip4_multicast_add_group(br, port, ih->group, vid, src);
1630 case IGMPV3_HOST_MEMBERSHIP_REPORT:
1631 err = br_ip4_multicast_igmp3_report(br, port, skb, vid);
1633 case IGMP_HOST_MEMBERSHIP_QUERY:
1634 br_ip4_multicast_query(br, port, skb, vid);
1636 case IGMP_HOST_LEAVE_MESSAGE:
1637 br_ip4_multicast_leave_group(br, port, ih->group, vid, src);
1641 br_multicast_count(br, port, skb, BR_INPUT_SKB_CB(skb)->igmp,
1647 #if IS_ENABLED(CONFIG_IPV6)
1648 static int br_ip6_multicast_mrd_rcv(struct net_bridge *br,
1649 struct net_bridge_port *port,
1650 struct sk_buff *skb)
1654 if (ipv6_hdr(skb)->nexthdr != IPPROTO_ICMPV6)
1657 ret = ipv6_mc_check_icmpv6(skb);
1661 if (icmp6_hdr(skb)->icmp6_type != ICMPV6_MRDISC_ADV)
1664 br_multicast_mark_router(br, port);
1669 static int br_multicast_ipv6_rcv(struct net_bridge *br,
1670 struct net_bridge_port *port,
1671 struct sk_buff *skb,
1674 const unsigned char *src;
1675 struct mld_msg *mld;
1678 err = ipv6_mc_check_mld(skb);
1680 if (err == -ENOMSG) {
1681 if (!ipv6_addr_is_ll_all_nodes(&ipv6_hdr(skb)->daddr))
1682 BR_INPUT_SKB_CB(skb)->mrouters_only = 1;
1684 if (ipv6_addr_is_all_snoopers(&ipv6_hdr(skb)->daddr)) {
1685 err = br_ip6_multicast_mrd_rcv(br, port, skb);
1687 if (err < 0 && err != -ENOMSG) {
1688 br_multicast_err_count(br, port, skb->protocol);
1694 } else if (err < 0) {
1695 br_multicast_err_count(br, port, skb->protocol);
1699 mld = (struct mld_msg *)skb_transport_header(skb);
1700 BR_INPUT_SKB_CB(skb)->igmp = mld->mld_type;
1702 switch (mld->mld_type) {
1703 case ICMPV6_MGM_REPORT:
1704 src = eth_hdr(skb)->h_source;
1705 BR_INPUT_SKB_CB(skb)->mrouters_only = 1;
1706 err = br_ip6_multicast_add_group(br, port, &mld->mld_mca, vid,
1709 case ICMPV6_MLD2_REPORT:
1710 err = br_ip6_multicast_mld2_report(br, port, skb, vid);
1712 case ICMPV6_MGM_QUERY:
1713 err = br_ip6_multicast_query(br, port, skb, vid);
1715 case ICMPV6_MGM_REDUCTION:
1716 src = eth_hdr(skb)->h_source;
1717 br_ip6_multicast_leave_group(br, port, &mld->mld_mca, vid, src);
1721 br_multicast_count(br, port, skb, BR_INPUT_SKB_CB(skb)->igmp,
1728 int br_multicast_rcv(struct net_bridge *br, struct net_bridge_port *port,
1729 struct sk_buff *skb, u16 vid)
1733 BR_INPUT_SKB_CB(skb)->igmp = 0;
1734 BR_INPUT_SKB_CB(skb)->mrouters_only = 0;
1736 if (!br_opt_get(br, BROPT_MULTICAST_ENABLED))
1739 switch (skb->protocol) {
1740 case htons(ETH_P_IP):
1741 ret = br_multicast_ipv4_rcv(br, port, skb, vid);
1743 #if IS_ENABLED(CONFIG_IPV6)
1744 case htons(ETH_P_IPV6):
1745 ret = br_multicast_ipv6_rcv(br, port, skb, vid);
1753 static void br_multicast_query_expired(struct net_bridge *br,
1754 struct bridge_mcast_own_query *query,
1755 struct bridge_mcast_querier *querier)
1757 spin_lock(&br->multicast_lock);
1758 if (query->startup_sent < br->multicast_startup_query_count)
1759 query->startup_sent++;
1761 RCU_INIT_POINTER(querier->port, NULL);
1762 br_multicast_send_query(br, NULL, query);
1763 spin_unlock(&br->multicast_lock);
1766 static void br_ip4_multicast_query_expired(struct timer_list *t)
1768 struct net_bridge *br = from_timer(br, t, ip4_own_query.timer);
1770 br_multicast_query_expired(br, &br->ip4_own_query, &br->ip4_querier);
1773 #if IS_ENABLED(CONFIG_IPV6)
1774 static void br_ip6_multicast_query_expired(struct timer_list *t)
1776 struct net_bridge *br = from_timer(br, t, ip6_own_query.timer);
1778 br_multicast_query_expired(br, &br->ip6_own_query, &br->ip6_querier);
1782 void br_multicast_init(struct net_bridge *br)
1784 br->hash_max = BR_MULTICAST_DEFAULT_HASH_MAX;
1786 br->multicast_router = MDB_RTR_TYPE_TEMP_QUERY;
1787 br->multicast_last_member_count = 2;
1788 br->multicast_startup_query_count = 2;
1790 br->multicast_last_member_interval = HZ;
1791 br->multicast_query_response_interval = 10 * HZ;
1792 br->multicast_startup_query_interval = 125 * HZ / 4;
1793 br->multicast_query_interval = 125 * HZ;
1794 br->multicast_querier_interval = 255 * HZ;
1795 br->multicast_membership_interval = 260 * HZ;
1797 br->ip4_other_query.delay_time = 0;
1798 br->ip4_querier.port = NULL;
1799 br->multicast_igmp_version = 2;
1800 #if IS_ENABLED(CONFIG_IPV6)
1801 br->multicast_mld_version = 1;
1802 br->ip6_other_query.delay_time = 0;
1803 br->ip6_querier.port = NULL;
1805 br_opt_toggle(br, BROPT_MULTICAST_ENABLED, true);
1806 br_opt_toggle(br, BROPT_HAS_IPV6_ADDR, true);
1808 spin_lock_init(&br->multicast_lock);
1809 timer_setup(&br->multicast_router_timer,
1810 br_multicast_local_router_expired, 0);
1811 timer_setup(&br->ip4_other_query.timer,
1812 br_ip4_multicast_querier_expired, 0);
1813 timer_setup(&br->ip4_own_query.timer,
1814 br_ip4_multicast_query_expired, 0);
1815 #if IS_ENABLED(CONFIG_IPV6)
1816 timer_setup(&br->ip6_other_query.timer,
1817 br_ip6_multicast_querier_expired, 0);
1818 timer_setup(&br->ip6_own_query.timer,
1819 br_ip6_multicast_query_expired, 0);
1821 INIT_HLIST_HEAD(&br->mdb_list);
1824 static void br_ip4_multicast_join_snoopers(struct net_bridge *br)
1826 struct in_device *in_dev = in_dev_get(br->dev);
1831 __ip_mc_inc_group(in_dev, htonl(INADDR_ALLSNOOPERS_GROUP), GFP_ATOMIC);
1835 #if IS_ENABLED(CONFIG_IPV6)
1836 static void br_ip6_multicast_join_snoopers(struct net_bridge *br)
1838 struct in6_addr addr;
1840 ipv6_addr_set(&addr, htonl(0xff020000), 0, 0, htonl(0x6a));
1841 ipv6_dev_mc_inc(br->dev, &addr);
1844 static inline void br_ip6_multicast_join_snoopers(struct net_bridge *br)
1849 static void br_multicast_join_snoopers(struct net_bridge *br)
1851 br_ip4_multicast_join_snoopers(br);
1852 br_ip6_multicast_join_snoopers(br);
1855 static void br_ip4_multicast_leave_snoopers(struct net_bridge *br)
1857 struct in_device *in_dev = in_dev_get(br->dev);
1859 if (WARN_ON(!in_dev))
1862 __ip_mc_dec_group(in_dev, htonl(INADDR_ALLSNOOPERS_GROUP), GFP_ATOMIC);
1866 #if IS_ENABLED(CONFIG_IPV6)
1867 static void br_ip6_multicast_leave_snoopers(struct net_bridge *br)
1869 struct in6_addr addr;
1871 ipv6_addr_set(&addr, htonl(0xff020000), 0, 0, htonl(0x6a));
1872 ipv6_dev_mc_dec(br->dev, &addr);
1875 static inline void br_ip6_multicast_leave_snoopers(struct net_bridge *br)
1880 static void br_multicast_leave_snoopers(struct net_bridge *br)
1882 br_ip4_multicast_leave_snoopers(br);
1883 br_ip6_multicast_leave_snoopers(br);
1886 static void __br_multicast_open(struct net_bridge *br,
1887 struct bridge_mcast_own_query *query)
1889 query->startup_sent = 0;
1891 if (!br_opt_get(br, BROPT_MULTICAST_ENABLED))
1894 mod_timer(&query->timer, jiffies);
1897 void br_multicast_open(struct net_bridge *br)
1899 if (br_opt_get(br, BROPT_MULTICAST_ENABLED))
1900 br_multicast_join_snoopers(br);
1902 __br_multicast_open(br, &br->ip4_own_query);
1903 #if IS_ENABLED(CONFIG_IPV6)
1904 __br_multicast_open(br, &br->ip6_own_query);
1908 void br_multicast_stop(struct net_bridge *br)
1910 del_timer_sync(&br->multicast_router_timer);
1911 del_timer_sync(&br->ip4_other_query.timer);
1912 del_timer_sync(&br->ip4_own_query.timer);
1913 #if IS_ENABLED(CONFIG_IPV6)
1914 del_timer_sync(&br->ip6_other_query.timer);
1915 del_timer_sync(&br->ip6_own_query.timer);
1918 if (br_opt_get(br, BROPT_MULTICAST_ENABLED))
1919 br_multicast_leave_snoopers(br);
1922 void br_multicast_dev_del(struct net_bridge *br)
1924 struct net_bridge_mdb_entry *mp;
1925 struct hlist_node *tmp;
1927 spin_lock_bh(&br->multicast_lock);
1928 hlist_for_each_entry_safe(mp, tmp, &br->mdb_list, mdb_node) {
1929 del_timer(&mp->timer);
1930 rhashtable_remove_fast(&br->mdb_hash_tbl, &mp->rhnode,
1932 hlist_del_rcu(&mp->mdb_node);
1935 spin_unlock_bh(&br->multicast_lock);
1940 int br_multicast_set_router(struct net_bridge *br, unsigned long val)
1944 spin_lock_bh(&br->multicast_lock);
1947 case MDB_RTR_TYPE_DISABLED:
1948 case MDB_RTR_TYPE_PERM:
1949 br_mc_router_state_change(br, val == MDB_RTR_TYPE_PERM);
1950 del_timer(&br->multicast_router_timer);
1951 br->multicast_router = val;
1954 case MDB_RTR_TYPE_TEMP_QUERY:
1955 if (br->multicast_router != MDB_RTR_TYPE_TEMP_QUERY)
1956 br_mc_router_state_change(br, false);
1957 br->multicast_router = val;
1962 spin_unlock_bh(&br->multicast_lock);
1967 static void __del_port_router(struct net_bridge_port *p)
1969 if (hlist_unhashed(&p->rlist))
1971 hlist_del_init_rcu(&p->rlist);
1972 br_rtr_notify(p->br->dev, p, RTM_DELMDB);
1973 br_port_mc_router_state_change(p, false);
1975 /* don't allow timer refresh */
1976 if (p->multicast_router == MDB_RTR_TYPE_TEMP)
1977 p->multicast_router = MDB_RTR_TYPE_TEMP_QUERY;
1980 int br_multicast_set_port_router(struct net_bridge_port *p, unsigned long val)
1982 struct net_bridge *br = p->br;
1983 unsigned long now = jiffies;
1986 spin_lock(&br->multicast_lock);
1987 if (p->multicast_router == val) {
1988 /* Refresh the temp router port timer */
1989 if (p->multicast_router == MDB_RTR_TYPE_TEMP)
1990 mod_timer(&p->multicast_router_timer,
1991 now + br->multicast_querier_interval);
1996 case MDB_RTR_TYPE_DISABLED:
1997 p->multicast_router = MDB_RTR_TYPE_DISABLED;
1998 __del_port_router(p);
1999 del_timer(&p->multicast_router_timer);
2001 case MDB_RTR_TYPE_TEMP_QUERY:
2002 p->multicast_router = MDB_RTR_TYPE_TEMP_QUERY;
2003 __del_port_router(p);
2005 case MDB_RTR_TYPE_PERM:
2006 p->multicast_router = MDB_RTR_TYPE_PERM;
2007 del_timer(&p->multicast_router_timer);
2008 br_multicast_add_router(br, p);
2010 case MDB_RTR_TYPE_TEMP:
2011 p->multicast_router = MDB_RTR_TYPE_TEMP;
2012 br_multicast_mark_router(br, p);
2019 spin_unlock(&br->multicast_lock);
2024 static void br_multicast_start_querier(struct net_bridge *br,
2025 struct bridge_mcast_own_query *query)
2027 struct net_bridge_port *port;
2029 __br_multicast_open(br, query);
2031 list_for_each_entry(port, &br->port_list, list) {
2032 if (port->state == BR_STATE_DISABLED ||
2033 port->state == BR_STATE_BLOCKING)
2036 if (query == &br->ip4_own_query)
2037 br_multicast_enable(&port->ip4_own_query);
2038 #if IS_ENABLED(CONFIG_IPV6)
2040 br_multicast_enable(&port->ip6_own_query);
2045 int br_multicast_toggle(struct net_bridge *br, unsigned long val)
2047 struct net_bridge_port *port;
2049 spin_lock_bh(&br->multicast_lock);
2050 if (!!br_opt_get(br, BROPT_MULTICAST_ENABLED) == !!val)
2053 br_mc_disabled_update(br->dev, val);
2054 br_opt_toggle(br, BROPT_MULTICAST_ENABLED, !!val);
2055 if (!br_opt_get(br, BROPT_MULTICAST_ENABLED)) {
2056 br_multicast_leave_snoopers(br);
2060 if (!netif_running(br->dev))
2063 br_multicast_open(br);
2064 list_for_each_entry(port, &br->port_list, list)
2065 __br_multicast_enable_port(port);
2068 spin_unlock_bh(&br->multicast_lock);
2073 bool br_multicast_enabled(const struct net_device *dev)
2075 struct net_bridge *br = netdev_priv(dev);
2077 return !!br_opt_get(br, BROPT_MULTICAST_ENABLED);
2079 EXPORT_SYMBOL_GPL(br_multicast_enabled);
2081 bool br_multicast_router(const struct net_device *dev)
2083 struct net_bridge *br = netdev_priv(dev);
2086 spin_lock_bh(&br->multicast_lock);
2087 is_router = br_multicast_is_router(br);
2088 spin_unlock_bh(&br->multicast_lock);
2091 EXPORT_SYMBOL_GPL(br_multicast_router);
2093 int br_multicast_set_querier(struct net_bridge *br, unsigned long val)
2095 unsigned long max_delay;
2099 spin_lock_bh(&br->multicast_lock);
2100 if (br_opt_get(br, BROPT_MULTICAST_QUERIER) == val)
2103 br_opt_toggle(br, BROPT_MULTICAST_QUERIER, !!val);
2107 max_delay = br->multicast_query_response_interval;
2109 if (!timer_pending(&br->ip4_other_query.timer))
2110 br->ip4_other_query.delay_time = jiffies + max_delay;
2112 br_multicast_start_querier(br, &br->ip4_own_query);
2114 #if IS_ENABLED(CONFIG_IPV6)
2115 if (!timer_pending(&br->ip6_other_query.timer))
2116 br->ip6_other_query.delay_time = jiffies + max_delay;
2118 br_multicast_start_querier(br, &br->ip6_own_query);
2122 spin_unlock_bh(&br->multicast_lock);
2127 int br_multicast_set_igmp_version(struct net_bridge *br, unsigned long val)
2129 /* Currently we support only version 2 and 3 */
2138 spin_lock_bh(&br->multicast_lock);
2139 br->multicast_igmp_version = val;
2140 spin_unlock_bh(&br->multicast_lock);
2145 #if IS_ENABLED(CONFIG_IPV6)
2146 int br_multicast_set_mld_version(struct net_bridge *br, unsigned long val)
2148 /* Currently we support version 1 and 2 */
2157 spin_lock_bh(&br->multicast_lock);
2158 br->multicast_mld_version = val;
2159 spin_unlock_bh(&br->multicast_lock);
2166 * br_multicast_list_adjacent - Returns snooped multicast addresses
2167 * @dev: The bridge port adjacent to which to retrieve addresses
2168 * @br_ip_list: The list to store found, snooped multicast IP addresses in
2170 * Creates a list of IP addresses (struct br_ip_list) sensed by the multicast
2171 * snooping feature on all bridge ports of dev's bridge device, excluding
2172 * the addresses from dev itself.
2174 * Returns the number of items added to br_ip_list.
2177 * - br_ip_list needs to be initialized by caller
2178 * - br_ip_list might contain duplicates in the end
2179 * (needs to be taken care of by caller)
2180 * - br_ip_list needs to be freed by caller
2182 int br_multicast_list_adjacent(struct net_device *dev,
2183 struct list_head *br_ip_list)
2185 struct net_bridge *br;
2186 struct net_bridge_port *port;
2187 struct net_bridge_port_group *group;
2188 struct br_ip_list *entry;
2192 if (!br_ip_list || !br_port_exists(dev))
2195 port = br_port_get_rcu(dev);
2196 if (!port || !port->br)
2201 list_for_each_entry_rcu(port, &br->port_list, list) {
2202 if (!port->dev || port->dev == dev)
2205 hlist_for_each_entry_rcu(group, &port->mglist, mglist) {
2206 entry = kmalloc(sizeof(*entry), GFP_ATOMIC);
2210 entry->addr = group->addr;
2211 list_add(&entry->list, br_ip_list);
2220 EXPORT_SYMBOL_GPL(br_multicast_list_adjacent);
2223 * br_multicast_has_querier_anywhere - Checks for a querier on a bridge
2224 * @dev: The bridge port providing the bridge on which to check for a querier
2225 * @proto: The protocol family to check for: IGMP -> ETH_P_IP, MLD -> ETH_P_IPV6
2227 * Checks whether the given interface has a bridge on top and if so returns
2228 * true if a valid querier exists anywhere on the bridged link layer.
2229 * Otherwise returns false.
2231 bool br_multicast_has_querier_anywhere(struct net_device *dev, int proto)
2233 struct net_bridge *br;
2234 struct net_bridge_port *port;
2239 if (!br_port_exists(dev))
2242 port = br_port_get_rcu(dev);
2243 if (!port || !port->br)
2248 memset(ð, 0, sizeof(eth));
2249 eth.h_proto = htons(proto);
2251 ret = br_multicast_querier_exists(br, ð);
2257 EXPORT_SYMBOL_GPL(br_multicast_has_querier_anywhere);
2260 * br_multicast_has_querier_adjacent - Checks for a querier behind a bridge port
2261 * @dev: The bridge port adjacent to which to check for a querier
2262 * @proto: The protocol family to check for: IGMP -> ETH_P_IP, MLD -> ETH_P_IPV6
2264 * Checks whether the given interface has a bridge on top and if so returns
2265 * true if a selected querier is behind one of the other ports of this
2266 * bridge. Otherwise returns false.
2268 bool br_multicast_has_querier_adjacent(struct net_device *dev, int proto)
2270 struct net_bridge *br;
2271 struct net_bridge_port *port;
2275 if (!br_port_exists(dev))
2278 port = br_port_get_rcu(dev);
2279 if (!port || !port->br)
2286 if (!timer_pending(&br->ip4_other_query.timer) ||
2287 rcu_dereference(br->ip4_querier.port) == port)
2290 #if IS_ENABLED(CONFIG_IPV6)
2292 if (!timer_pending(&br->ip6_other_query.timer) ||
2293 rcu_dereference(br->ip6_querier.port) == port)
2306 EXPORT_SYMBOL_GPL(br_multicast_has_querier_adjacent);
2308 static void br_mcast_stats_add(struct bridge_mcast_stats __percpu *stats,
2309 const struct sk_buff *skb, u8 type, u8 dir)
2311 struct bridge_mcast_stats *pstats = this_cpu_ptr(stats);
2312 __be16 proto = skb->protocol;
2315 u64_stats_update_begin(&pstats->syncp);
2317 case htons(ETH_P_IP):
2318 t_len = ntohs(ip_hdr(skb)->tot_len) - ip_hdrlen(skb);
2320 case IGMP_HOST_MEMBERSHIP_REPORT:
2321 pstats->mstats.igmp_v1reports[dir]++;
2323 case IGMPV2_HOST_MEMBERSHIP_REPORT:
2324 pstats->mstats.igmp_v2reports[dir]++;
2326 case IGMPV3_HOST_MEMBERSHIP_REPORT:
2327 pstats->mstats.igmp_v3reports[dir]++;
2329 case IGMP_HOST_MEMBERSHIP_QUERY:
2330 if (t_len != sizeof(struct igmphdr)) {
2331 pstats->mstats.igmp_v3queries[dir]++;
2333 unsigned int offset = skb_transport_offset(skb);
2334 struct igmphdr *ih, _ihdr;
2336 ih = skb_header_pointer(skb, offset,
2337 sizeof(_ihdr), &_ihdr);
2341 pstats->mstats.igmp_v1queries[dir]++;
2343 pstats->mstats.igmp_v2queries[dir]++;
2346 case IGMP_HOST_LEAVE_MESSAGE:
2347 pstats->mstats.igmp_leaves[dir]++;
2351 #if IS_ENABLED(CONFIG_IPV6)
2352 case htons(ETH_P_IPV6):
2353 t_len = ntohs(ipv6_hdr(skb)->payload_len) +
2354 sizeof(struct ipv6hdr);
2355 t_len -= skb_network_header_len(skb);
2357 case ICMPV6_MGM_REPORT:
2358 pstats->mstats.mld_v1reports[dir]++;
2360 case ICMPV6_MLD2_REPORT:
2361 pstats->mstats.mld_v2reports[dir]++;
2363 case ICMPV6_MGM_QUERY:
2364 if (t_len != sizeof(struct mld_msg))
2365 pstats->mstats.mld_v2queries[dir]++;
2367 pstats->mstats.mld_v1queries[dir]++;
2369 case ICMPV6_MGM_REDUCTION:
2370 pstats->mstats.mld_leaves[dir]++;
2374 #endif /* CONFIG_IPV6 */
2376 u64_stats_update_end(&pstats->syncp);
2379 void br_multicast_count(struct net_bridge *br, const struct net_bridge_port *p,
2380 const struct sk_buff *skb, u8 type, u8 dir)
2382 struct bridge_mcast_stats __percpu *stats;
2384 /* if multicast_disabled is true then igmp type can't be set */
2385 if (!type || !br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED))
2389 stats = p->mcast_stats;
2391 stats = br->mcast_stats;
2392 if (WARN_ON(!stats))
2395 br_mcast_stats_add(stats, skb, type, dir);
2398 int br_multicast_init_stats(struct net_bridge *br)
2400 br->mcast_stats = netdev_alloc_pcpu_stats(struct bridge_mcast_stats);
2401 if (!br->mcast_stats)
2407 void br_multicast_uninit_stats(struct net_bridge *br)
2409 free_percpu(br->mcast_stats);
2412 static void mcast_stats_add_dir(u64 *dst, u64 *src)
2414 dst[BR_MCAST_DIR_RX] += src[BR_MCAST_DIR_RX];
2415 dst[BR_MCAST_DIR_TX] += src[BR_MCAST_DIR_TX];
2418 void br_multicast_get_stats(const struct net_bridge *br,
2419 const struct net_bridge_port *p,
2420 struct br_mcast_stats *dest)
2422 struct bridge_mcast_stats __percpu *stats;
2423 struct br_mcast_stats tdst;
2426 memset(dest, 0, sizeof(*dest));
2428 stats = p->mcast_stats;
2430 stats = br->mcast_stats;
2431 if (WARN_ON(!stats))
2434 memset(&tdst, 0, sizeof(tdst));
2435 for_each_possible_cpu(i) {
2436 struct bridge_mcast_stats *cpu_stats = per_cpu_ptr(stats, i);
2437 struct br_mcast_stats temp;
2441 start = u64_stats_fetch_begin_irq(&cpu_stats->syncp);
2442 memcpy(&temp, &cpu_stats->mstats, sizeof(temp));
2443 } while (u64_stats_fetch_retry_irq(&cpu_stats->syncp, start));
2445 mcast_stats_add_dir(tdst.igmp_v1queries, temp.igmp_v1queries);
2446 mcast_stats_add_dir(tdst.igmp_v2queries, temp.igmp_v2queries);
2447 mcast_stats_add_dir(tdst.igmp_v3queries, temp.igmp_v3queries);
2448 mcast_stats_add_dir(tdst.igmp_leaves, temp.igmp_leaves);
2449 mcast_stats_add_dir(tdst.igmp_v1reports, temp.igmp_v1reports);
2450 mcast_stats_add_dir(tdst.igmp_v2reports, temp.igmp_v2reports);
2451 mcast_stats_add_dir(tdst.igmp_v3reports, temp.igmp_v3reports);
2452 tdst.igmp_parse_errors += temp.igmp_parse_errors;
2454 mcast_stats_add_dir(tdst.mld_v1queries, temp.mld_v1queries);
2455 mcast_stats_add_dir(tdst.mld_v2queries, temp.mld_v2queries);
2456 mcast_stats_add_dir(tdst.mld_leaves, temp.mld_leaves);
2457 mcast_stats_add_dir(tdst.mld_v1reports, temp.mld_v1reports);
2458 mcast_stats_add_dir(tdst.mld_v2reports, temp.mld_v2reports);
2459 tdst.mld_parse_errors += temp.mld_parse_errors;
2461 memcpy(dest, &tdst, sizeof(*dest));
2464 int br_mdb_hash_init(struct net_bridge *br)
2466 return rhashtable_init(&br->mdb_hash_tbl, &br_mdb_rht_params);
2469 void br_mdb_hash_fini(struct net_bridge *br)
2471 rhashtable_destroy(&br->mdb_hash_tbl);