lgcosta/pf-linux-port
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a84b2c91f3c335528c3a4b7952458731f4ef5c7d
pf-linux-port/module/include/pfk_net.h
T
lgcosta da2e9b679a M1: compat layer + pf.ko skeleton builds against Linux 7.3.4 
- pfk.h: BSD types/ioctl encoding (OpenBSD bit layout), locks (NET_LOCK=rwsem),
  pools, timeouts, mbuf shim over sk_buff, ifnet registry, toeplitz/siphash
- pfk_mod/pfk_hooks: misc /dev/pf (0600), IPv4 netfilter hook skeleton,
  DIOCGETSTATUS answered (M1 skeleton; engine ioctls land with pf_ioctl.c)
- vendorize/stage-port scripts: deterministic upstream staging with seds
  (struct renames, IFF_*->PFIFF_*, sa_len drops) logged to docs/porting-notes
- fixes: modules_prepare+Module.symvers for out-of-tree builds
2026-11-11 12:09:34 -03:00

191 lines
5.5 KiB
C
Raw Blame History

/*
* PF-on-Linux BSD wire-protocol structs + checksum helpers (ISC 2026).
* Field names match OpenBSD headers; staging seds rename `struct ip` etc.
* to the pf_* names defined here so they never collide with Linux uapi.
* Byte layouts below are the little-endian variants (x86/arm64); the
* bitfield orderings replicate OpenBSD netinet headers exactly.
*/
#ifndef _PFK_NET_H
#define _PFK_NET_H
/* ---- IPv4 header (OpenBSD <netinet/ip.h> layout, LE bitfield order) ---- */
struct pf_ip {
#if defined(__LITTLE_ENDIAN_BITFIELD)
__u8 ip_hl:4, ip_v:4;
#else
__u8 ip_v:4, ip_hl:4;
#endif
__u8 ip_tos;
__be16 ip_len;
__be16 ip_id;
__be16 ip_off;
#define IP_RF 0x8000
#define IP_OFFLP 0x3fff
__u8 ip_ttl;
__u8 ip_p;
__be16 ip_sum;
struct in_addr ip_src, ip_dst;
};
#define IP_MAXPACKET 65535
#define IP_DEFAULT_TTL 64
#define IPV4_TTL 64
/* ---- TCP (OpenBSD <netinet/tcp.h> names) ---- */
struct pf_tcphdr {
__be16 th_sport, th_dport;
__be32 th_seq, th_ack;
#if defined(__LITTLE_ENDIAN_BITFIELD)
__u8 th_x2:4, th_off:4;
#else
__u8 th_off:4, th_x2:4;
#endif
__u8 th_flags;
__be16 th_win;
__be16 th_sum;
__be16 th_urp;
};
#define TH_FIN 0x01
#define TH_SYN 0x02
#define TH_RST 0x04
#define TH_PUSH 0x08
#define TH_ACK 0x10
#define TH_URG 0x20
#define TH_ECE 0x40
#define TH_CWR 0x80
#define TH_FLAGS (TH_FIN|TH_SYN|TH_RST|TH_ACK|TH_URG|TH_ECE|TH_CWR)
/* tcp_fsm.h states (same numeric as Linux TCP_* enum) */
#define TCPS_CLOSED 0
#define TCPS_LISTEN 1
#define TCPS_SYN_SENT 2
#define TCPS_SYN_RECEIVED 3
#define TCPS_ESTABLISHED 4
#define TCPS_CLOSE_WAIT 5
#define TCPS_FIN_WAIT_1 6
#define TCPS_CLOSING 7
#define TCPS_LAST_ACK 8
#define TCPS_FIN_WAIT_2 9
#define TCPS_TIME_WAIT 10
/* ---- UDP ---- */
struct pf_udphdr {
__be16 uh_sport, uh_dport;
__be16 uh_ulen;
__be16 uh_sum;
};
/* ---- ICMP (OpenBSD <netinet/ip_icmp.h> names/values) ---- */
struct pf_icmp {
__u8 icmp_type;
__u8 icmp_code;
__be16 icmp_cksum;
union {
__be16 ih_id[2]; /* id, seq */
struct { __u8 type, code; __be16 cksum; } ih_type_hdr;
__be32 ih_gwaddr;
struct ih_frags { __be16 ih_rrechk; __be16 ih_length; } ih_frag;
} icmp_hun;
#define icmp_id icmp_hun.ih_id[0]
#define icmp_seq icmp_hun.ih_id[1]
#define icmp_cksum_alt icmp_hun.ih_type_hdr.cksum
#define icmp_gwaddr icmp_hun.ih_gwaddr
union {
__s8 id_pad[8];
__be16 id_ipid[2];
struct pf_ip id_ip;
struct ih_pmtu { __be16 reserved; __be16 mtu; } ih_pmtu;
struct ih_rtradv { __u8 irt_num_addrs, irt_wpa;
__be16 lifetime; } ih_rtradv;
} icmp_data;
#define icmp_rip icmp_data.id_ip
#define icmp_ppsmtu icmp_data.ih_pmtu.mtu
};
#define ICMP_ECHOREPLY 0
#define ICMP_UNREACH 3
#define ICMP_UNREACH_NET 0
#define ICMP_UNREACH_HOST 1
#define ICMP_UNREACH_PROTOCOL 2
#define ICMP_UNREACH_PORT 3
#define ICMP_UNREACH_NEEDFRAG 4
#define ICMP_UNREACH_SRCFAIL 5
#define ICMP_UNREACH_NET_UNKNOWN 6
#define ICMP_UNREACH_HOST_UNKNOWN 7
#define ICMP_UNREACH_ISOLATED 8
#define ICMP_UNREACH_NET_PROHIB 9
#define ICMP_UNREACH_HOST_PROHIB 10
#define ICMP_UNREACH_TOSNET 11
#define ICMP_UNREACH_TOSHOST 12
#define ICMP_UNREACH_FILTER_PROHIB 13
#define ICMP_UNREACH_HOST_PRECEDENCE 14
#define ICMP_UNREACH_PRECEDENCE_CUTOFF 15
#define ICMP_SOURCEQUENCH 4
#define ICMP_REDIRECT 5
#define ICMP_ALTHOSTADDR 6
#define ICMP_ECHO 8
#define ICMP_ROUTERADVERT 9
#define ICMP_ROUTERSOLICIT 10
#define ICMP_TIMXCEED 11
#define ICMP_TIMXCEED_INTRANS 0
#define ICMP_TIMXCEED_REASS 1
#define ICMP_PARAMPROB 12
#define ICMP_TSTAMP 13
#define ICMP_TSTAMPREPLY 14
#define ICMP_INFO_REQUEST 15
#define ICMP_INFO_REPLY 16
#define ICMP_ADDRESS 17
#define ICMP_ADDRESSREPLY 18
#define ICMP_MAXTYPE 18
/* ---- IPv6 (OpenBSD <netinet/ip6.h> ctl-union + macros) ---- */
struct pf_ip6_hdr {
union {
struct ip6_hdrctl {
__u32 ip6_un1_flow;
__be16 ip6_un1_plen;
__u8 ip6_un1_nxt;
__u8 ip6_un1_hlim;
} ip6_un1;
} ip6_ctlun;
struct in6_addr ip6_src;
struct in6_addr ip6_dst;
};
#define ip6_flow ip6_ctlun.ip6_un1->ip6_un1_flow
#define ip6_plen ip6_ctlun.ip6_un1.ip6_un1_plen
#define ip6_nxt ip6_ctlun.ip6_un1.ip6_un1_nxt
#define ip6_hlim ip6_ctlun.ip6_un1.ip6_un1_hlim
#define ip6_hops ip6_ctlun.ip6_un1.ip6_un1_hlim
/* NOTE ip6_flow above is a pointer trick in OpenBSD; PF reads/writes
* it via explicit helpers only — provide the plain accessor instead: */
#undef ip6_flow
#define ip6_flow ip6_ctlun.ip6_un1.ip6_un1_flow
#define IPV6_VERSION 0x60
#define IPV6_VERSION_MASK 0xf0
#define v_hl i_vhl
#define traffic_class i_tc1, i_tc2
/* flow macros (OpenBSD) */
static inline __u32 PF6_FLOWlabel(const struct pf_ip6_hdr *h)
{ return be32_to_cpu(h->ip6_flow) & 0x000fffff; }
static inline __u8 PF6_VERSION(const struct pf_ip6_hdr *h)
{ return be32_to_cpu(h->ip6_flow) >> 28; }
static inline __u8 PF6_CLASS(const struct pf_ip6_hdr *h)
{ return (be32_to_cpu(h->ip6_flow) >> 20) & 0xff; }
/* ---- ICMPv6: PF code's field names (icmp6_type/code/cksum/identifier/
* sequence/mtu) are provided by Linux's own <linux/icmpv6.h> struct
* icmp6hdr + its member macros; staging seds `struct icmp6_hdr` →
* `struct icmp6hdr` (see stage-port.sh). No private definition needed. */
/* BSD IPPROTO_ / IP levels (identical numerics to Linux; aliases kept) */
#define IPPROTO_MAX_ IPPROTO_MAX
/* ---- checksum helpers (ported in_cksum etc.) ---- */
u_int16_t pfk_in_cksum(const void *data, int len); /* one's complement sum */
__sum16 pfk_icmp6_cksum(const struct pf_ip6_hdr *ip6,
const struct icmp6hdr *ic6, int len);
void pfk_send_icmp_error(int family, struct sk_buff *skb_in, int type,
int code, __be32 info);
#endif /* _PFK_NET_H */
Reference in new issue View Git Blame Copy Permalink