1 /* $NetBSD: ip_sync.h,v 1.2 2012/07/22 14:27:35 darrenr Exp $ */ 2 3 /* 4 * Copyright (C) 2012 by Darren Reed. 5 * 6 * See the IPFILTER.LICENCE file for details on licencing. 7 * 8 * @(#)ip_fil.h 1.35 6/5/96 9 * Id: ip_sync.h,v 1.1.1.2 2012/07/22 13:44:24 darrenr Exp $ 10 */ 11 12 #ifndef __IP_SYNC_H__ 13 #define __IP_SYNC_H__ 14 15 typedef struct synchdr { 16 u_32_t sm_magic; /* magic */ 17 u_char sm_v; /* version: 4,6 */ 18 u_char sm_p; /* protocol */ 19 u_char sm_cmd; /* command */ 20 u_char sm_table; /* NAT, STATE, etc */ 21 u_int sm_num; /* table entry number */ 22 int sm_rev; /* forward/reverse */ 23 int sm_len; /* length of the data section */ 24 struct synclist *sm_sl; /* back pointer to parent */ 25 } synchdr_t; 26 27 28 #define SYNHDRMAGIC 0x0FF51DE5 29 30 /* 31 * Commands 32 * No delete required as expirey will take care of that! 33 */ 34 #define SMC_CREATE 0 /* pass ipstate_t after synchdr_t */ 35 #define SMC_UPDATE 1 36 #define SMC_MAXCMD 1 37 38 /* 39 * Tables 40 */ 41 #define SMC_RLOG -2 /* Only used with SIOCIPFFL */ 42 #define SMC_NAT 0 43 #define SMC_STATE 1 44 #define SMC_MAXTBL 1 45 46 47 /* 48 * Only TCP requires "more" information than just a reference to the entry 49 * for which an update is being made. 50 */ 51 typedef struct synctcp_update { 52 u_long stu_age; 53 tcpdata_t stu_data[2]; 54 int stu_state[2]; 55 } synctcp_update_t; 56 57 58 typedef struct synclist { 59 struct synclist *sl_next; 60 struct synclist **sl_pnext; 61 int sl_idx; /* update index */ 62 struct synchdr sl_hdr; 63 union { 64 struct ipstate *slu_ips; 65 struct nat *slu_ipn; 66 void *slu_ptr; 67 } sl_un; 68 } synclist_t; 69 70 #define sl_ptr sl_un.slu_ptr 71 #define sl_ips sl_un.slu_ips 72 #define sl_ipn sl_un.slu_ipn 73 #define sl_magic sl_hdr.sm_magic 74 #define sl_v sl_hdr.sm_v 75 #define sl_p sl_hdr.sm_p 76 #define sl_cmd sl_hdr.sm_cmd 77 #define sl_rev sl_hdr.sm_rev 78 #define sl_table sl_hdr.sm_table 79 #define sl_num sl_hdr.sm_num 80 #define sl_len sl_hdr.sm_len 81 82 /* 83 * NOTE: SYNCLOG_SZ is defined *low*. It should be the next power of two 84 * up for whatever number of packets per second you expect to see. Be 85 * warned: this index's a table of large elements (upto 272 bytes in size 86 * each), and thus a size of 8192, for example, results in a 2MB table. 87 * The lesson here is not to use small machines for running fast firewalls 88 * (100BaseT) in sync, where you might have upwards of 10k pps. 89 */ 90 #define SYNCLOG_SZ 256 91 92 typedef struct synclogent { 93 struct synchdr sle_hdr; 94 union { 95 struct ipstate sleu_ips; 96 struct nat sleu_ipn; 97 } sle_un; 98 } synclogent_t; 99 100 typedef struct syncupdent { /* 28 or 32 bytes */ 101 struct synchdr sup_hdr; 102 struct synctcp_update sup_tcp; 103 } syncupdent_t; 104 105 extern void *ipf_sync_create __P((ipf_main_softc_t *)); 106 extern int ipf_sync_soft_init __P((ipf_main_softc_t *, void *)); 107 extern int ipf_sync_soft_fini __P((ipf_main_softc_t *, void *)); 108 extern int ipf_sync_canread __P((void *)); 109 extern int ipf_sync_canwrite __P((void *)); 110 extern void ipf_sync_del_nat __P((void *, synclist_t *)); 111 extern void ipf_sync_del_state __P((void *, synclist_t *)); 112 extern int ipf_sync_init __P((void)); 113 extern int ipf_sync_ioctl __P((ipf_main_softc_t *, caddr_t, ioctlcmd_t, int, int, void *)); 114 extern synclist_t *ipf_sync_new __P((ipf_main_softc_t *, int, fr_info_t *, void *)); 115 extern int ipf_sync_read __P((ipf_main_softc_t *, struct uio *uio)); 116 extern int ipf_sync_write __P((ipf_main_softc_t *, struct uio *uio)); 117 extern int ipf_sync_main_unload __P((void)); 118 extern void ipf_sync_update __P((ipf_main_softc_t *, int, fr_info_t *, synclist_t *)); 119 extern void ipf_sync_expire __P((ipf_main_softc_t *)); 120 extern void ipf_sync_soft_destroy __P((ipf_main_softc_t *, void *)); 121 extern void *ipf_sync_soft_create __P((ipf_main_softc_t *)); 122 123 #endif /* __IP_SYNC_H__ */ 124