diff --git a/README.md b/README.md
index 9117f26..f08da00 100755
--- a/README.md
+++ b/README.md
@@ -1,8 +1,19 @@
DDD# Reading-and-comprehense-linux-Kernel-network-protocol-stack
+
+nginx高并发设计优秀思想应用于其他高并发代理中间件:
+===================================
+ * [高性能 -Nginx 多进程高并发、低时延、高可靠机制在百万级缓存 (redis、memcache) 代理中间件中的应用](https://xie.infoq.cn/article/2ee961483c66a146709e7e861)
+
+redis、nginx、memcache、twemproxy、mongodb等更多中间件，分布式系统，高性能服务端核心思想实现博客:
+===================================
+ * [中间件、高性能服务器、分布式存储等(redis、memcache、pika、rocksdb、mongodb、wiredtiger、高性能代理中间件)二次开发、性能优化，逐步整理文档说明并配合demo指导](https://github.com/y123456yz/middleware_development_learning)
+
+
+
+===================================
linux内核网络协议栈阅读理解
- 本代码是linux内核网络协议栈源码(版本为2.6.35)，主要是我读研期间在一家公司实习的时候在业余时间分析阅读的，
-研究生毕业后由于工作需要，对读研期间没有阅读的剩余主要功能重新阅读了一遍。本代码对三层及其以上部分主要功能做
+ 本代码是linux内核网络协议栈源码(版本为2.6.35)，本代码对三层及其以上部分主要功能做
了详细注释，并对重要数据结构的各个成员进行了备注，同时对各个函数的调用关系都有详尽备注。主要参考资料为樊东东
老师的<linux内核源码剖析(上下册)>，再此对樊老师表示感谢，这是一本理解网络协议栈很好的书，两本合计1000多页，内
容比较多，但都很经典，对阅读内核协议栈源码有很大的帮助。
@@ -33,4 +44,3 @@ linux内核网络协议栈阅读理解
待分析主要模块:网桥模块，vlan模块，邻居子系统，路由表模块。
-阅读工具source insight,如果中文乱码，按照source insight configure目录中说明操作
\ No newline at end of file
diff --git a/linux-net-kernel/net/bridge/modules.order b/linux-net-kernel/net/bridge/modules.order
deleted file mode 100755
index aa745b3..0000000
--- a/linux-net-kernel/net/bridge/modules.order
+++ /dev/null
@@ -1,20 +0,0 @@
-kernel/net/bridge/bridge.ko
-kernel/net/bridge/br_d100.ko
-kernel/net/bridge/br_d100_data.ko
-kernel/net/bridge/br_d1000_data.ko
-kernel/net/bridge/br_d1000_proc.ko
-kernel/net/bridge/br_d1000.ko
-kernel/net/bridge/netfilter/ebtables.ko
-kernel/net/bridge/netfilter/ebtable_broute.ko
-kernel/net/bridge/netfilter/ebtable_filter.ko
-kernel/net/bridge/netfilter/ebtable_nat.ko
-kernel/net/bridge/netfilter/ebt_ip.ko
-kernel/net/bridge/netfilter/ebt_limit.ko
-kernel/net/bridge/netfilter/ebt_mark_m.ko
-kernel/net/bridge/netfilter/ebt_mark.ko
-kernel/net/bridge/netfilter/ebt_dnat.ko
-kernel/net/bridge/netfilter/ebt_redirect.ko
-kernel/net/bridge/netfilter/ebt_snat.ko
-kernel/net/bridge/netfilter/ebt_log.ko
-kernel/net/bridge/netfilter/ebt_ulog.ko
-kernel/net/bridge/netfilter/ebt_nflog.ko
diff --git a/linux-net-kernel/net/ipv4/modules.order b/linux-net-kernel/net/ipv4/modules.order
deleted file mode 100755
index 8305bab..0000000
--- a/linux-net-kernel/net/ipv4/modules.order
+++ /dev/null
@@ -1,75 +0,0 @@
-kernel/net/ipv4/netfilter/nf_gate_data.ko
-kernel/net/ipv4/netfilter/nf_sfc50_l.ko
-kernel/net/ipv4/netfilter/nf_sfc50_l_data.ko
-kernel/net/ipv4/netfilter/mtrie.ko
-kernel/net/ipv4/netfilter/nf_audit_work.ko
-kernel/net/ipv4/netfilter/nf_gate_work.ko
-kernel/net/ipv4/netfilter/nf_gate_proc.ko
-kernel/net/ipv4/netfilter/nf_gate_counter.ko
-kernel/net/ipv4/netfilter/nf_gate_counter_test.ko
-kernel/net/ipv4/netfilter/nf_n2n_checkptk.ko
-kernel/net/ipv4/netfilter/nf_n2n_sender.ko
-kernel/net/ipv4/netfilter/nf_gate_pri.ko
-kernel/net/ipv4/netfilter/nf_gate_if.ko
-kernel/net/ipv4/netfilter/nf_gate_pri_cache.ko
-kernel/net/ipv4/netfilter/nf_gate_nat.ko
-kernel/net/ipv4/netfilter/nf_gate_tmp_udp.ko
-kernel/net/ipv4/netfilter/nf_gate_ids.ko
-kernel/net/ipv4/netfilter/nf_gate_tcp_conntrack.ko
-kernel/net/ipv4/netfilter/nf_conntrack_ipv4.ko
-kernel/net/ipv4/netfilter/nf_nat.ko
-kernel/net/ipv4/netfilter/nf_defrag_ipv4.ko
-kernel/net/ipv4/netfilter/nf_nat_amanda.ko
-kernel/net/ipv4/netfilter/nf_nat_ftp.ko
-kernel/net/ipv4/netfilter/nf_nat_h323.ko
-kernel/net/ipv4/netfilter/nf_nat_irc.ko
-kernel/net/ipv4/netfilter/nf_nat_pptp.ko
-kernel/net/ipv4/netfilter/nf_nat_sip.ko
-kernel/net/ipv4/netfilter/nf_nat_snmp_basic.ko
-kernel/net/ipv4/netfilter/nf_nat_tftp.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_dccp.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_gre.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_udplite.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_sctp.ko
-kernel/net/ipv4/netfilter/ip_tables.ko
-kernel/net/ipv4/netfilter/iptable_filter.ko
-kernel/net/ipv4/netfilter/iptable_mangle.ko
-kernel/net/ipv4/netfilter/iptable_nat.ko
-kernel/net/ipv4/netfilter/iptable_raw.ko
-kernel/net/ipv4/netfilter/iptable_security.ko
-kernel/net/ipv4/netfilter/ipt_addrtype.ko
-kernel/net/ipv4/netfilter/ipt_ah.ko
-kernel/net/ipv4/netfilter/ipt_ecn.ko
-kernel/net/ipv4/netfilter/ipt_CLUSTERIP.ko
-kernel/net/ipv4/netfilter/ipt_ECN.ko
-kernel/net/ipv4/netfilter/ipt_LOG.ko
-kernel/net/ipv4/netfilter/ipt_MASQUERADE.ko
-kernel/net/ipv4/netfilter/ipt_NETMAP.ko
-kernel/net/ipv4/netfilter/ipt_REDIRECT.ko
-kernel/net/ipv4/netfilter/ipt_REJECT.ko
-kernel/net/ipv4/netfilter/ipt_ULOG.ko
-kernel/net/ipv4/netfilter/ip_queue.ko
-kernel/net/ipv4/ipip.ko
-kernel/net/ipv4/ip_gre.ko
-kernel/net/ipv4/ah4.ko
-kernel/net/ipv4/esp4.ko
-kernel/net/ipv4/ipcomp.ko
-kernel/net/ipv4/xfrm4_tunnel.ko
-kernel/net/ipv4/xfrm4_mode_beet.ko
-kernel/net/ipv4/tunnel4.ko
-kernel/net/ipv4/xfrm4_mode_transport.ko
-kernel/net/ipv4/xfrm4_mode_tunnel.ko
-kernel/net/ipv4/inet_diag.ko
-kernel/net/ipv4/tcp_diag.ko
-kernel/net/ipv4/tcp_bic.ko
-kernel/net/ipv4/tcp_cubic.ko
-kernel/net/ipv4/tcp_westwood.ko
-kernel/net/ipv4/tcp_highspeed.ko
-kernel/net/ipv4/tcp_hybla.ko
-kernel/net/ipv4/tcp_htcp.ko
-kernel/net/ipv4/tcp_vegas.ko
-kernel/net/ipv4/tcp_veno.ko
-kernel/net/ipv4/tcp_scalable.ko
-kernel/net/ipv4/tcp_lp.ko
-kernel/net/ipv4/tcp_yeah.ko
-kernel/net/ipv4/tcp_illinois.ko
diff --git a/linux-net-kernel/net/ipv4/netfilter/Makefile b/linux-net-kernel/net/ipv4/netfilter/Makefile
deleted file mode 100755
index 550f51a..0000000
--- a/linux-net-kernel/net/ipv4/netfilter/Makefile
+++ /dev/null
@@ -1,77 +0,0 @@
-#
-# Makefile for the netfilter modules on top of IPv4.
-#
-obj-y := decode.o
-obj-m := nf_gate_data.o nf_sfc50_l.o nf_sfc50_l_data.o mtrie.o nf_audit_work.o nf_gate_work.o nf_gate_proc.o nf_gate_counter.o \
- nf_gate_counter_test.o nf_n2n_checkptk.o nf_n2n_sender.o nf_gate_pri.o nf_gate_if.o nf_gate_pri_cache.o nf_gate_nat.o \
- nf_gate_tmp_udp.o nf_gate_ids.o nf_gate_tcp_conntrack.o
-
-# objects for l3 independent conntrack
-nf_conntrack_ipv4-objs := nf_conntrack_l3proto_ipv4.o nf_conntrack_proto_icmp.o
-ifeq ($(CONFIG_NF_CONNTRACK_PROC_COMPAT),y)
-ifeq ($(CONFIG_PROC_FS),y)
-nf_conntrack_ipv4-objs += nf_conntrack_l3proto_ipv4_compat.o
-endif
-endif
-
-nf_nat-objs := nf_nat_core.o nf_nat_helper.o nf_nat_proto_unknown.o nf_nat_proto_common.o nf_nat_proto_tcp.o nf_nat_proto_udp.o nf_nat_proto_icmp.o
-iptable_nat-objs := nf_nat_rule.o nf_nat_standalone.o
-
-# connection tracking
-obj-$(CONFIG_NF_CONNTRACK_IPV4) += nf_conntrack_ipv4.o
-
-obj-$(CONFIG_NF_NAT) += nf_nat.o
-
-# defrag
-obj-$(CONFIG_NF_DEFRAG_IPV4) += nf_defrag_ipv4.o
-
-# NAT helpers (nf_conntrack)
-obj-$(CONFIG_NF_NAT_AMANDA) += nf_nat_amanda.o
-obj-$(CONFIG_NF_NAT_FTP) += nf_nat_ftp.o
-obj-$(CONFIG_NF_NAT_H323) += nf_nat_h323.o
-obj-$(CONFIG_NF_NAT_IRC) += nf_nat_irc.o
-obj-$(CONFIG_NF_NAT_PPTP) += nf_nat_pptp.o
-obj-$(CONFIG_NF_NAT_SIP) += nf_nat_sip.o
-obj-$(CONFIG_NF_NAT_SNMP_BASIC) += nf_nat_snmp_basic.o
-obj-$(CONFIG_NF_NAT_TFTP) += nf_nat_tftp.o
-
-# NAT protocols (nf_nat)
-obj-$(CONFIG_NF_NAT_PROTO_DCCP) += nf_nat_proto_dccp.o
-obj-$(CONFIG_NF_NAT_PROTO_GRE) += nf_nat_proto_gre.o
-obj-$(CONFIG_NF_NAT_PROTO_UDPLITE) += nf_nat_proto_udplite.o
-obj-$(CONFIG_NF_NAT_PROTO_SCTP) += nf_nat_proto_sctp.o
-
-# generic IP tables
-obj-$(CONFIG_IP_NF_IPTABLES) += ip_tables.o
-
-# the three instances of ip_tables
-obj-$(CONFIG_IP_NF_FILTER) += iptable_filter.o
-obj-$(CONFIG_IP_NF_MANGLE) += iptable_mangle.o
-obj-$(CONFIG_NF_NAT) += iptable_nat.o
-obj-$(CONFIG_IP_NF_RAW) += iptable_raw.o
-obj-$(CONFIG_IP_NF_SECURITY) += iptable_security.o
-
-# matches
-obj-$(CONFIG_IP_NF_MATCH_ADDRTYPE) += ipt_addrtype.o
-obj-$(CONFIG_IP_NF_MATCH_AH) += ipt_ah.o
-obj-$(CONFIG_IP_NF_MATCH_ECN) += ipt_ecn.o
-
-# targets
-obj-$(CONFIG_IP_NF_TARGET_CLUSTERIP) += ipt_CLUSTERIP.o
-obj-$(CONFIG_IP_NF_TARGET_ECN) += ipt_ECN.o
-obj-$(CONFIG_IP_NF_TARGET_LOG) += ipt_LOG.o
-obj-$(CONFIG_IP_NF_TARGET_MASQUERADE) += ipt_MASQUERADE.o
-obj-$(CONFIG_IP_NF_TARGET_NETMAP) += ipt_NETMAP.o
-obj-$(CONFIG_IP_NF_TARGET_REDIRECT) += ipt_REDIRECT.o
-obj-$(CONFIG_IP_NF_TARGET_REJECT) += ipt_REJECT.o
-obj-$(CONFIG_IP_NF_TARGET_ULOG) += ipt_ULOG.o
-
-# generic ARP tables
-obj-$(CONFIG_IP_NF_ARPTABLES) += arp_tables.o
-obj-$(CONFIG_IP_NF_ARP_MANGLE) += arpt_mangle.o
-
-# just filtering instance of ARP tables for now
-obj-$(CONFIG_IP_NF_ARPFILTER) += arptable_filter.o
-
-obj-$(CONFIG_IP_NF_QUEUE) += ip_queue.o
-
diff --git a/linux-net-kernel/net/ipv4/netfilter/modules.order b/linux-net-kernel/net/ipv4/netfilter/modules.order
deleted file mode 100755
index 1a0e6ee..0000000
--- a/linux-net-kernel/net/ipv4/netfilter/modules.order
+++ /dev/null
@@ -1,51 +0,0 @@
-kernel/net/ipv4/netfilter/nf_gate_data.ko
-kernel/net/ipv4/netfilter/nf_sfc50_l.ko
-kernel/net/ipv4/netfilter/nf_sfc50_l_data.ko
-kernel/net/ipv4/netfilter/mtrie.ko
-kernel/net/ipv4/netfilter/nf_audit_work.ko
-kernel/net/ipv4/netfilter/nf_gate_work.ko
-kernel/net/ipv4/netfilter/nf_gate_proc.ko
-kernel/net/ipv4/netfilter/nf_gate_counter.ko
-kernel/net/ipv4/netfilter/nf_gate_counter_test.ko
-kernel/net/ipv4/netfilter/nf_n2n_checkptk.ko
-kernel/net/ipv4/netfilter/nf_n2n_sender.ko
-kernel/net/ipv4/netfilter/nf_gate_pri.ko
-kernel/net/ipv4/netfilter/nf_gate_if.ko
-kernel/net/ipv4/netfilter/nf_gate_pri_cache.ko
-kernel/net/ipv4/netfilter/nf_gate_nat.ko
-kernel/net/ipv4/netfilter/nf_gate_tmp_udp.ko
-kernel/net/ipv4/netfilter/nf_gate_ids.ko
-kernel/net/ipv4/netfilter/nf_gate_tcp_conntrack.ko
-kernel/net/ipv4/netfilter/nf_conntrack_ipv4.ko
-kernel/net/ipv4/netfilter/nf_nat.ko
-kernel/net/ipv4/netfilter/nf_defrag_ipv4.ko
-kernel/net/ipv4/netfilter/nf_nat_amanda.ko
-kernel/net/ipv4/netfilter/nf_nat_ftp.ko
-kernel/net/ipv4/netfilter/nf_nat_h323.ko
-kernel/net/ipv4/netfilter/nf_nat_irc.ko
-kernel/net/ipv4/netfilter/nf_nat_pptp.ko
-kernel/net/ipv4/netfilter/nf_nat_sip.ko
-kernel/net/ipv4/netfilter/nf_nat_snmp_basic.ko
-kernel/net/ipv4/netfilter/nf_nat_tftp.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_dccp.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_gre.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_udplite.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_sctp.ko
-kernel/net/ipv4/netfilter/ip_tables.ko
-kernel/net/ipv4/netfilter/iptable_filter.ko
-kernel/net/ipv4/netfilter/iptable_mangle.ko
-kernel/net/ipv4/netfilter/iptable_nat.ko
-kernel/net/ipv4/netfilter/iptable_raw.ko
-kernel/net/ipv4/netfilter/iptable_security.ko
-kernel/net/ipv4/netfilter/ipt_addrtype.ko
-kernel/net/ipv4/netfilter/ipt_ah.ko
-kernel/net/ipv4/netfilter/ipt_ecn.ko
-kernel/net/ipv4/netfilter/ipt_CLUSTERIP.ko
-kernel/net/ipv4/netfilter/ipt_ECN.ko
-kernel/net/ipv4/netfilter/ipt_LOG.ko
-kernel/net/ipv4/netfilter/ipt_MASQUERADE.ko
-kernel/net/ipv4/netfilter/ipt_NETMAP.ko
-kernel/net/ipv4/netfilter/ipt_REDIRECT.ko
-kernel/net/ipv4/netfilter/ipt_REJECT.ko
-kernel/net/ipv4/netfilter/ipt_ULOG.ko
-kernel/net/ipv4/netfilter/ip_queue.ko
diff --git a/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l.c b/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l.c
deleted file mode 100755
index caa8262..0000000
--- a/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l.c
+++ /dev/null
@@ -1,445 +0,0 @@
-#include <linux/types.h>
-#include <linux/ip.h>
-#include <linux/udp.h>
-#include <linux/tcp.h>
-#include <linux/icmp.h>
-#include <linux/netfilter.h>
-#include <linux/module.h>
-#include <linux/skbuff.h>
-#include <net/route.h>
-#include <net/ip.h>
-#include <net/udp.h>
-#include <net/tcp.h>
-
-#include <linux/netfilter_bridge.h>
-#include <linux/netfilter_ipv4.h>
-#include <net/netfilter/ipv4/nf_defrag_ipv4.h>
-#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
-#include <net/netfilter/nf_conntrack.h>
-#endif
-#include <net/netfilter/nf_conntrack_zones.h>
-
-#include "nf_sfc50_l_data.h"
-#include "nf_gate_data.h"
-#include "decode.h"
-
-#ifdef DEBUG
-#define SFC50_L_DBG(x) x
-#else
-#define SFC50_L_DBG(x)
-#endif
-
-#ifdef DBG_WARNING
-#define SFC50_L_WARN(x) x
-#else
-#define SFC50_L_WARN(x)
-#endif
-
-static unsigned int loopback_ip = (127 << 24)
- | (0 << 16)
- | (0 << 8)
- | 0;
-
-static inline void sfc50_l_l4_checksum(struct iphdr *oldiph)
-{
- if(oldiph->protocol == IPPROTO_TCP) {
- struct tcphdr *tcph;
- int datalen;
-
- datalen = ntohs(oldiph->tot_len) - (oldiph->ihl << 2);
- tcph = (struct tcphdr *)((unsigned char *)oldiph + (oldiph->ihl << 2));
- tcph->check = 0;
- tcph->check = tcp_v4_check(datalen,
- oldiph->saddr, oldiph->daddr,
- csum_partial(tcph,
- datalen, 0));
- }
- else if(oldiph->protocol == IPPROTO_UDP) {
- struct udphdr *udph;
- int datalen;
-
- udph = (struct udphdr *)((unsigned char *)oldiph + (oldiph->ihl << 2));
- if(udph->check) {
- datalen = ntohs(oldiph->tot_len) - (oldiph->ihl << 2);
- udph->check = 0;
- udph->check = csum_tcpudp_magic(oldiph->saddr, oldiph->daddr,
- datalen, IPPROTO_UDP,
- csum_partial(udph,
- datalen, 0));
- }
- }
-}
-
-/* ����������� */
-static unsigned int sfc50_l_hook_out(unsigned int hooknum,
- struct sk_buff *skb,
- const struct net_device *in,
- const struct net_device *out,
- int (*okfn)(struct sk_buff *))
-{
- struct iphdr *oldiph, *newiph;
- unsigned int max_headroom;
- struct sk_buff *new_skb;
- unsigned int newip;
-
- if(!sfc_dt.is_online)
- return NF_ACCEPT;
-
- oldiph = ip_hdr(skb);
-
- /* loopback */
- if(loopback_ip == (loopback_ip & ntohl(oldiph->saddr))
- || loopback_ip == (loopback_ip & ntohl(oldiph->daddr))) {
- SFC50_L_DBG(printk(KERN_DEBUG "tx: loopback pkt, skip it!!!\n"););
- return NF_ACCEPT;
- }
-
- /* UDP/TCP only */
- if(unlikely(IPPROTO_UDP != oldiph->protocol
- && IPPROTO_TCP != oldiph->protocol
- && IPPROTO_ICMP != oldiph->protocol))
- return NF_ACCEPT;
-
- /* ��������Ƭ */
- if(unlikely(oldiph->frag_off & htons(IP_OFFSET))) {
- SFC50_L_WARN(printk(KERN_WARNING "rx: rcv ip frag, skip it!!!\n"););
- return NF_ACCEPT;
- }
-
- if(unlikely(!pskb_may_pull(skb, ntohs(oldiph->tot_len)))) {
- SFC50_L_WARN(printk(KERN_DEBUG "<%s, %d>: rx: length skb error, drop it !!!\n",
- __FILE__, __LINE__););
- return NF_ACCEPT;
- }
-
- /* ����ģʽ */
- if(sfc_dt.mode & (1 << SFC50_L_M_NET)) {
- if((ntohl(oldiph->daddr) & sfc_dt.mask)
- == sfc_dt.prefix)
- return NF_ACCEPT;
- }
- if(sfc_dt.mode & (1 << SFC50_L_M_WHITE)) {
- if(mtrie_longest_match(sfc_dt.w_root,
- ntohl(oldiph->daddr))) {
- return NF_ACCEPT;
- }
- }
-
- /* Ҫ�ų�һ�����: �����������͵ġ�Ŀ���DZ���ID�ı��ģ�
- Ӧ����D100���ظ��������� */
- if(sfc_dt.id == ntohl(oldiph->daddr)) {
- SFC50_L_WARN(printk(KERN_WARNING "<%s, %d>: loopback to host, id=%08x, sip=%08x\n",
- __FILE__, __LINE__, sfc_dt.id, ntohl(oldiph->saddr)););
- newip = oldiph->daddr;
- oldiph->daddr = oldiph->saddr;
- oldiph->saddr = newip;
- sfc50_l_l4_checksum(oldiph);
- ip_send_check(oldiph);
- return NF_ACCEPT;
- }
-
- /* ���ز�ѯ */
- sfc50_l_data_lock();
- if(NF_DROP == sfc50_l_gw_find(skb, oldiph, &newip)) {
- sfc50_l_data_unlock();
- return NF_DROP;
- }
- sfc50_l_data_unlock();
-
- /* ��ʼ��װ */
- max_headroom = sizeof(struct iphdr) + MTP_AUTH_INFO_LEN + LL_MAX_HEADER;
- new_skb = skb_realloc_headroom(skb, max_headroom);
- if (!new_skb) {
- SFC50_L_WARN(printk(KERN_WARNING "<%s, %d>: no memory!!!\n",
- __FILE__, __LINE__););
- return NF_DROP;
- }
- if (skb->sk)
- skb_set_owner_w(new_skb, skb->sk);
- skb = new_skb;
- oldiph = ip_hdr(skb);
-
- skb_push(skb, sizeof(struct iphdr) + MTP_AUTH_INFO_LEN);
- skb_reset_network_header(skb);
- skb_set_transport_header(skb, sizeof(struct iphdr));
- memset(&(IPCB(skb)->opt), 0, sizeof(IPCB(skb)->opt));
-
- newiph = ip_hdr(skb);
- memcpy(newiph, oldiph, sizeof(struct iphdr));
- newiph->protocol = sfc_dt.is_inside ? IPPROTO_MTP_I : IPPROTO_MTP_O;
- newiph->daddr = newip; /* saddr is local ip address */
- newiph->tot_len = htons(ntohs(oldiph->tot_len) + sizeof(struct iphdr) + MTP_AUTH_INFO_LEN);
- newiph->ihl = 5;
-
- if((ntohl(oldiph->daddr) & 0xdc000000) == 0xdc000000) {
- oldiph->saddr = htonl(sfc_dt.id); /* set local ID */
- ip_send_check(oldiph);
- }
-
- if(sfc_dt.is_inside) {
- memset((unsigned char *)newiph + sizeof(struct iphdr),
- 0, MTP_AUTH_INFO_LEN); /* ��Դ��֤��Ϣ */
- }
- else {
- struct scatterlist sg;
-
- if(crypto_hash_init(&(sfc_dt.md5))) {
- printk(KERN_ALERT "<%s, %d>: MD5 init failed !!!\n",
- __FILE__, __LINE__);
- goto crypto_er;
- }
-
- sg_init_one(&sg, oldiph, sizeof(struct iphdr));
- if(crypto_hash_update(&(sfc_dt.md5), &sg, sizeof(struct iphdr))) {
- printk(KERN_ALERT "<%s, %d>: MD5 update failed !!!\n",
- __FILE__, __LINE__);
- goto crypto_er;
- }
-
- sg_init_one(&sg, &(sfc_dt.key), sizeof(int));
- if(crypto_hash_update(&(sfc_dt.md5), &sg, sizeof(int))) {
- printk(KERN_ALERT "<%s, %d>: MD5 update failed !!!\n",
- __FILE__, __LINE__);
- goto crypto_er;
- }
-
- if(crypto_hash_final(&(sfc_dt.md5), (unsigned char *)newiph
- + sizeof(struct iphdr))) {
- printk(KERN_ALERT "<%s, %d>: MD5 final failed !!!\n",
- __FILE__, __LINE__);
- goto crypto_er;
- }
- }
-
- /* l4 checksum */
- sfc50_l_l4_checksum(oldiph);
-
- /* checksum already */
- skb->ip_summed = CHECKSUM_UNNECESSARY;
-
- if (unlikely(ip_route_me_harder(skb, RTN_LOCAL))) {
- dev_kfree_skb(skb);
- SFC50_L_WARN(printk(KERN_WARNING "<%s, %d>: route failed!!!\n",
- __FILE__, __LINE__););
- return NF_DROP;
- }
-
- /* ip checksum here */
- ip_local_out(skb);
-
- return NF_DROP;
-
-crypto_er:
- dev_kfree_skb(skb);
- return NF_DROP;
-}
-
-/*- �������� -*/
-/* erp rx */
-static unsigned int sfc50_l_erp_rx(struct sk_buff *skb)
-{
- struct iphdr *iph;
- struct icmphdr *icmph;
- __sum16 checksum;
-
- return NF_ACCEPT; //for now, skip it
-
- iph = ip_hdr(skb);
-
- if(unlikely(!pskb_may_pull(skb, ntohs(iph->tot_len)))) {
- SFC50_L_DBG(printk(KERN_DEBUG "<%s, %d>: rx: length skb error, drop it !!!\n",
- __FILE__, __LINE__););
- return NF_DROP;
- }
-
- if(unlikely(ntohs(iph->tot_len) <= (iph->ihl << 2) +
- sizeof(struct icmphdr) + sizeof(struct iphdr))) {
- SFC50_L_WARN(printk(KERN_DEBUG "<%s, %d>: rx: length skb error, drop it !!!\n",
- __FILE__, __LINE__););
- return NF_DROP;
- }
-
- /* ICMP��� */
- icmph = (struct icmphdr *)((unsigned char *)iph + (iph->ihl << 2));
- checksum = icmph->checksum;
- icmph->checksum = 0;
- icmph->checksum = ip_compute_csum((void *)icmph,
- ntohs(iph->tot_len) - (iph->ihl << 2));
- if(unlikely(checksum != icmph->checksum)) {
- SFC50_L_DBG(printk(KERN_DEBUG "<%s, %d>: rx: bad erp checksum, drop it !!!\n",
- __FILE__, __LINE__););
- return NF_DROP;
- }
-
- /* ���ɴ�ԭʼIPͷ */
- iph = (struct iphdr *)((unsigned char *)iph + (iph->ihl << 2) +
- sizeof(struct icmphdr));
-
- /* ����������ɫ����Ҫ֪ͨ�û��ռ� */
- if(sfc_dt.is_inside) {
- sfc50_l_data_send(ntohl(iph->daddr));
- SFC50_L_DBG(printk(KERN_DEBUG "<%s, %d>: ERP rx, notify user-space unreach: <dst:%08x>\n",
- __FILE__, __LINE__, ntohl(iph->daddr)););
- }
-
- /* cache ���� */
- sfc50_l_data_lock();
- sfc50_l_cache_feedback(iph);
- sfc50_l_data_unlock();
-
- SFC50_L_DBG(printk(KERN_DEBUG "<%s, %d>: ERP rx, to local stack: <dst:%08x>\n",
- __FILE__, __LINE__, ntohl(iph->daddr)););
-
- return NF_ACCEPT;
-}
-
-/* mtp rx */
-static unsigned int sfc50_l_mtp_rx(struct sk_buff *skb)
-{
- struct pintercept_pkthdr pkthdr;
- Packet p;
- struct iphdr *iphdr;
- unsigned short oiph_len, ototal_len, pull_len;
-
- /* pkt valid */
- iphdr = ip_hdr(skb);
- oiph_len = iphdr->ihl << 2;
- ototal_len = ntohs(iphdr->tot_len);
-
- if(unlikely(ototal_len <= oiph_len + MTP_AUTH_INFO_LEN + sizeof(struct iphdr))) {
- SFC50_L_WARN(printk(KERN_DEBUG "<%s, %d>: rx: length skb error, drop it !!!\n",
- __FILE__, __LINE__););
- return NF_ACCEPT;
- }
-
- if(unlikely(!pskb_may_pull(skb, ototal_len))) {
- SFC50_L_WARN(printk(KERN_DEBUG "<%s, %d>: rx: length skb error, drop it !!!\n",
- __FILE__, __LINE__););
- return NF_ACCEPT;
- }
-
- /* make a ip eth frame */
- pull_len = oiph_len + MTP_AUTH_INFO_LEN - ETHERNET_HEADER_LEN;
- skb_pull(skb, pull_len);
-
- /* pintercept_pkthdr ready */
- pkthdr.len = ototal_len - pull_len;
- pkthdr.caplen = pkthdr.len;
-
- /* p */
- memset(&p, 0, sizeof(p));
- p.skb = skb;
-
- if(unlikely(NF_DROP == DecodeEthPkt(&p, &pkthdr, skb->data))) {
- SFC50_L_WARN(printk(KERN_DEBUG "<%s, %d>: rx: real pkt check error, drop it !!!\n",
- __FILE__, __LINE__););
- return NF_ACCEPT;
- }
-
- skb_pull(skb, ETHERNET_HEADER_LEN); /* skip eth layer */
- skb_reset_network_header(skb); /* set ip layer */
- iphdr = ip_hdr(skb);
- skb_set_transport_header(skb, iphdr->ihl << 2); /* set transport layer */
-
- //printk("<%s, %d>: rx OK: src=%08x, dst=%08x, proto=%u\n",
- // __FILE__, __LINE__, ntohl(iphdr->saddr),
- // ntohl(iphdr->daddr), iphdr->protocol);
-
- return NF_ACCEPT;
-}
-
-/* ����������� */
-static unsigned int sfc50_l_hook_in(unsigned int hooknum,
- struct sk_buff *skb,
- const struct net_device *in,
- const struct net_device *out,
- int (*okfn)(struct sk_buff *))
-{
- /* loopback */
- if(loopback_ip == (loopback_ip & ntohl(ip_hdr(skb)->saddr))
- || loopback_ip == (loopback_ip & ntohl(ip_hdr(skb)->daddr))) {
- SFC50_L_DBG(printk(KERN_DEBUG "rx: loopback pkt, skip it!!!\n"););
- return NF_ACCEPT;
- }
-
- /* ��������Ƭ */
- if(unlikely(ip_hdr(skb)->frag_off & htons(IP_OFFSET))) {
- SFC50_L_WARN(printk(KERN_WARNING "rx: rcv ip frag, skip it!!!\n"););
- return NF_ACCEPT;
- }
-
- /* Must be online */
- if(!sfc_dt.is_online)
- return NF_ACCEPT;
-
- /* MTP decode */
- if(IPPROTO_MTP_O == ip_hdr(skb)->protocol
- || IPPROTO_MTP_I == ip_hdr(skb)->protocol)
- return sfc50_l_mtp_rx(skb);
-
- /* ERP decode */
- if(IPPROTO_ERP == ip_hdr(skb)->protocol)
- return sfc50_l_erp_rx(skb);
-
- /* ignore other pkt */
- return NF_ACCEPT;
-}
-
-static struct nf_hook_ops ipv4_sfc50_l_ops[] = {
-#if 0
- {
- .hook = sfc50_l_hook_out,
- .owner = THIS_MODULE,
- .pf = PF_INET,
- .hooknum = NF_INET_LOCAL_OUT,
- .priority = NF_IP_PRI_SFC50_L_OUT,
- },
-#endif
- {
- .hook = sfc50_l_hook_out,//sfc50_l_hook_check,
- .owner = THIS_MODULE,
- .pf = PF_INET,
- .hooknum = NF_INET_POST_ROUTING,
- .priority = NF_IP_PRI_SFC50_L_OUT,
- },
- {
- .hook = sfc50_l_hook_in,
- .owner = THIS_MODULE,
- .pf = PF_INET,
- .hooknum = NF_INET_PRE_ROUTING,
- .priority = NF_IP_PRI_SFC50_L_IN,
- },
-};
-
-static int __init nf_sfc50_l_init(void)
-{
- int ret;
-
- ret = nf_register_hooks(ipv4_sfc50_l_ops, ARRAY_SIZE(ipv4_sfc50_l_ops));
- if(ret < 0) {
- printk(KERN_ERR "<%s, %s, %d>: !!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto failed_out0;
- }
-
- printk(KERN_INFO "sfc50_l module: init done.\n");
-
- return 0;
-
-failed_out0:
- return -1;
-}
-
-static void __exit nf_sfc50_l_fini(void)
-{
- nf_unregister_hooks(ipv4_sfc50_l_ops, ARRAY_SIZE(ipv4_sfc50_l_ops));
-
- printk(KERN_INFO "sfc50_l module: uninit done.\n");
-}
-
-module_init(nf_sfc50_l_init);
-module_exit(nf_sfc50_l_fini);
-
-MODULE_LICENSE("GPL");
-
-
diff --git a/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l_data.c b/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l_data.c
deleted file mode 100755
index 293b1fe..0000000
--- a/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l_data.c
+++ /dev/null
@@ -1,1179 +0,0 @@
-#include <linux/types.h>
-#include <linux/ip.h>
-#include <linux/udp.h>
-#include <linux/tcp.h>
-#include <linux/icmp.h>
-#include <linux/netfilter.h>
-#include <linux/skbuff.h>
-#include <net/route.h>
-#include <net/ip.h>
-#include <net/icmp.h>
-
-#include <linux/netfilter_bridge.h>
-#include <linux/netfilter_ipv4.h>
-#include <net/netfilter/ipv4/nf_defrag_ipv4.h>
-#if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE)
-#include <net/netfilter/nf_conntrack.h>
-#endif
-#include <net/netfilter/nf_conntrack_zones.h>
-#include "mtrie.h"
-#include "nf_sfc50_l_data.h"
-
-#ifdef DEBUG//DBG_WARNING
-#define DATA_DBG(x) x
-#else
-#define DATA_DBG(x)
-#endif
-
-#define SFC50_L_CACHE_BKT 8192
-#define SFC50_L_CACHE_TIMEOUT (60 * HZ)
-
-#define SFC50_L_FWD_BKT 8192
-
-static unsigned long sfc50_l_cache_timeout = 60 * HZ;
-static unsigned long sfc50_l_cache_retime = HZ;
-static unsigned long sfc50_l_cache_renotify = 0;//3 * HZ;
-
-/* ���ݸ� */
-sfc50_l_data sfc_dt = {
- .lock = __SPIN_LOCK_UNLOCKED(sfc_dt.lock),
-};
-EXPORT_SYMBOL_GPL(sfc_dt);
-
-/* declare */
-static inline void sfc50_l_data_clean(void);
-
-/* ����ڴ���� */
-static void *nf_sfc50_l_mblk(unsigned int *item_numb, size_t item_size, int *vmalloced)
-{
- void *ret;
- unsigned int nr_slots;
- size_t sz;
-
- *vmalloced = 0;
-
- nr_slots = *item_numb = roundup(*item_numb, PAGE_SIZE / item_size);
- sz = nr_slots * item_size;
- ret = (void *)__get_free_pages(GFP_KERNEL | __GFP_NOWARN | __GFP_ZERO,
- get_order(sz));
- if (!ret) {
- *vmalloced = 1;
- printk(KERN_WARNING "nf_gate_mblk: falling back to vmalloc.\n");
- ret = __vmalloc(sz, GFP_KERNEL | __GFP_ZERO, PAGE_KERNEL);
- }
-
- return ret;
-}
-
-static void nf_sfc50_l_fblk(void *blk, unsigned int bli_size, int vmalloced)
-{
- if (vmalloced)
- vfree(blk);
- else
- free_pages((unsigned long)blk, get_order(bli_size));
-}
-
-static int sfc50_l_op_role(kernel_msg *msg_ptr)
-{
- unsigned int *is_inside = (unsigned int *)msg_ptr->value;
-
- sfc50_l_data_lock();
-
- sfc_dt.is_inside = *is_inside;
- sfc_dt.is_online = 0;
- sfc50_l_data_clean();
-
- sfc50_l_data_unlock();
-
- DATA_DBG(printk("SFC50_L: set role %s\n",
- sfc_dt.is_inside ? "INSIDE" : "OUTSIDE"););
-
- return 0;
-}
-
-static int sfc50_l_op_id(kernel_msg * msg_ptr)
-{
- unsigned int *id = (unsigned int *)msg_ptr->value;
-
- sfc50_l_data_lock();
-
- sfc_dt.id = *id;
- sfc_dt.is_online = 0;
- sfc50_l_data_clean();
-
- sfc50_l_data_unlock();
-
- DATA_DBG(printk("SFC50_L: set id %08x\n",
- sfc_dt.id););
-
- return 0;
-}
-
-static int sfc50_l_op_online(kernel_msg * msg_ptr)
-{
- unsigned int *is_online = (unsigned int *)msg_ptr->value;
-
- sfc50_l_data_lock();
-
- sfc_dt.is_online = *is_online;
- //sfc50_l_data_clean();
-
- sfc50_l_data_unlock();
-
- DATA_DBG(printk("SFC50_L: set %s\n",
- sfc_dt.is_online ? "ONLINE" : "OFFLINE"););
-
- return 0;
-}
-
-static int sfc50_l_op_auth(kernel_msg * msg_ptr)
-{
- int *key_ptr = (int *)msg_ptr->value;
-
- sfc50_l_data_lock();
-
- sfc_dt.key = key_ptr[0];
-
- sfc50_l_data_unlock();
-
- DATA_DBG(printk("SFC50_L: set auth key %d\n", sfc_dt.key););
-
- return 0;
-}
-
-static int sfc50_l_op_gws(kernel_msg * msg_ptr)
-{
- unsigned int *gws = (unsigned int *)msg_ptr->value;
-
- sfc50_l_data_lock();
-
- memcpy(sfc_dt.gws, gws, sizeof(unsigned int) * MAX_STATION_GATE);
-
- sfc50_l_data_unlock();
-
- DATA_DBG({
- unsigned int i;
- char buf[256];
- char buf2[32];
-
- strcpy(buf, "SFC50_L: set gws ");
- for(i = 0; i < MAX_STATION_GATE - 1; i ++) {
- sprintf(buf2, "%08x ", sfc_dt.gws[i]);
- strcat(buf, buf2);
- }
- sprintf(buf2, "%08x\n", sfc_dt.gws[MAX_STATION_GATE - 1]);
- strcat(buf, buf2);
- });
-
- return 0;
-}
-
-static inline void sfc50_l_del_one_item(sfc_ct *cache_ptr)
-{
- hlist_del_init((&(cache_ptr->list)));
- hlist_del_init((&(cache_ptr->list_rule)));
-
- kmem_cache_free(sfc_dt.ct_cache, cache_ptr);
-
- DATA_DBG(printk("<%s, %d>: cache timeout: <dst:%08x, sp:%u, dp:%u, proto:%u, act:%s>\n",
- __FILE__, __LINE__, ntohl(cache_ptr->dst), ntohs(cache_ptr->sp),
- ntohs(cache_ptr->dp), cache_ptr->proto, (cache_ptr->nf_result ==NF_ACCEPT) ?
- "ACCEPT" : "DROP"););
-}
-
-static inline sfc_fwd_item *__sfc50_l_fwd_find(unsigned int hash_val, unsigned int dst)
-{
- sfc_fwd_item *fwd_ptr;
- struct hlist_node *n;
-
- hlist_for_each_entry(fwd_ptr, n, &(sfc_dt.fwd_bkt[hash_val]),
- list) {
- if(fwd_ptr->data.dst == dst)
- return fwd_ptr;
- }
-
- return NULL;
-}
-
-static inline sfc_fwd_item *sfc50_l_fwd_find(unsigned int dst)
-{
- unsigned int hash_val;
-
- hash_val = jhash_1word(dst, sfc_dt.fwd_rand) &
- (sfc_dt.fwd_bkt_numb - 1);
-
- return __sfc50_l_fwd_find(hash_val, dst);
-}
-
-static inline void sfc50_l_fwd_cache_clean(struct hlist_head *head_ptr)
-{
- sfc_ct *cache_ptr;
-
- while (!hlist_empty(head_ptr)) {
- cache_ptr = hlist_entry(head_ptr->first,
- sfc_ct, list_rule);
- if(del_timer(&(cache_ptr->timeout)))
- sfc50_l_del_one_item(cache_ptr);
- }
-}
-
-static int sfc50_l_op_fwd(kernel_msg *msg_ptr)
-{
- sfc_fwd_item *fwd_ptr;
- sfc_fwd_data *fr_ptr = (sfc_fwd_data *)msg_ptr->value;
- unsigned int hash_val;
-
- if(fr_ptr->numb > MAX_STATION_GATE) {
- printk(KERN_ERR "<%s, %d>: mtrie item too big gw number !!!\n",
- __FILE__, __LINE__);
- return -1;
- }
-
- hash_val = jhash_1word(fr_ptr->dst, sfc_dt.fwd_rand) &
- (sfc_dt.fwd_bkt_numb - 1);
-
- if(OPER_ADD == msg_ptr->opera) {
- DATA_DBG({
- unsigned int i;
- char buf[1024];
- char bufff[32];
-
- sprintf(buf, "Fwd mtrie add item: <%08x, %u:[",
- fr_ptr->dst, fr_ptr->numb);
- for(i = 0; i < fr_ptr->numb; i ++) {
- if(i + 1 == fr_ptr->numb) {
- sprintf(bufff, "%08x]>\n", fr_ptr->gw[i]);
- strcat(buf, bufff);
- } else {
- sprintf(bufff, "%08x, ", fr_ptr->gw[i]);
- strcat(buf, bufff);
- }
- }
- printk(buf);
- });
-
- fwd_ptr = kmem_cache_zalloc(sfc_dt.fwd_cache, GFP_KERNEL);
- if(NULL == fwd_ptr) {
- printk(KERN_ERR "<%s, %d>: mtrie item alloc failed !!!\n",
- __FILE__, __LINE__);
- return -1;
- }
-
- fwd_ptr->data = *fr_ptr;
-
- INIT_HLIST_HEAD(&(fwd_ptr->rule_cache));
-
- sfc50_l_data_lock();
-
- hlist_add_head(&(fwd_ptr->list), &(sfc_dt.fwd_bkt[hash_val]));
-
- sfc50_l_data_unlock();
-
- return 0;
- }
-
-
- sfc50_l_data_lock();
-
- fwd_ptr = __sfc50_l_fwd_find(hash_val, fr_ptr->dst);
- if(fwd_ptr) {
- hlist_del_init((&(fwd_ptr->list)));
- sfc50_l_fwd_cache_clean(&(fwd_ptr->rule_cache));
- kmem_cache_free(sfc_dt.fwd_cache, fwd_ptr);
- sfc50_l_data_unlock();
-
- DATA_DBG(printk("Fwd mtrie del item: <%08x>\n", fr_ptr->dst););
- }
-
- sfc50_l_data_unlock();
-
- return 0;
-}
-
-static void sfc50_l_cache_timeout_fn(unsigned long cache_item)
-{
- sfc_ct *cache_ptr = (sfc_ct *)cache_item;
-
- sfc50_l_data_lock();
-
- sfc50_l_del_one_item(cache_ptr);
-
- sfc50_l_data_unlock();
-}
-
-static inline void sfc50_l_unreach_notify(struct sk_buff *old_skb,
- struct iphdr *oldiph,
- sfc_ct *cache_ptr,
- int now)
-{
- /* ��ɫ�� */
- if(NF_DROP == cache_ptr->nf_result
- && IPPROTO_ICMP != oldiph->protocol) {
- icmp_send(old_skb, ICMP_DEST_UNREACH, ICMP_HOST_UNREACH, 0);
- DATA_DBG(printk("<%s, %d>: send cheat icmp unreach: <dst:%08x, src:%08x>\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr), ntohl(oldiph->saddr)););
- }
-
- /* ��������ɫ */
- if(sfc_dt.is_inside) {
- if(now) {
- sfc50_l_data_send(ntohl(oldiph->daddr));
- cache_ptr->tmsp = jiffies_64;
- DATA_DBG(printk("<%s, %d>: notify user-space unreach: <dst:%08x>, immediately\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr)););
- }
- else {
- sfc_fwd_item *fwd_ptr;
-
- DATA_DBG(printk("<%s, %d>: will search fwd rule: ...\n",
- __FILE__, __LINE__););
- fwd_ptr = sfc50_l_fwd_find(ntohl(oldiph->daddr));
- if(fwd_ptr) {
- cache_ptr->nf_result = NF_ACCEPT;
- /*- ECMP??? FIX ME -*/
- cache_ptr->gw = htonl(fwd_ptr->data.gw[0]);
- DATA_DBG(printk("<%s, %d>: fwd rule: found Rule\n",
- __FILE__, __LINE__););
- } else {
- DATA_DBG(printk("<%s, %d>: fwd rule: found Nothing\n",
- __FILE__, __LINE__););
- cache_ptr->nf_result = NF_DROP;
- if(jiffies_64 >= (cache_ptr->tmsp +
- sfc50_l_cache_renotify)) {
- /* re-find */
- sfc50_l_data_send(ntohl(oldiph->daddr));
- cache_ptr->tmsp = jiffies_64;
- DATA_DBG(printk("<%s, %d>: notify user-space unreach: <dst:%08x>, rate limit\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr)););
- }
- }
- }
-}
-}
-
-static inline sfc_ct *sfc50_l_cache_find(unsigned int hash_val,
- struct iphdr *oldiph,
- unsigned short source,
- unsigned short dest)
-{
- sfc_ct *cache_ptr;
- struct hlist_node *n;
-
- hlist_for_each_entry(cache_ptr, n, &(sfc_dt.ct_bkt[hash_val]),
- list) {
- if(cache_ptr->dst == oldiph->daddr
- && cache_ptr->sp == source
- && cache_ptr->dp == dest
- && cache_ptr->proto == oldiph->protocol) {
- return cache_ptr;
- }
- }
-
- return NULL;
-}
-
-static inline sfc_ct *sfc50_l_cache_add(unsigned int hash_val,
- struct iphdr *oldiph,
- unsigned short source,
- unsigned short dest)
-{
- sfc_ct *cache_ptr;
-
- cache_ptr = kmem_cache_zalloc(sfc_dt.ct_cache, GFP_ATOMIC);
- if(unlikely(!cache_ptr)) {
- printk(KERN_ERR "<%s, %d>: cache, no memory !!!\n",
- __FILE__, __LINE__);
- return NULL;
- }
- cache_ptr->dst = oldiph->daddr;
- cache_ptr->sp = source;
- cache_ptr->dp = dest;
- cache_ptr->proto = oldiph->protocol;
-
- hlist_add_head(&(cache_ptr->list), &(sfc_dt.ct_bkt[hash_val]));
-
- return cache_ptr;
-}
-
-static inline unsigned int sfc50_l_gw_find_inside(unsigned int hash_val,
- struct sk_buff *old_skb,
- struct iphdr *oldiph,
- unsigned short source,
- unsigned short dest,
- unsigned int *newip)
-{
- sfc_fwd_item *fwd_ptr;
- sfc_ct *cache_ptr;
-
- /* cache ���� */
- cache_ptr = sfc50_l_cache_find(hash_val, oldiph, source, dest);
- if(likely(cache_ptr)) {
- DATA_DBG(printk("<%s, %d>: cache hit: <dst:%08x, sp:%u, dp:%u, proto:%u, act:%s>\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr), ntohs(source), ntohs(dest),
- oldiph->protocol, (cache_ptr->nf_result ==NF_ACCEPT) ? "ACCEPT" : "DROP"););
-
- if(NF_ACCEPT == cache_ptr->nf_result) {
- unsigned long newtime;
-
- newtime = jiffies + sfc50_l_cache_timeout;
- DATA_DBG(printk("<%s, %d>: cache hit: <dst:%08x, sp:%u, dp:%u, proto:%u, act:%s>\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr), ntohs(source), ntohs(dest),
- oldiph->protocol, (cache_ptr->nf_result ==NF_ACCEPT) ? "ACCEPT" : "DROP"););
- if(newtime - cache_ptr->timeout.expires >=
- sfc50_l_cache_retime) {
- mod_timer_pending(&(cache_ptr->timeout), newtime);
- DATA_DBG(printk("<%s, %d>: cache timer refresh\n",
- __FILE__, __LINE__););
- }
- }
- else {
- sfc50_l_unreach_notify(old_skb, oldiph, cache_ptr, 0);
- }
-
- goto fnd_out;
- }
-
- /* cache ���� */
- cache_ptr = sfc50_l_cache_add(hash_val, oldiph, source, dest);
- if(unlikely(!cache_ptr))
- return NF_DROP;
- fwd_ptr = sfc50_l_fwd_find(ntohl(oldiph->daddr));
- if(fwd_ptr) {
- cache_ptr->nf_result = NF_ACCEPT;
- /*- ECMP??? FIX ME -*/
- cache_ptr->gw = htonl(fwd_ptr->data.gw[0]);
- hlist_add_head(&(cache_ptr->list_rule), &(fwd_ptr->rule_cache));
- DATA_DBG({
- unsigned int i;
- char buf[1024];
- char bufff[32];
-
- sprintf(buf, "<%s, %d>: Fwd find: <%08x, %u:[",
- __FILE__, __LINE__, fwd_ptr->data.dst,
- fwd_ptr->data.numb);
- for(i = 0; i < fwd_ptr->data.numb; i ++) {
- if(i + 1 == fwd_ptr->data.numb) {
- sprintf(bufff, "%08x]>\n", fwd_ptr->data.gw[i]);
- strcat(buf, bufff);
- } else {
- sprintf(bufff, "%08x, ", fwd_ptr->data.gw[i]);
- strcat(buf, bufff);
- }
- }
- printk(buf);
- });
- DATA_DBG(printk("<%s, %d>: cache add <dst:%08x, sp:%u, dp:%u, proto:%u, act:ACCEPT>\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr), ntohs(source), ntohs(dest),
- oldiph->protocol););
- }
- else {
- cache_ptr->nf_result = NF_DROP;
- hlist_add_head(&(cache_ptr->list_rule), &(sfc_dt.ct_drop_list));
- sfc50_l_unreach_notify(old_skb, oldiph, cache_ptr, 1);
- DATA_DBG(printk("<%s, %d>: cache add <dst:%08x, sp:%u, dp:%u, proto:%u, act:DROP>\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr), ntohs(source), ntohs(dest),
- oldiph->protocol););
- }
- setup_timer(&(cache_ptr->timeout), sfc50_l_cache_timeout_fn,
- (unsigned long)cache_ptr);
- cache_ptr->timeout.expires = jiffies + sfc50_l_cache_timeout;
- add_timer(&(cache_ptr->timeout));
-
-fnd_out:
- *newip = cache_ptr->gw;
-
- return cache_ptr->nf_result;
-}
-
-static inline unsigned int sfc50_l_gw_find_outside(unsigned int hash_val,
- struct sk_buff * old_skb,
- struct iphdr * oldiph,
- unsigned short source,
- unsigned short dest,
- unsigned int * newip)
-{
- sfc_ct *cache_ptr;
- unsigned long newtime;
-
- /* cache ���� */
- cache_ptr = sfc50_l_cache_find(hash_val, oldiph, source, dest);
- if(likely(cache_ptr)) {
- newtime = jiffies + sfc50_l_cache_timeout;
- DATA_DBG(printk("<%s, %d>: cache hit: <dst:%08x, sp:%u, dp:%u, proto:%u, act:%s>\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr), ntohs(source), ntohs(dest),
- oldiph->protocol, (cache_ptr->nf_result == NF_ACCEPT) ? "ACCEPT" : "DROP"););
- if(newtime - cache_ptr->timeout.expires >=
- sfc50_l_cache_retime) {
- mod_timer_pending(&(cache_ptr->timeout), newtime);
- DATA_DBG(printk("<%s, %d>: cache timer refresh\n",
- __FILE__, __LINE__););
- }
-
- /* ���ɴ�ͨ�� */
- if(NF_DROP == cache_ptr->nf_result)
- sfc50_l_unreach_notify(old_skb, oldiph, cache_ptr, 0);
-
- goto fnd_out;
- }
-
- /* cache ���� */
- cache_ptr = sfc50_l_cache_add(hash_val, oldiph, source, dest);
- if(unlikely(!cache_ptr))
- return NF_DROP;
- /*- ECMP??? FIX ME -*/
- cache_ptr->gw = htonl(sfc_dt.gws[0]);
- cache_ptr->nf_result = NF_ACCEPT; /* ����������ɫ��Ĭ�϶���ACCEPT */
- setup_timer(&(cache_ptr->timeout), sfc50_l_cache_timeout_fn,
- (unsigned long)cache_ptr);
- cache_ptr->timeout.expires = jiffies + sfc50_l_cache_timeout;
- add_timer(&(cache_ptr->timeout));
- DATA_DBG(printk("<%s, %d>: cache add <dst:%08x, sp:%u, dp:%u, proto:%u, act:ACCEPT>\n",
- __FILE__, __LINE__, ntohl(oldiph->daddr), ntohs(source), ntohs(dest),
- oldiph->protocol););
-
-fnd_out:
- *newip = cache_ptr->gw;
-
- return cache_ptr->nf_result;
-}
-
-unsigned int sfc50_l_gw_find(struct sk_buff *old_skb,
- struct iphdr *oldiph,
- unsigned int *newip)
-{
- unsigned int hash_val;
- sfc_ct_key key;
- struct udphdr *udph;
- struct tcphdr *tcph;
- struct icmphdr *icmph;
-
- if(IPPROTO_UDP == oldiph->protocol) {
- udph = (struct udphdr *)((unsigned char *)oldiph +
- (oldiph->ihl << 2));
- key.sp = udph->source;
- key.dp = udph->dest;
- }
- else if(IPPROTO_TCP == oldiph->protocol) {
- tcph = (struct tcphdr *)((unsigned char *)oldiph +
- (oldiph->ihl << 2));
- key.sp = tcph->source;
- key.dp = tcph->dest;
- }
- else if(IPPROTO_ICMP == oldiph->protocol) {
- icmph = (struct icmphdr *)((unsigned char *)oldiph +
- (oldiph->ihl << 2));
- key.sp = icmph->type;
- key.dp = icmph->code;
- }
- else
- return NF_DROP;
-
- key.dst = oldiph->daddr;
- key.proto = oldiph->protocol;
- hash_val = jhash(&key, sizeof(key), sfc_dt.ct_rand) &
- (sfc_dt.ct_bkt_numb - 1);
-
- if(sfc_dt.is_inside)
- return sfc50_l_gw_find_inside(hash_val, old_skb,
- oldiph, key.sp,
- key.dp, newip);
-
- return sfc50_l_gw_find_outside(hash_val, old_skb, oldiph,
- key.sp, key.dp,
- newip);
-
-}
-EXPORT_SYMBOL_GPL(sfc50_l_gw_find);
-
-int sfc50_l_cache_feedback(struct iphdr *iph)
-{
- sfc_ct *cache_ptr;
- unsigned int hash_val;
- sfc_ct_key key;
-
- struct l4_hdr {
- __be16 source;
- __be16 dest;
- } *chdr;
-
- if(unlikely(iph->protocol != IPPROTO_UDP
- && iph->protocol != IPPROTO_TCP))
- return -1;
-
- chdr = (struct l4_hdr *)((unsigned char *)iph +
- (iph->ihl << 2));
- key.dst = iph->daddr;
- key.sp = chdr->source;
- key.dp = chdr->dest;
- key.proto = iph->protocol;
- hash_val = jhash(&key, sizeof(key), sfc_dt.ct_rand) &
- (sfc_dt.ct_bkt_numb - 1);
-
- /* cache ���� */
- cache_ptr = sfc50_l_cache_find(hash_val, iph, chdr->source,
- chdr->dest);
-
- /* cache������ */
- if(likely(cache_ptr)) {
- if(NF_DROP != cache_ptr->nf_result) {
- cache_ptr->nf_result = NF_DROP;
- hlist_del_init(&(cache_ptr->list_rule));
- hlist_add_head(&(cache_ptr->list_rule), &(sfc_dt.ct_drop_list));
- DATA_DBG(printk(KERN_DEBUG "<%s, %d>: ERP cause to DROP: <dst:%08x, sp:%u, "
- "dp:%u, proto:%u>\n", __FILE__, __LINE__, ntohl(cache_ptr->dst),
- ntohs(cache_ptr->sp), ntohs(cache_ptr->dp), cache_ptr->proto););
- return 0;
- }
- }
-
- return -1;
-}
-EXPORT_SYMBOL_GPL(sfc50_l_cache_feedback);
-
-static int sfc50_l_op_wc(kernel_msg *msg_ptr)
-{
- unsigned int *mode = (unsigned int *)msg_ptr->value;
-
- if(OPER_ADD == msg_ptr->opera) {
- sfc_dt.mode |= 1 << (*mode);
- }
- else {
- sfc_dt.mode &= ~(1 << (*mode));
- }
-
- return 0;
-}
-
-static int sfc50_l_op_net(kernel_msg *msg_ptr)
-{
- sfc_net *data = (sfc_net *)msg_ptr->value;
-
- sfc_dt.prefix = data->prefix & data->mask;
- sfc_dt.mask = data->mask;
-
- return 0;
-}
-
-static int sfc50_l_op_wd(kernel_msg *msg_ptr)
-{
- mtrie_leaf_t *leaf_ptr;
- w_rule *fr_ptr = (w_rule *)msg_ptr->value;
-
- if(OPER_ADD == msg_ptr->opera) {
- leaf_ptr = kmem_cache_zalloc(sfc_dt.w_leaf_cache,
- GFP_ATOMIC);
- if(NULL == leaf_ptr) {
- printk(KERN_ERR "<%s, %d>: mtrie item alloc failed !!!\n",
- __FILE__, __LINE__);
- return -1;
- }
- leaf_ptr->prefix = fr_ptr->prefix;
- leaf_ptr->mask = fr_ptr->mask;
-
- sfc50_l_data_lock();
-
- if(FALSE == mtrie_leaf_insert(sfc_dt.w_root, leaf_ptr)) {
- sfc50_l_data_unlock();
- kmem_cache_free(sfc_dt.w_leaf_cache, leaf_ptr);
- printk(KERN_ERR "<%s, %d>: mtrie item add failed !!!\n",
- __FILE__, __LINE__);
- return -1;
- }
-
- sfc50_l_data_unlock();
-
- DATA_DBG(printk("<%s, %d>: w add: <%08x, %08x>\n",
- __FILE__, __LINE__, fr_ptr->prefix, fr_ptr->mask););
-
- return 0;
- }
-
- sfc50_l_data_lock();
-
- leaf_ptr = mtrie_lookup_exact(sfc_dt.w_root, fr_ptr->prefix, fr_ptr->mask);
- if(NULL == leaf_ptr) {
- sfc50_l_data_unlock();
-
- printk(KERN_ERR "<%s, %d>: mtrie item del failed !!!\n",
- __FILE__, __LINE__);
- return -1;
- }
- mtrie_leaf_delete(sfc_dt.w_root, leaf_ptr);
-
- sfc50_l_data_unlock();
-
- DATA_DBG(printk("<%s, %d>: w del: <%08x, %08x>\n",
- __FILE__, __LINE__, fr_ptr->prefix, fr_ptr->mask););
-
- kmem_cache_free(sfc_dt.w_leaf_cache, leaf_ptr);
-
- return 0;
-}
-
-
-/* NETLINK ���պ��� */
-
-/* --------------- */
-static void sfc50_l_data_from_user(kernel_msg *msg_ptr)
-{
- if(WK_MSG_SFC50_L == msg_ptr->type) {
- if(SFC50_L_ROLE == msg_ptr->sub_type)
- sfc50_l_op_role(msg_ptr);
-
- else if(SFC50_L_ID == msg_ptr->sub_type)
- sfc50_l_op_id(msg_ptr);
-
- else if(SFC50_L_ONLINE == msg_ptr->sub_type)
- sfc50_l_op_online(msg_ptr);
-
- else if(SFC50_L_AUTH == msg_ptr->sub_type)
- sfc50_l_op_auth(msg_ptr);
-
- else if(SFC50_L_GW == msg_ptr->sub_type)
- sfc50_l_op_gws(msg_ptr);
-
- else if(SFC50_L_FWD == msg_ptr->sub_type)
- sfc50_l_op_fwd(msg_ptr);
-
- else if(SFC50_L_WC == msg_ptr->sub_type)
- sfc50_l_op_wc(msg_ptr);
-
- else if(SFC50_L_WD == msg_ptr->sub_type)
- sfc50_l_op_wd(msg_ptr);
-
- else if(SFC50_L_NET == msg_ptr->sub_type)
- sfc50_l_op_net(msg_ptr);
-
- /* more ... */
- else {
- printk(KERN_ERR "<%s, %d>: netlink: bad msg sub_type !!!\n",
- __FILE__, __LINE__);
- }
- }
-
- /* more ... */
-
- else {
- printk(KERN_ERR "<%s, %d>: netlink: bad msg type !!!\n",
- __FILE__, __LINE__);
- }
-}
-
-static void sfc50_l_data_rcv_skb(struct sk_buff *skb)
-{
- kernel_msg *msg_ptr;
- struct nlmsghdr *nlh;
-
- nlh = nlmsg_hdr(skb);
-
- if (skb->len < NLMSG_SPACE(0) || skb->len < nlh->nlmsg_len ||
- nlh->nlmsg_len < NLMSG_LENGTH(sizeof(kernel_msg))) {
- printk(KERN_ERR "<%s, %s, %d>: work module: bad work_msg!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- return;
- }
-
- msg_ptr = NLMSG_DATA(nlh);
-
- sfc50_l_data_from_user(msg_ptr);
-}
-
-void sfc50_l_data_send(unsigned int dst)
-{
- unsigned int size;
- struct sk_buff *skb;
- struct nlmsghdr *nlh;
- unsigned int *dst_ptr;
-
- size = NLMSG_SPACE(sizeof(dst));
- skb = alloc_skb(size, GFP_ATOMIC);
- if (!skb) {
- printk(KERN_ERR "<%s, %d>: netlink: skb alloc failed !!!\n",
- __FILE__, __LINE__);
- return;
- }
-
- nlh = NLMSG_PUT(skb, 0, 0, 0, sizeof(dst));
- nlh->nlmsg_pid = 0; /*from kernel */
- dst_ptr = NLMSG_DATA(nlh);
- *dst_ptr = dst;
-
- netlink_broadcast(sfc_dt.nl[1], skb, 0, 1, GFP_ATOMIC);
-
- return;
-
-nlmsg_failure:
- kfree_skb(skb);
- printk(KERN_ERR "<%s, %d>: netlink: build header error !!!\n",
- __FILE__, __LINE__);
-}
-EXPORT_SYMBOL_GPL(sfc50_l_data_send);
-
-#ifdef CONFIG_PROC_FS
-static void *cmn_seq_start(struct seq_file *seq, loff_t *pos)
-{
- return *pos ? NULL : SEQ_START_TOKEN;
-}
-
-static void cmn_seq_stop(struct seq_file *seq, void *v)
-{
-}
-
-static void *cmn_seq_next(struct seq_file *seq, void *v, loff_t *pos)
-{
- return NULL;
-}
-
-static void sfc50_l_w_mtrie_callback(mtrie_leaf_t *leaf_entry, void *p1, void *p2)
-{
- struct seq_file *seq = p1;
- char buf[128];
-
- sprintf(buf, "<%08x, %08x>\n", leaf_entry->prefix,
- leaf_entry->mask);
- seq_puts(seq, buf);
-}
-
-static void sfc50_l_proc_all_show(struct seq_file *seq)
-{
- char buf[256];
- unsigned int i, j;
- sfc_fwd_item *fwd_ptr;
- sfc_ct *entry_ptr;
- struct hlist_node *n;
- char *mode_name[] = {
- "All",
- "Net",
- "ID",
- "White",
- "White2",
- NULL,
- };
-
- sfc50_l_data_lock();
-
- /* status */
- sprintf(buf, "Status:: Role:%s, ID:%08x, Online:%s\n\n",
- sfc_dt.is_inside ? "Inside" : "Outside",
- sfc_dt.id,
- sfc_dt.is_online ? "Yes" : "No");
- seq_puts(seq, buf);
-
- sprintf(buf, "Auth key: %d\n\n", sfc_dt.key);
- seq_puts(seq, buf);
-
- sprintf(buf, "Gws: total %u: ", sfc_dt.gw_numb);
- seq_puts(seq, buf);
- for(i = 0; i < MAX_STATION_GATE - 1; i ++) {
- sprintf(buf, "%08x ", sfc_dt.gws[i]);
- seq_puts(seq, buf);
- }
- sprintf(buf, "%08x\n\n", sfc_dt.gws[MAX_STATION_GATE - 1]);
- seq_puts(seq, buf);
-
- seq_puts(seq, "Fwd item: <dest, number:[gw-ip, ...]>\n");
- for(i = 0; i < sfc_dt.fwd_bkt_numb; i ++) {
- hlist_for_each_entry(fwd_ptr, n, &(sfc_dt.fwd_bkt[i]),
- list) {
- sprintf(buf, "<%08x, %u:[", fwd_ptr->data.dst,
- fwd_ptr->data.numb);
- seq_puts(seq, buf);
- for(j = 0; j < fwd_ptr->data.numb; j ++) {
- if(j + 1 == fwd_ptr->data.numb) {
- sprintf(buf, "%08x]>\n", fwd_ptr->data.gw[j]);
- seq_puts(seq, buf);
- }
- else {
- sprintf(buf, "%08x, ", fwd_ptr->data.gw[j]);
- seq_puts(seq, buf);
- }
- }
- }
- }
- seq_puts(seq, "\n");
-
- seq_puts(seq, "Cache item: <dst, sp, dp, proto, timestamp>\n");
- for(i = 0; i < sfc_dt.ct_bkt_numb; i ++) {
- hlist_for_each_entry(entry_ptr, n, &(sfc_dt.ct_bkt[i]),
- list) {
- sprintf(buf, "<%08x, %u, %u, %u, %llu>\n",
- ntohl(entry_ptr->dst), ntohs(entry_ptr->sp),
- ntohs(entry_ptr->dp), entry_ptr->proto,
- entry_ptr->tmsp);
- seq_puts(seq, buf);
- }
- }
- seq_puts(seq, "\n");
-
- sprintf(buf, "Work model (by value): %u\n", sfc_dt.mode);
- seq_puts(seq, buf);
- for(i = 0; i < SFC50_L_M_MAX; i ++ ) {
- if(sfc_dt.mode & (1 << i)) {
- sprintf(buf, "Work model: %s\n", mode_name[i]);
- seq_puts(seq, buf);
- }
- }
- sprintf(buf, "Net: %08x/%08x\n", sfc_dt.prefix, sfc_dt.mask);
- seq_puts(seq, buf);
- seq_puts(seq, "White item: <dst-prefix, dst-mask>\n");
- mtrie_walk(sfc_dt.w_root, sfc50_l_w_mtrie_callback,
- seq, NULL);
- seq_puts(seq, "\n");
-
- sfc50_l_data_unlock();
-}
-
-static int sfc50_l_all_seq_show(struct seq_file *seq, void *v)
-{
- sfc50_l_proc_all_show(seq);
-
- return 0;
-}
-
-static const struct seq_operations sfc50_l_all_seq_ops = {
- .start = cmn_seq_start,
- .next = cmn_seq_next,
- .stop = cmn_seq_stop,
- .show = sfc50_l_all_seq_show,
-};
-
-static int sfc50_l_all_seq_open(struct inode *inode, struct file *file)
-{
- return seq_open_net(inode, file, &sfc50_l_all_seq_ops, sizeof(struct seq_net_private));
-}
-
-static const struct file_operations sfc50_l_all_seq_fops = {
- .owner = THIS_MODULE,
- .open = sfc50_l_all_seq_open,
- .read = seq_read,
- .llseek = seq_lseek,
- .release = seq_release_net,
-};
-
-static int sfc50_l_proc_init(void)
-{
- if (!proc_net_fops_create(&init_net, "sfc50_l_all", 0, &sfc50_l_all_seq_fops)) {
- printk(KERN_ERR "<%s, %s, %d>: work module: init failed(when proc_net_fops_create)!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- return -1;
- }
-
- return 0;
-}
-
-static void sfc50_l_proc_uninit(void)
-{
- proc_net_remove(&init_net, "sfc50_l_all");
-}
-#endif
-
-static int sfc50_l_data_init(void)
-{
- unsigned int i;
-
- sfc_dt.gws = kzalloc(sizeof(unsigned int) * MAX_STATION_GATE, GFP_KERNEL);
- if(NULL == sfc_dt.gws) {
- printk(KERN_ERR "<%s, %d>: not enough memory !!!\n",
- __FILE__, __LINE__);
- goto err_quit0;
- }
-
- sfc_dt.fwd_bkt_numb = SFC50_L_FWD_BKT;
- sfc_dt.fwd_bkt = nf_sfc50_l_mblk(&(sfc_dt.fwd_bkt_numb),
- sizeof(struct hlist_head), &(sfc_dt.fwd_bkt_vmed));
- if(NULL == sfc_dt.fwd_bkt) {
- panic("<%s, %s, %d>: init failed(when kzalloc)!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit1;
- }
- for(i = 0; i < sfc_dt.fwd_bkt_numb; i ++) {
- INIT_HLIST_HEAD(&(sfc_dt.fwd_bkt[i]));
- }
- sfc_dt.fwd_cache = kmem_cache_create("fwd_item",
- sizeof(sfc_fwd_item), 0, SLAB_PANIC, NULL);
- if(NULL == sfc_dt.fwd_cache) {
- printk(KERN_ERR "<%s, %s, %d>: work module: init failed(when kmem_cache_create)!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit2;
- }
-
- sfc_dt.ct_bkt_numb = SFC50_L_CACHE_BKT;
- sfc_dt.ct_bkt = nf_sfc50_l_mblk(&(sfc_dt.ct_bkt_numb),
- sizeof(struct hlist_head), &(sfc_dt.ct_bkt_vmed));
- if(NULL == sfc_dt.ct_bkt) {
- printk(KERN_ERR "<%s, %s, %d>: work module: init failed(when kmem_cache_create)!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit3;
- }
- for(i = 0; i < sfc_dt.ct_bkt_numb; i ++) {
- INIT_HLIST_HEAD(&(sfc_dt.ct_bkt[i]));
- }
- sfc_dt.ct_cache = kmem_cache_create("ct_item",
- sizeof(sfc_ct), 0, SLAB_PANIC, NULL);
- if(NULL == sfc_dt.ct_cache) {
- printk(KERN_ERR "<%s, %s, %d>: work module: init failed(when kmem_cache_create)!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit4;
- }
- get_random_bytes(&(sfc_dt.ct_rand), sizeof(sfc_dt.ct_rand));
- INIT_HLIST_HEAD(&(sfc_dt.ct_drop_list));
-
- sfc_dt.w_root = kzalloc(sizeof(mtrie_root_t), GFP_KERNEL);
- if(NULL == sfc_dt.w_root) {
- panic("<%s, %s, %d>: init failed(when kzalloc)!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit5;
- }
-
- sfc_dt.w_leaf_cache = kmem_cache_create("w_leaf",
- sizeof(fwd_rule_entry), 0, SLAB_PANIC, NULL);
- if(NULL == sfc_dt.w_leaf_cache) {
- printk(KERN_ERR "<%s, %s, %d>: work module: init failed(when kmem_cache_create)!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit6;
- }
-
- sfc_dt.w_node_cache = kmem_cache_create("w_node",
- sizeof(mtrie_node_t), 0, SLAB_PANIC, NULL);
- if(NULL == sfc_dt.w_node_cache) {
- printk(KERN_ERR "<%s, %s, %d>: work module: init failed(when kmem_cache_create)!!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit7;
- }
-
- mtrie_init(sfc_dt.w_root, sfc_dt.w_node_cache);
-
- printk(KERN_INFO "fwd<%u, %u>, ct<%u, %u>\n",
- SFC50_L_FWD_BKT, sfc_dt.fwd_bkt_numb, SFC50_L_CACHE_BKT,
- sfc_dt.ct_bkt_numb);
-
-
- return 0;
-
-err_quit7:
- kmem_cache_destroy(sfc_dt.w_leaf_cache);
-err_quit6:
- kfree(sfc_dt.w_root);
-err_quit5:
- kmem_cache_destroy(sfc_dt.ct_cache);
-err_quit4:
- nf_sfc50_l_fblk(sfc_dt.ct_bkt, sizeof(struct hlist_head) *
- sfc_dt.ct_bkt_numb, sfc_dt.ct_bkt_vmed);
-err_quit3:
- kmem_cache_destroy(sfc_dt.fwd_cache);
-err_quit2:
- nf_sfc50_l_fblk(sfc_dt.fwd_bkt, sizeof(struct hlist_head) *
- sfc_dt.fwd_bkt_numb, sfc_dt.fwd_bkt_vmed);
-err_quit1:
- kfree(sfc_dt.gws);
-err_quit0:
- return -1;
-}
-
-static inline void sfc50_l_data_clean(void)
-{
- sfc_fwd_item *fwd_ptr;
- unsigned int i;
-
- for(i = 0; i < sfc_dt.fwd_bkt_numb; i ++) {
- while (!hlist_empty(&(sfc_dt.fwd_bkt[i]))) {
- fwd_ptr = hlist_entry(sfc_dt.fwd_bkt[i].first,
- sfc_fwd_item, list);
- hlist_del_init(&(fwd_ptr->list));
- sfc50_l_fwd_cache_clean(&(fwd_ptr->rule_cache));
- kmem_cache_free(sfc_dt.fwd_cache, fwd_ptr);
- }
- }
-
- sfc50_l_fwd_cache_clean(&(sfc_dt.ct_drop_list));
-
- sfc_dt.key = 0;
-}
-
-static void sfc50_l_data_uninit(void)
-{
- sfc50_l_data_clean();
- kfree(sfc_dt.gws);
- nf_sfc50_l_fblk(sfc_dt.fwd_bkt, sizeof(struct hlist_head) *
- sfc_dt.fwd_bkt_numb, sfc_dt.fwd_bkt_vmed);
- kmem_cache_destroy(sfc_dt.fwd_cache);
- nf_sfc50_l_fblk(sfc_dt.ct_bkt, sizeof(struct hlist_head) *
- sfc_dt.ct_bkt_numb, sfc_dt.ct_bkt_vmed);
-
- mtrie_clear2(sfc_dt.w_root, (mtrie_leaf_free_func *)kmem_cache_free,
- sfc_dt.w_leaf_cache);
- kfree(sfc_dt.w_root);
- kmem_cache_destroy(sfc_dt.w_leaf_cache);
- kmem_cache_destroy(sfc_dt.w_node_cache);
-}
-
-static int __init nf_sfc50_l_data_init(void)
-{
- if(0 != sfc50_l_data_init())
- goto err_quit0;
-
-#ifdef CONFIG_PROC_FS
- if(0 != sfc50_l_proc_init())
- goto err_quit1;
-#endif
-
- sfc_dt.nl[0] = netlink_kernel_create(&init_net, NETLINK_KERNEL_MSG, 32,
- sfc50_l_data_rcv_skb, NULL, THIS_MODULE);
- if (sfc_dt.nl[0] == NULL) {
- printk(KERN_ERR "<%s, %s, %d>: error !!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit2;
- }
-
- sfc_dt.nl[1] = netlink_kernel_create(&init_net, NETLINK_KERNEL_MSG + 1, 32,
- sfc50_l_data_rcv_skb, NULL, THIS_MODULE);
- if (sfc_dt.nl[1] == NULL) {
- printk(KERN_ERR "<%s, %s, %d>: error !!!\n",
- __FILE__, __FUNCTION__, __LINE__);
- goto err_quit3;
- }
-
- sfc_dt.md5.tfm = crypto_alloc_hash("md5", 0, CRYPTO_ALG_ASYNC);
- if (!(sfc_dt.md5.tfm) || IS_ERR(sfc_dt.md5.tfm)) {
- printk(KERN_DEBUG "<%s, %d>: sfc50_l: MD5 init failed !!!\n",
- __FILE__, __LINE__);
- goto err_quit4;
- }
-
- printk(KERN_INFO "sfc50_l data module: Init OK\n");
-
- return 0;
-err_quit4:
- netlink_kernel_release(sfc_dt.nl[1]);
-err_quit3:
- netlink_kernel_release(sfc_dt.nl[0]);
-err_quit2:
-#ifdef CONFIG_PROC_FS
- sfc50_l_proc_uninit();
-err_quit1:
-#endif
- sfc50_l_data_uninit();
-err_quit0:
- return -1;
-}
-
-static void __exit nf_sfc50_l_data_fini(void)
-{
- crypto_free_hash(sfc_dt.md5.tfm);
- netlink_kernel_release(sfc_dt.nl[1]);
- netlink_kernel_release(sfc_dt.nl[0]);
-
-#ifdef CONFIG_PROC_FS
- sfc50_l_proc_uninit();
-#endif
-
- sfc50_l_data_uninit();
-
- printk(KERN_INFO "sfc50_l data module: UnInit OK\n");
-}
-
-module_init(nf_sfc50_l_data_init);
-module_exit(nf_sfc50_l_data_fini);
-
-MODULE_LICENSE("GPL");
-
diff --git a/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l_data.h b/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l_data.h
deleted file mode 100755
index e9bda96..0000000
--- a/linux-net-kernel/net/ipv4/netfilter/nf_sfc50_l_data.h
+++ /dev/null
@@ -1,99 +0,0 @@
-#ifndef __NF_SFC50_L_DATA__
-#define __NF_SFC50_L_DATA__
-
-#include <linux/types.h>
-#include <linux/ip.h>
-#include <linux/netfilter.h>
-#include <linux/list.h>
-#include <linux/crypto.h>
-#include "../../apps/include/private/kernel/kernel_msg.h"
-#include "decode.h"
-#include "mtrie.h"
-#include "nf_gate_data.h"
-
-/* conntrack */
-typedef struct {
- unsigned int dst;
- unsigned short sp;
- unsigned short dp;
- unsigned char proto;
-} __attribute__((packed)) sfc_ct_key;
-
-typedef struct {
- struct hlist_node list;
- struct hlist_node list_rule;
- unsigned int dst;
- unsigned short sp;
- unsigned short dp;
- unsigned char proto;
- unsigned char pad[3];
- unsigned int gw;
- unsigned int nf_result;
- struct timer_list timeout; /* �Ựɾ����ʱ */
- u64 tmsp; /* ���ɴﷴ��ʱ��� */
-} sfc_ct;
-
-typedef struct {
- struct hlist_node list;
- struct hlist_head rule_cache;
- sfc_fwd_data data;
-} sfc_fwd_item;
-
-/* ȫ������ */
-typedef struct {
- unsigned int is_inside;
- unsigned int id;
- unsigned int is_online;
-
- int key;
- unsigned int gw_numb;
- unsigned int *gws;
-
- struct hlist_head *fwd_bkt;
- struct kmem_cache *fwd_cache;
- int fwd_bkt_vmed;
- unsigned int fwd_bkt_numb;
- unsigned int fwd_rand;
-
- struct hlist_head *ct_bkt;
- struct hlist_head ct_drop_list;
- struct kmem_cache *ct_cache;
- int ct_bkt_vmed;
- unsigned int ct_bkt_numb;
- unsigned int ct_rand;
-
- unsigned int mode; /* ����ģʽ */
- unsigned int prefix; /* ���� */
- unsigned int mask;
- mtrie_root_t *w_root; /* ������ */
- struct kmem_cache *w_leaf_cache;
- struct kmem_cache *w_node_cache;
-
- struct hash_desc md5;
-
- spinlock_t lock;
-
- struct sock *nl[2];
-} sfc50_l_data;
-
-extern sfc50_l_data sfc_dt;
-
-static inline void sfc50_l_data_lock(void)
-{
- spin_lock_bh(&(sfc_dt.lock));
-}
-
-static inline void sfc50_l_data_unlock(void)
-{
- spin_unlock_bh(&(sfc_dt.lock));
-}
-
-extern void sfc50_l_data_send(unsigned int dst);
-
-extern unsigned int sfc50_l_gw_find(struct sk_buff *old_skb,
- struct iphdr *oldiph,
- unsigned int *newip);
-
-extern int sfc50_l_cache_feedback(struct iphdr *iph);
-
-#endif /* __NF_SFC50_L_DATA__ */
diff --git a/linux-net-kernel/net/ipv4/netfilter/nf_sw_auth.h b/linux-net-kernel/net/ipv4/netfilter/nf_sw_auth.h
deleted file mode 100755
index e86f2f3..0000000
--- a/linux-net-kernel/net/ipv4/netfilter/nf_sw_auth.h
+++ /dev/null
@@ -1,290 +0,0 @@
-#ifndef __NF_SW_AUTH_H__
-#define __NF_SW_AUTH_H__
-
-#include <linux/list.h>
-
-
-#define NF_LOCAL_TIME_UTC_SECOND (8*60*60)//8Сʱ UTCʱ�䣬ͬ����ʱ���8Сʱ
-
-#define NF_SWITCH_HASH_TABLE_SIZE 1024
-
-#define NF_SWITCH_TIME_VALIDE 1//����ʱ�����Ҫ��
-#define NF_SWITCH_TIME_INVALIDE 0//��ʾʱ�䷶Χ�Ƿ���Ч
-
-#define NF_SWITCH_IN_TO_OUT 1
-#define NF_SWITCH_OUT_TO_IN 2
-#define NF_SWITCH_BIDIRECTION 3
-
-#define NF_SWITCH_LIMIT_MD_LEN 32
-
-/*Ӧ��Э���������ݽṹ*/
-#define NF_APP_ITEM_REL_TYPE_UNDEFINED 0xff
-#define NF_APP_ITEM_REL_TYPE_ANY 0
-#define NF_APP_ITEM_REL_TYPE_EQUAL 1
-#define NF_APP_ITEM_REL_TYPE_LEEQUAL 5
-#define NF_APP_ITEM_REL_TYPE_GEEQUAL 6
-#define NF_APP_ITEM_REL_TYPE_IN 7
-#define NF_APP_ITEM_REL_TYPE_ENUM 9
-
-/*�б�scope_list�������Ľڵ�Ķ˿ڷ�Χ���ݽṹ���£�*/
-/*��������TCP��*/
-struct nf_ac_tcp_port_scope{
- unsigned char src_op; /*Դ�˿ڹ�ϵ = <= >= IN ö�٣�ANY IN��ʾ����*/
- unsigned char src_num; /*Դ�˿�����*/
- unsigned char dst_op; /*Ŀ�Ķ˿ڹ�ϵ*/
- unsigned char dst_num; /*Ŀ�Ķ˿�����*/
- unsigned short port[0]; /*�˿����飬�������������Դ�˿ں�Ŀ�Ķ˿ڵ�����֮�ͣ�
- *����˳����Դ�˿�֮����Ŀ�Ķ˿�
- */
-};
-
-/*��������UDP��*/
-struct nf_ac_udp_port_scope{
- unsigned char src_op; /*Դ�˿ڹ�ϵ = <= >= IN ö�٣�ANY*/
- unsigned char src_num; /*Դ�˿�����*/
- unsigned char dst_op; /*Ŀ�Ķ˿ڹ�ϵ*/
- unsigned char dst_num; /*Ŀ�Ķ˿�����*/
- unsigned short port[0]; /*�˿����飬�������������Դ�˿ں�Ŀ�Ķ˿ڵ�����֮�ͣ�
- *����˳����Դ�˿�֮����Ŀ�Ķ˿�
- */
-};
-
-/*��������ICMP��*/
-struct nf_ac_icmp_scope{
- unsigned char type_op; /*ICMP����ϵ = <= >= IN ö�٣�ANY*/
- unsigned char type_num; /*Դ�˿�����*/
- unsigned char code_op; /*����ֵ�Ĺ�ϵ*/
- unsigned char code_num; /*����ֵ������*/
- unsigned char array[0]; /*���ͺʹ������飬����������������ͺʹ��������
- *����˳������������֮���Ǵ�������
- */
-};
-
-typedef struct _nf_app_coding_content_scope{
- struct list_head lh;
- unsigned char proto;//yang Ӧ��Э���������Э������
- union {
- struct nf_ac_tcp_port_scope tcp;
- struct nf_ac_udp_port_scope udp;
- struct nf_ac_icmp_scope icmp;
- }content;
-}nf_app_coding_content_scope;
-
-
-#define NF_APP_STATUS_ON 1
-#define NF_APP_STATUS_OFF 0
-typedef struct _nf_app_coding{//����������һ��Ӧ��Э��
- struct hlist_node hlist;//ͨ�����������ӵ�gate_app_coding_kernel_hash_array��
- char sequence[NF_SWITCH_LIMIT_MD_LEN+1];//Ӧ��Э������ index
- unsigned int h_seq;//yang ����ֵsequenceת��Ϊseq ������_nf_gate_md5_to_hseq
- unsigned char status;/*���û������� ҳ���Ͽ������úͽ��ø���Ӧ��Э�� */
-
- /*
- ��(��) 15:42:37
- /// </summary>
- TCP = ApprotocolControlLevelEnum.LevelOne,
- /// <summary>
- ///
- /// </summary>
- UDP = ApprotocolControlLevelEnum.LevelOne,
- /// <summary>
- ///
- /// </summary>
- ICMP = ApprotocolControlLevelEnum.LevelOne,
- /// <summary>
- ///
- /// </summary>
- PING = ApprotocolControlLevelEnum.LevelOne,
- /// <summary>
- ///
- /// </summary>
- HTT
- ��(��) 15:42:37
- P = ApprotocolControlLevelEnum.LevelOne,
- /// <summary>
- ///
- /// </summary>
- SMTP = ApprotocolControlLevelEnum.LevelOne,
- /// <summary>
- ///
- /// </summary>
- FTP = ApprotocolControlLevelEnum.LevelOne,
- /// <summary>
- ///
- /// </summary>
- POP3 = ApprotocolControlLevelEnum.LevelOne
- ��(��) 15:42:37
- /// <summary>
- ///
- /// </summary>
- LDG = ApprotocolControlLevelEnum.levelThree,
- /// <summary>
- ///
- /// </summary>
- SDG = ApprotocolControlLevelEnum.levelThree,
- /// <summary>
- ///
- /// </summary>
- RTITP = ApprotocolControlLevelEnum.levelThree,
- /// <summary>
- ///
- /// </summary>
- CSMXP = ApprotocolControlLevelEnum.levelThree,
- /// <summary>
- ///
- ��(��) 15:42:50
- one��two��three�ֱ��Ӧ1,2,3*/
- unsigned char intensity;//��ӦMCP��XML�����"CtrlLevel"
- unsigned char control_type;////�����ģ��̱��ģ�ʵʱ���ĵ� �ο�_gate_show_app_control_type ʵ����ûʲô��
- unsigned int pro_num;//��Э��ĸ��� ָ������Э����TCP UDP��ICMP�ĸ��� ����2��TCP һ��UDP��4��ICMP�����ֵΪ7
- char* name;//����
-
- // Э�� Դ�˿�/����ϵ Դ�˿�/ֵ Ŀ�Ķ˿�/����ϵ Ŀ�Ķ˿�/ֵ
- //�������� TCP = 5555 any
- struct list_head app_coding_list;//�����Э����������ο�WEBҳ�� nf_app_coding_content_scope �������Ӧ��Э���TCP UDP ICMP
-}nf_app_coding;
-
-
-/*===============================================================*/
-
-#define NF_ADDR_ITEM_REL_TYPE_ANY 0
-#define NF_ADDR_ITEM_REL_TYPE_EQUAL 1
-#define NF_ADDR_ITEM_REL_TYPE_IN 2
-#define NF_ADDR_ITEM_REL_TYPE_ENUM 3
-
-typedef struct _nf_sw_limit_address_item{
- struct list_head lh;
- unsigned char type;//���� ���� ö�� �ο�WEB
- unsigned char count;//��������䣬�����������������⣬��arry[0]��arry[1]�������������ַ�������arry[2],arry[3]�����������ַ
- unsigned int array[0];
-}nf_sw_limit_addr_item;
-
-//��:�����ַ�������������1.2.3.3/17,12.3.3.3/17 ����ʵ����web�ǰ��շ������η������ģ�Ҳ����_nf_sw_limit_address_itemΪ2
-//�����ַ�������������ö�� 1.1.1.1,2.2.2.2,3.3.3.3������һ�η������ģ�item����Ϊ1
-//�����ַ��������������1.2.3.3-1.3.3.3�����ַ��1.2.3.3,1.3.3.2,1.2.5.2 ����itemΪ1,arry��������1.2.3.3 1.3.3.3 1.2.3.3 1.3.3.2 1.2.5.2
-//���δ���⣬��countΪ0
-typedef struct _nf_sw_limit_addr{
- struct hlist_node hlist;
- char sequence[NF_SWITCH_LIMIT_MD_LEN+1];//YANG ��ַ��������index
- unsigned int h_seq;//ͨ��_nf_gate_md5_to_hseq������ĵ�ַ����indexת��Ϊseq
- char* name;//��ַ������
- struct list_head item_list;//_nf_sw_limit_address_item
-}nf_sw_limit_addr;
-
-
-#define NF_ITEM_REL_TYPE_ANY 0
-#define NF_ITEM_REL_TYPE_IN 1//��ʾ��ij��ʱ�䵽ij��ʱ�䣬ʱ���������� 1����㵽12������
-#define NF_ITEM_REL_TYPE_ENUM 2//��ijһ�쵽ijһ���еļ��㵽����ʱ����Dz������� 1�յ�12���е���㵽����֮��
-
-//����Ϊany��ʱ��day,start_tm,end_tm��Ч����Ϊ�����ʱ��day��Ч
-typedef struct _nf_sw_limit_time_item{
- struct list_head lh;
- unsigned char tm_type;//ʱ��������� ���� ���� ö�� ����Ϊany��ʱ��day,start_tm,end_tm��Ч����Ϊ�����ʱ��day��Ч
- unsigned char day;//���� ����λ��Ĺ�ϵ���ӵ�λ����Σһ���� ������ ����һ ���������� _nf_show_sw_limit_time_day
- unsigned int start_tm;//��ʼʱ�� ʱ��� ���Ϊ����Ļ��������ֵת�����ʵ��Ϊstart_tm:2013-12-1(������ʼʱ��) 14:55:0(ʱ����ʼʱ��) ������������ʵʱ�䣬ʱ�����ʵʱ�� end_tm:2013-12-20 21:57:1����
- unsigned int end_tm;
-}nf_sw_limit_time_item;
-
-typedef struct _nf_sw_limit_time{
- struct hlist_node hlist;//�ӵ�gate_sw_limit_time_kernel_hash_array hash����
- char sequence[NF_SWITCH_LIMIT_MD_LEN+1];//����index
- unsigned int h_seq;//����ת�����seqֵ
- unsigned int effective_area; /*������*/
- char* name;//ʱ���������
- struct list_head item_list;//_nf_sw_limit_time_item
- struct timer_list timer;
- unsigned int tm_flag;
-}nf_sw_limit_time;
-
-/*===============================================================*/
-#define NF_SW_AUTH_SRC_TYPE_ANY 0
-#define NF_SW_AUTH_SRC_TYPE_OBJ 1
-#define NF_SW_AUTH_SRC_TYPE_PREFIX 2
-
-#define NF_SW_AUTH_DST_TYPE_ANY 0
-#define NF_SW_AUTH_DST_TYPE_OBJ 1
-#define NF_SW_AUTH_DST_TYPE_PREFIX 2
-
-#define NF_SW_AUTH_TIME_TYPE_ANY 0//ʱ����� ����
-#define NF_SW_AUTH_TIME_TYPE_OBJ 1//ʱ���������Ϊ�������ö�٣��ο�WEB��ҳ
-
-typedef struct _nf_switch_id_prefix{
- unsigned int id;
- unsigned int id_prefix;
-}nf_switch_id_prefix;
-
-typedef struct _nf_switch_app_coding{
- struct list_head lh;
- char app_seq[NF_SWITCH_LIMIT_MD_LEN+1];//ͨ����ֵ��ȡgate_app_coding_kernel_hash_array��ֵ
-}nf_switch_app_coding;
-
-#define NF_SW_AUTH_AREA_ALL 0
-#define NF_SW_AUTH_AREA_REGION 1
-#define NF_SW_AUTH_AREA_AGENT 2
-
-
-//һ����������ֻ������һ��ʱ����� һ����ַ���� ���Զ��Ӧ��Э��
-typedef struct _nf_switch_authority{
- struct hlist_node hlist;
- char sequence[NF_SWITCH_LIMIT_MD_LEN+1];//�ù��������ֵ
- unsigned int h_seq;
- unsigned char log_level; /*��־���� yang ʵ����ûʲô�� */
- char* des;
- struct list_head app_coding_list; /*Ӧ��Э����� Ӧ��Э��ֱ�Ӽӵ��������� nf_switch_app_coding */
- unsigned char dst_type;//���ӽ��������ʱ��Ŀ�ĵ�ַ����:���� ��ַ���� ��ַ/��ַǰ
- union{
- unsigned int obj;
- nf_switch_id_prefix prefix;
- }dst;
- char dst_seq[NF_SWITCH_LIMIT_MD_LEN+1];//ͨ����ֵ��Ϊ���У��Ӷ���ȡgate_sw_limit_addr_kernel_hash_array��ֵ
- unsigned char time_type;
- char tm_obj[NF_SWITCH_LIMIT_MD_LEN+1];//ʱ��������� index ʱ��������Ч��ͨ����ʱ�������
- unsigned int tm_flag;//ʱ������Ƿ���Ч��ֻ����Ч�ù�������� ʱ�����Ϊ�������͵�ʱ����1 ����������__gate_sw_time_validate_authority
-}nf_switch_authority;
-
-
-/*********************************************
-
-*/
-typedef struct _nf_switch_user_rule_index{//Ϊ�û�����Ĺ��� �ýڵ����ӵ�_nf_switch_user_idip��rule_list
- struct list_head lh;//
- char rule_seq[NF_SWITCH_LIMIT_MD_LEN+1];
-}nf_switch_user_rule_index;
-
-typedef struct _nf_switch_user_idip{
- struct hlist_node id_hlist;
- struct hlist_node ip_hlist;
- unsigned int id;
- unsigned int ip;
- struct list_head rule_list;//nf_switch_user_rule_index
- struct list_head dynamic_rule_list;
-}nf_switch_user_idip;
-
-typedef struct _nf_switch_auth_mem_count{
- int app_coding_scp;//Ӧ��Э���������Э���ܸ���
- int app_coding;//Ӧ��Э���������web��������һ����ʱ������ͻ��һ��ɾ��һ����ʱ��ͻ��1
- int app_coding_name;
- int limit_time_item;
- int limit_time;
- int limit_time_name;
- int limit_addr_item;
- int limit_addr;
- int limit_addr_name;//��ַ�������
- int pri_des;//
- int pri;//�����������,�����û��Զ�������ϵͳ����
- int pri_app;//Ӧ��Э�鱻���õĴ���������ϵͳ������û��Զ������Ӧ�õ�
-} nf_switch_auth_mem_count;
-
-extern spinlock_t gate_privilege_lock;
-
-static inline void lock_privilege(void)
-{
- spin_lock_bh(&gate_privilege_lock);
-}
-
-static inline void unlock_privilege(void)
-{
- spin_unlock_bh(&gate_privilege_lock);
-}
-
-#endif
diff --git a/linux-net-kernel/net/modules.order b/linux-net-kernel/net/modules.order
deleted file mode 100755
index 9448504..0000000
--- a/linux-net-kernel/net/modules.order
+++ /dev/null
@@ -1,200 +0,0 @@
-kernel/net/802/p8022.ko
-kernel/net/802/psnap.ko
-kernel/net/802/stp.ko
-kernel/net/sched/sch_cbq.ko
-kernel/net/sched/sch_htb.ko
-kernel/net/sched/sch_hfsc.ko
-kernel/net/sched/sch_red.ko
-kernel/net/sched/sch_gred.ko
-kernel/net/sched/sch_dsmark.ko
-kernel/net/sched/sch_sfq.ko
-kernel/net/sched/sch_tbf.ko
-kernel/net/sched/sch_teql.ko
-kernel/net/sched/sch_prio.ko
-kernel/net/sched/sch_multiq.ko
-kernel/net/sched/sch_netem.ko
-kernel/net/sched/sch_drr.ko
-kernel/net/sched/cls_u32.ko
-kernel/net/sched/cls_route.ko
-kernel/net/sched/cls_fw.ko
-kernel/net/sched/cls_rsvp.ko
-kernel/net/sched/cls_tcindex.ko
-kernel/net/sched/cls_rsvp6.ko
-kernel/net/sched/cls_basic.ko
-kernel/net/sched/cls_flow.ko
-kernel/net/sched/cls_cgroup.ko
-kernel/net/netfilter/nfnetlink.ko
-kernel/net/netfilter/nfnetlink_queue.ko
-kernel/net/netfilter/nfnetlink_log.ko
-kernel/net/netfilter/nf_conntrack.ko
-kernel/net/netfilter/nf_conntrack_proto_dccp.ko
-kernel/net/netfilter/nf_conntrack_proto_gre.ko
-kernel/net/netfilter/nf_conntrack_proto_sctp.ko
-kernel/net/netfilter/nf_conntrack_proto_udplite.ko
-kernel/net/netfilter/nf_conntrack_netlink.ko
-kernel/net/netfilter/nf_conntrack_amanda.ko
-kernel/net/netfilter/nf_conntrack_ftp.ko
-kernel/net/netfilter/nf_conntrack_h323.ko
-kernel/net/netfilter/nf_conntrack_irc.ko
-kernel/net/netfilter/nf_conntrack_netbios_ns.ko
-kernel/net/netfilter/nf_conntrack_pptp.ko
-kernel/net/netfilter/nf_conntrack_sane.ko
-kernel/net/netfilter/nf_conntrack_sip.ko
-kernel/net/netfilter/nf_conntrack_tftp.ko
-kernel/net/netfilter/nf_tproxy_core.ko
-kernel/net/netfilter/x_tables.ko
-kernel/net/netfilter/xt_tcpudp.ko
-kernel/net/netfilter/xt_mark.ko
-kernel/net/netfilter/xt_connmark.ko
-kernel/net/netfilter/xt_CLASSIFY.ko
-kernel/net/netfilter/xt_CONNSECMARK.ko
-kernel/net/netfilter/xt_CT.ko
-kernel/net/netfilter/xt_DSCP.ko
-kernel/net/netfilter/xt_HL.ko
-kernel/net/netfilter/xt_LED.ko
-kernel/net/netfilter/xt_NFLOG.ko
-kernel/net/netfilter/xt_NFQUEUE.ko
-kernel/net/netfilter/xt_NOTRACK.ko
-kernel/net/netfilter/xt_RATEEST.ko
-kernel/net/netfilter/xt_SECMARK.ko
-kernel/net/netfilter/xt_TPROXY.ko
-kernel/net/netfilter/xt_TCPMSS.ko
-kernel/net/netfilter/xt_TCPOPTSTRIP.ko
-kernel/net/netfilter/xt_TEE.ko
-kernel/net/netfilter/xt_TRACE.ko
-kernel/net/netfilter/xt_cluster.ko
-kernel/net/netfilter/xt_comment.ko
-kernel/net/netfilter/xt_connbytes.ko
-kernel/net/netfilter/xt_connlimit.ko
-kernel/net/netfilter/xt_conntrack.ko
-kernel/net/netfilter/xt_dccp.ko
-kernel/net/netfilter/xt_dscp.ko
-kernel/net/netfilter/xt_esp.ko
-kernel/net/netfilter/xt_hashlimit.ko
-kernel/net/netfilter/xt_helper.ko
-kernel/net/netfilter/xt_hl.ko
-kernel/net/netfilter/xt_iprange.ko
-kernel/net/netfilter/xt_length.ko
-kernel/net/netfilter/xt_limit.ko
-kernel/net/netfilter/xt_mac.ko
-kernel/net/netfilter/xt_multiport.ko
-kernel/net/netfilter/xt_osf.ko
-kernel/net/netfilter/xt_owner.ko
-kernel/net/netfilter/xt_physdev.ko
-kernel/net/netfilter/xt_pkttype.ko
-kernel/net/netfilter/xt_policy.ko
-kernel/net/netfilter/xt_quota.ko
-kernel/net/netfilter/xt_rateest.ko
-kernel/net/netfilter/xt_realm.ko
-kernel/net/netfilter/xt_recent.ko
-kernel/net/netfilter/xt_sctp.ko
-kernel/net/netfilter/xt_socket.ko
-kernel/net/netfilter/xt_state.ko
-kernel/net/netfilter/xt_statistic.ko
-kernel/net/netfilter/xt_string.ko
-kernel/net/netfilter/xt_tcpmss.ko
-kernel/net/netfilter/xt_time.ko
-kernel/net/netfilter/xt_u32.ko
-kernel/net/ipv4/netfilter/nf_gate_data.ko
-kernel/net/ipv4/netfilter/nf_sfc50_l.ko
-kernel/net/ipv4/netfilter/nf_sfc50_l_data.ko
-kernel/net/ipv4/netfilter/mtrie.ko
-kernel/net/ipv4/netfilter/nf_audit_work.ko
-kernel/net/ipv4/netfilter/nf_gate_work.ko
-kernel/net/ipv4/netfilter/nf_gate_proc.ko
-kernel/net/ipv4/netfilter/nf_gate_counter.ko
-kernel/net/ipv4/netfilter/nf_gate_counter_test.ko
-kernel/net/ipv4/netfilter/nf_n2n_checkptk.ko
-kernel/net/ipv4/netfilter/nf_n2n_sender.ko
-kernel/net/ipv4/netfilter/nf_gate_pri.ko
-kernel/net/ipv4/netfilter/nf_gate_if.ko
-kernel/net/ipv4/netfilter/nf_gate_pri_cache.ko
-kernel/net/ipv4/netfilter/nf_gate_nat.ko
-kernel/net/ipv4/netfilter/nf_gate_tmp_udp.ko
-kernel/net/ipv4/netfilter/nf_gate_ids.ko
-kernel/net/ipv4/netfilter/nf_gate_tcp_conntrack.ko
-kernel/net/ipv4/netfilter/nf_conntrack_ipv4.ko
-kernel/net/ipv4/netfilter/nf_nat.ko
-kernel/net/ipv4/netfilter/nf_defrag_ipv4.ko
-kernel/net/ipv4/netfilter/nf_nat_amanda.ko
-kernel/net/ipv4/netfilter/nf_nat_ftp.ko
-kernel/net/ipv4/netfilter/nf_nat_h323.ko
-kernel/net/ipv4/netfilter/nf_nat_irc.ko
-kernel/net/ipv4/netfilter/nf_nat_pptp.ko
-kernel/net/ipv4/netfilter/nf_nat_sip.ko
-kernel/net/ipv4/netfilter/nf_nat_snmp_basic.ko
-kernel/net/ipv4/netfilter/nf_nat_tftp.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_dccp.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_gre.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_udplite.ko
-kernel/net/ipv4/netfilter/nf_nat_proto_sctp.ko
-kernel/net/ipv4/netfilter/ip_tables.ko
-kernel/net/ipv4/netfilter/iptable_filter.ko
-kernel/net/ipv4/netfilter/iptable_mangle.ko
-kernel/net/ipv4/netfilter/iptable_nat.ko
-kernel/net/ipv4/netfilter/iptable_raw.ko
-kernel/net/ipv4/netfilter/iptable_security.ko
-kernel/net/ipv4/netfilter/ipt_addrtype.ko
-kernel/net/ipv4/netfilter/ipt_ah.ko
-kernel/net/ipv4/netfilter/ipt_ecn.ko
-kernel/net/ipv4/netfilter/ipt_CLUSTERIP.ko
-kernel/net/ipv4/netfilter/ipt_ECN.ko
-kernel/net/ipv4/netfilter/ipt_LOG.ko
-kernel/net/ipv4/netfilter/ipt_MASQUERADE.ko
-kernel/net/ipv4/netfilter/ipt_NETMAP.ko
-kernel/net/ipv4/netfilter/ipt_REDIRECT.ko
-kernel/net/ipv4/netfilter/ipt_REJECT.ko
-kernel/net/ipv4/netfilter/ipt_ULOG.ko
-kernel/net/ipv4/netfilter/ip_queue.ko
-kernel/net/ipv4/ipip.ko
-kernel/net/ipv4/ip_gre.ko
-kernel/net/ipv4/ah4.ko
-kernel/net/ipv4/esp4.ko
-kernel/net/ipv4/ipcomp.ko
-kernel/net/ipv4/xfrm4_tunnel.ko
-kernel/net/ipv4/xfrm4_mode_beet.ko
-kernel/net/ipv4/tunnel4.ko
-kernel/net/ipv4/xfrm4_mode_transport.ko
-kernel/net/ipv4/xfrm4_mode_tunnel.ko
-kernel/net/ipv4/inet_diag.ko
-kernel/net/ipv4/tcp_diag.ko
-kernel/net/ipv4/tcp_bic.ko
-kernel/net/ipv4/tcp_cubic.ko
-kernel/net/ipv4/tcp_westwood.ko
-kernel/net/ipv4/tcp_highspeed.ko
-kernel/net/ipv4/tcp_hybla.ko
-kernel/net/ipv4/tcp_htcp.ko
-kernel/net/ipv4/tcp_vegas.ko
-kernel/net/ipv4/tcp_veno.ko
-kernel/net/ipv4/tcp_scalable.ko
-kernel/net/ipv4/tcp_lp.ko
-kernel/net/ipv4/tcp_yeah.ko
-kernel/net/ipv4/tcp_illinois.ko
-kernel/net/xfrm/xfrm_user.ko
-kernel/net/xfrm/xfrm_ipcomp.ko
-kernel/net/n2n_sysctl.ko
-kernel/net/n2n_netlink.ko
-kernel/net/llc/llc.ko
-kernel/net/unix/unix.ko
-kernel/net/packet/af_packet.ko
-kernel/net/key/af_key.ko
-kernel/net/bridge/bridge.ko
-kernel/net/bridge/br_d100.ko
-kernel/net/bridge/br_d100_data.ko
-kernel/net/bridge/br_d1000_data.ko
-kernel/net/bridge/br_d1000_proc.ko
-kernel/net/bridge/br_d1000.ko
-kernel/net/bridge/netfilter/ebtables.ko
-kernel/net/bridge/netfilter/ebtable_broute.ko
-kernel/net/bridge/netfilter/ebtable_filter.ko
-kernel/net/bridge/netfilter/ebtable_nat.ko
-kernel/net/bridge/netfilter/ebt_ip.ko
-kernel/net/bridge/netfilter/ebt_limit.ko
-kernel/net/bridge/netfilter/ebt_mark_m.ko
-kernel/net/bridge/netfilter/ebt_mark.ko
-kernel/net/bridge/netfilter/ebt_dnat.ko
-kernel/net/bridge/netfilter/ebt_redirect.ko
-kernel/net/bridge/netfilter/ebt_snat.ko
-kernel/net/bridge/netfilter/ebt_log.ko
-kernel/net/bridge/netfilter/ebt_ulog.ko
-kernel/net/bridge/netfilter/ebt_nflog.ko
diff --git "a/linu\345\206\205\346\240\270\345\215\217\350\256\256\346\240\210\346\272\220\347\240\201\351\230\205\350\257\273\347\220\206\350\247\243\350\257\246\347\273\206\346\263\250\351\207\212\350\257\264\346\230\216.c.txt" "b/linu\345\206\205\346\240\270\345\215\217\350\256\256\346\240\210\346\272\220\347\240\201\351\230\205\350\257\273\347\220\206\350\247\243\350\257\246\347\273\206\346\263\250\351\207\212\350\257\264\346\230\216.c.txt"
index 93db69c..670e0c7 100755
--- "a/linu\345\206\205\346\240\270\345\215\217\350\256\256\346\240\210\346\272\220\347\240\201\351\230\205\350\257\273\347\220\206\350\247\243\350\257\246\347\273\206\346\263\250\351\207\212\350\257\264\346\230\216.c.txt"
+++ "b/linu\345\206\205\346\240\270\345\215\217\350\256\256\346\240\210\346\272\220\347\240\201\351\230\205\350\257\273\347\220\206\350\247\243\350\257\246\347\273\206\346\263\250\351\207\212\350\257\264\346\230\216.c.txt"
@@ -1,8 +1,7 @@
DDD# Reading-and-comprehense-linux-Kernel-network-protocol-stack
linux�ں�����Э��ջ�Ķ�����
- ��������linux�ں�����Э��ջԴ��(�汾Ϊ2.6.35)����Ҫ���Ҷ����ڼ���һ�ҹ�˾ʵϰ��ʱ����ҵ��ʱ������Ķ��ģ�
-�о�����ҵ�����ڹ�����Ҫ���Զ����ڼ�û���Ķ���ʣ����Ҫ���������Ķ���һ�顣����������㼰�����ϲ�����Ҫ������
+ ��������linux�ں�����Э��ջԴ��(�汾Ϊ2.6.35)������������㼰�����ϲ�����Ҫ������
����ϸע�ͣ�������Ҫ���ݽṹ�ĸ�����Ա�����˱�ע��ͬʱ�Ը��������ĵ��ù�ϵ�����꾡��ע����Ҫ�ο�����Ϊ������
��ʦ��<linux�ں�Դ������(���²�)>���ٴ˶Է���ʦ��ʾ��л������һ����������Э��ջ�ܺõ��飬�����ϼ�1000��ҳ����
�ݱȽ϶࣬�����ܾ��䣬���Ķ��ں�Э��ջԴ���кܴ�İ�����
diff --git "a/linu\345\206\205\346\240\270\345\215\217\350\256\256\346\240\210\346\272\220\347\240\201\351\230\205\350\257\273\347\220\206\350\247\243\350\257\246\347\273\206\346\263\250\351\207\212\350\257\264\346\230\216.txt.txt" "b/linu\345\206\205\346\240\270\345\215\217\350\256\256\346\240\210\346\272\220\347\240\201\351\230\205\350\257\273\347\220\206\350\247\243\350\257\246\347\273\206\346\263\250\351\207\212\350\257\264\346\230\216.txt.txt"
index efb6603..670e0c7 100755
--- "a/linu\345\206\205\346\240\270\345\215\217\350\256\256\346\240\210\346\272\220\347\240\201\351\230\205\350\257\273\347\220\206\350\247\243\350\257\246\347\273\206\346\263\250\351\207\212\350\257\264\346\230\216.txt.txt"
+++ "b/linu\345\206\205\346\240\270\345\215\217\350\256\256\346\240\210\346\272\220\347\240\201\351\230\205\350\257\273\347\220\206\350\247\243\350\257\246\347\273\206\346\263\250\351\207\212\350\257\264\346\230\216.txt.txt"
@@ -1,8 +1,7 @@
DDD# Reading-and-comprehense-linux-Kernel-network-protocol-stack
linux�ں�����Э��ջ�Ķ�����
- ��������linux�ں�����Э��ջԴ��(�汾Ϊ2.6.35)����Ҫ���Ҷ����ڼ���һ�ҹ�˾ʵϰ��ʱ����ҵ��ʱ������Ķ��ģ�
-�о�����ҵ�����ڹ�����Ҫ���Զ����ڼ�û���Ķ���ʣ����Ҫ���������Ķ���һ�顣����������㼰�����ϲ�����Ҫ������
+ ��������linux�ں�����Э��ջԴ��(�汾Ϊ2.6.35)������������㼰�����ϲ�����Ҫ������
����ϸע�ͣ�������Ҫ���ݽṹ�ĸ�����Ա�����˱�ע��ͬʱ�Ը��������ĵ��ù�ϵ�����꾡��ע����Ҫ�ο�����Ϊ������
��ʦ��<linux�ں�Դ������(���²�)>���ٴ˶Է���ʦ��ʾ��л������һ����������Э��ջ�ܺõ��飬�����ϼ�1000��ҳ����
�ݱȽ϶࣬�����ܾ��䣬���Ķ��ں�Э��ջԴ���кܴ�İ�����
@@ -33,10 +32,3 @@ linux
��������Ҫģ��:����ģ�飬vlanģ�飬�ھ���ϵͳ��·�ɱ�ģ�顣
-
-
-
-
-
-�Ķ�����source insight,����������룬����source insight configureĿ¼��˵������
-