2 * Copyright (c) 2009, 2010, 2011, 2012 Nicira, Inc.
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at:
8 * http://www.apache.org/licenses/LICENSE-2.0
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
17 #ifndef OFPROTO_OFPROTO_PROVIDER_H
18 #define OFPROTO_OFPROTO_PROVIDER_H 1
20 /* Definitions for use within ofproto. */
22 #include "ofproto/ofproto.h"
24 #include "classifier.h"
27 #include "ofp-errors.h"
32 struct ofputil_flow_mod;
35 /* An OpenFlow switch.
37 * With few exceptions, ofproto implementations may look at these fields but
38 * should not modify them. */
40 struct hmap_node hmap_node; /* In global 'all_ofprotos' hmap. */
41 const struct ofproto_class *ofproto_class;
42 char *type; /* Datapath type. */
43 char *name; /* Datapath name. */
46 uint64_t fallback_dpid; /* Datapath ID if no better choice found. */
47 uint64_t datapath_id; /* Datapath ID. */
48 unsigned flow_eviction_threshold; /* Threshold at which to begin flow
49 * table eviction. Only affects the
50 * ofproto-dpif implementation */
51 bool forward_bpdu; /* Option to allow forwarding of BPDU frames
52 * when NORMAL action is invoked. */
53 char *mfr_desc; /* Manufacturer. */
54 char *hw_desc; /* Hardware. */
55 char *sw_desc; /* Software version. */
56 char *serial_desc; /* Serial number. */
57 char *dp_desc; /* Datapath description. */
58 enum ofp_config_flags frag_handling; /* One of OFPC_*. */
61 struct hmap ports; /* Contains "struct ofport"s. */
62 struct shash port_by_name;
65 struct oftable *tables;
68 /* OpenFlow connections. */
69 struct connmgr *connmgr;
71 /* Flow table operation tracking. */
72 int state; /* Internal state. */
73 struct list pending; /* List of "struct ofopgroup"s. */
74 unsigned int n_pending; /* list_size(&pending). */
75 struct hmap deletions; /* All OFOPERATION_DELETE "ofoperation"s. */
77 /* Linux VLAN device support (e.g. "eth0.10" for VLAN 10.)
79 * This is deprecated. It is only for compatibility with broken device
80 * drivers in old versions of Linux that do not properly support VLANs when
81 * VLAN devices are not used. When broken device drivers are no longer in
82 * widespread use, we will delete these interfaces. */
83 unsigned long int *vlan_bitmap; /* 4096-bit bitmap of in-use VLANs. */
84 bool vlans_changed; /* True if new VLANs are in use. */
85 int min_mtu; /* Current MTU of non-internal ports. */
88 void ofproto_init_tables(struct ofproto *, int n_tables);
90 struct ofproto *ofproto_lookup(const char *name);
91 struct ofport *ofproto_get_port(const struct ofproto *, uint16_t ofp_port);
93 /* An OpenFlow port within a "struct ofproto".
95 * With few exceptions, ofproto implementations may look at these fields but
96 * should not modify them. */
98 struct hmap_node hmap_node; /* In struct ofproto's "ports" hmap. */
99 struct ofproto *ofproto; /* The ofproto that contains this port. */
100 struct netdev *netdev;
101 struct ofputil_phy_port pp;
102 uint16_t ofp_port; /* OpenFlow port number. */
103 unsigned int change_seq;
107 void ofproto_port_set_state(struct ofport *, enum ofputil_port_state);
110 OFTABLE_HIDDEN = 1 << 0, /* Hide from most OpenFlow operations. */
111 OFTABLE_READONLY = 1 << 1 /* Don't allow OpenFlow to change this table. */
114 /* A flow table within a "struct ofproto". */
116 enum oftable_flags flags;
117 struct classifier cls; /* Contains "struct rule"s. */
118 char *name; /* Table name exposed via OpenFlow, or NULL. */
120 /* Maximum number of flows or UINT_MAX if there is no limit besides any
121 * limit imposed by resource limitations. */
122 unsigned int max_flows;
124 /* These members determine the handling of an attempt to add a flow that
125 * would cause the table to have more than 'max_flows' flows.
127 * If 'eviction_fields' is NULL, overflows will be rejected with an error.
129 * If 'eviction_fields' is nonnull (regardless of whether n_eviction_fields
130 * is nonzero), an overflow will cause a flow to be removed. The flow to
131 * be removed is chosen to give fairness among groups distinguished by
132 * different values for the subfields within 'groups'. */
133 struct mf_subfield *eviction_fields;
134 size_t n_eviction_fields;
138 * When a flow is added that would cause the table to have more than
139 * 'max_flows' flows, and 'eviction_fields' is nonnull, these groups are
140 * used to decide which rule to evict: the rule is chosen from the eviction
141 * group that contains the greatest number of rules.*/
142 uint32_t eviction_group_id_basis;
143 struct hmap eviction_groups_by_id;
144 struct heap eviction_groups_by_size;
147 /* Assigns TABLE to each oftable, in turn, in OFPROTO.
149 * All parameters are evaluated multiple times. */
150 #define OFPROTO_FOR_EACH_TABLE(TABLE, OFPROTO) \
151 for ((TABLE) = (OFPROTO)->tables; \
152 (TABLE) < &(OFPROTO)->tables[(OFPROTO)->n_tables]; \
155 /* An OpenFlow flow within a "struct ofproto".
157 * With few exceptions, ofproto implementations may look at these fields but
158 * should not modify them. */
160 struct list ofproto_node; /* Owned by ofproto base code. */
161 struct ofproto *ofproto; /* The ofproto that contains this rule. */
162 struct cls_rule cr; /* In owning ofproto's classifier. */
164 struct ofoperation *pending; /* Operation now in progress, if nonnull. */
166 ovs_be64 flow_cookie; /* Controller-issued identifier. */
168 long long int created; /* Creation time. */
169 long long int modified; /* Time of last modification. */
170 long long int used; /* Last use; time created if never used. */
171 uint16_t hard_timeout; /* In seconds from ->modified. */
172 uint16_t idle_timeout; /* In seconds from ->used. */
173 uint8_t table_id; /* Index in ofproto's 'tables' array. */
174 bool send_flow_removed; /* Send a flow removed message? */
176 /* Eviction groups. */
177 bool evictable; /* If false, prevents eviction. */
178 struct heap_node evg_node; /* In eviction_group's "rules" heap. */
179 struct eviction_group *eviction_group; /* NULL if not in any group. */
181 union ofp_action *actions; /* OpenFlow actions. */
182 int n_actions; /* Number of elements in actions[]. */
185 static inline struct rule *
186 rule_from_cls_rule(const struct cls_rule *cls_rule)
188 return cls_rule ? CONTAINER_OF(cls_rule, struct rule, cr) : NULL;
191 void ofproto_rule_update_used(struct rule *, long long int used);
192 void ofproto_rule_expire(struct rule *, uint8_t reason);
193 void ofproto_rule_destroy(struct rule *);
195 void ofoperation_complete(struct ofoperation *, enum ofperr);
196 struct rule *ofoperation_get_victim(struct ofoperation *);
198 /* ofproto class structure, to be defined by each ofproto implementation.
204 * These functions work primarily with three different kinds of data
207 * - "struct ofproto", which represents an OpenFlow switch.
209 * - "struct ofport", which represents a port within an ofproto.
211 * - "struct rule", which represents an OpenFlow flow within an ofproto.
213 * Each of these data structures contains all of the implementation-independent
214 * generic state for the respective concept, called the "base" state. None of
215 * them contains any extra space for ofproto implementations to use. Instead,
216 * each implementation is expected to declare its own data structure that
217 * contains an instance of the generic data structure plus additional
218 * implementation-specific members, called the "derived" state. The
219 * implementation can use casts or (preferably) the CONTAINER_OF macro to
220 * obtain access to derived state given only a pointer to the embedded generic
227 * Four stylized functions accompany each of these data structures:
229 * "alloc" "construct" "destruct" "dealloc"
230 * ------------ ---------------- --------------- --------------
231 * ofproto ->alloc ->construct ->destruct ->dealloc
232 * ofport ->port_alloc ->port_construct ->port_destruct ->port_dealloc
233 * rule ->rule_alloc ->rule_construct ->rule_destruct ->rule_dealloc
235 * Any instance of a given data structure goes through the following life
238 * 1. The client calls the "alloc" function to obtain raw memory. If "alloc"
239 * fails, skip all the other steps.
241 * 2. The client initializes all of the data structure's base state. If this
242 * fails, skip to step 7.
244 * 3. The client calls the "construct" function. The implementation
245 * initializes derived state. It may refer to the already-initialized
246 * base state. If "construct" fails, skip to step 6.
248 * 4. The data structure is now initialized and in use.
250 * 5. When the data structure is no longer needed, the client calls the
251 * "destruct" function. The implementation uninitializes derived state.
252 * The base state has not been uninitialized yet, so the implementation
253 * may still refer to it.
255 * 6. The client uninitializes all of the data structure's base state.
257 * 7. The client calls the "dealloc" to free the raw memory. The
258 * implementation must not refer to base or derived state in the data
259 * structure, because it has already been uninitialized.
261 * Each "alloc" function allocates and returns a new instance of the respective
262 * data structure. The "alloc" function is not given any information about the
263 * use of the new data structure, so it cannot perform much initialization.
264 * Its purpose is just to ensure that the new data structure has enough room
265 * for base and derived state. It may return a null pointer if memory is not
266 * available, in which case none of the other functions is called.
268 * Each "construct" function initializes derived state in its respective data
269 * structure. When "construct" is called, all of the base state has already
270 * been initialized, so the "construct" function may refer to it. The
271 * "construct" function is allowed to fail, in which case the client calls the
272 * "dealloc" function (but not the "destruct" function).
274 * Each "destruct" function uninitializes and frees derived state in its
275 * respective data structure. When "destruct" is called, the base state has
276 * not yet been uninitialized, so the "destruct" function may refer to it. The
277 * "destruct" function is not allowed to fail.
279 * Each "dealloc" function frees raw memory that was allocated by the the
280 * "alloc" function. The memory's base and derived members might not have ever
281 * been initialized (but if "construct" returned successfully, then it has been
282 * "destruct"ed already). The "dealloc" function is not allowed to fail.
288 * Most of these functions return 0 if they are successful or a positive error
289 * code on failure. Depending on the function, valid error codes are either
290 * errno values or OFPERR_* OpenFlow error codes.
292 * Most of these functions are expected to execute synchronously, that is, to
293 * block as necessary to obtain a result. Thus, these functions may return
294 * EAGAIN (or EWOULDBLOCK or EINPROGRESS) only where the function descriptions
295 * explicitly say those errors are a possibility. We may relax this
296 * requirement in the future if and when we encounter performance problems. */
297 struct ofproto_class {
298 /* ## ----------------- ## */
299 /* ## Factory Functions ## */
300 /* ## ----------------- ## */
302 /* Enumerates the types of all support ofproto types into 'types'. The
303 * caller has already initialized 'types' and other ofproto classes might
304 * already have added names to it. */
305 void (*enumerate_types)(struct sset *types);
307 /* Enumerates the names of all existing datapath of the specified 'type'
308 * into 'names' 'all_dps'. The caller has already initialized 'names' as
311 * 'type' is one of the types enumerated by ->enumerate_types().
313 * Returns 0 if successful, otherwise a positive errno value.
315 int (*enumerate_names)(const char *type, struct sset *names);
317 /* Deletes the datapath with the specified 'type' and 'name'. The caller
318 * should have closed any open ofproto with this 'type' and 'name'; this
319 * function is allowed to fail if that is not the case.
321 * 'type' is one of the types enumerated by ->enumerate_types().
322 * 'name' is one of the names enumerated by ->enumerate_names() for 'type'.
324 * Returns 0 if successful, otherwise a positive errno value.
326 int (*del)(const char *type, const char *name);
328 /* ## --------------------------- ## */
329 /* ## Top-Level ofproto Functions ## */
330 /* ## --------------------------- ## */
332 /* Life-cycle functions for an "ofproto" (see "Life Cycle" above).
338 * ->construct() should not modify any base members of the ofproto. The
339 * client will initialize the ofproto's 'ports' and 'tables' members after
340 * construction is complete.
342 * When ->construct() is called, the client does not yet know how many flow
343 * tables the datapath supports, so ofproto->n_tables will be 0 and
344 * ofproto->tables will be NULL. ->construct() should call
345 * ofproto_init_tables() to allocate and initialize ofproto->n_tables and
346 * ofproto->tables. Each flow table will be initially empty, so
347 * ->construct() should delete flows from the underlying datapath, if
348 * necessary, rather than populating the tables.
350 * Only one ofproto instance needs to be supported for any given datapath.
351 * If a datapath is already open as part of one "ofproto", then another
352 * attempt to "construct" the same datapath as part of another ofproto is
353 * allowed to fail with an error.
355 * ->construct() returns 0 if successful, otherwise a positive errno
362 * If 'ofproto' has any pending asynchronous operations, ->destruct()
363 * must complete all of them by calling ofoperation_complete().
365 * ->destruct() must also destroy all remaining rules in the ofproto's
366 * tables, by passing each remaining rule to ofproto_rule_destroy(). The
367 * client will destroy the flow tables themselves after ->destruct()
370 struct ofproto *(*alloc)(void);
371 int (*construct)(struct ofproto *ofproto);
372 void (*destruct)(struct ofproto *ofproto);
373 void (*dealloc)(struct ofproto *ofproto);
375 /* Performs any periodic activity required by 'ofproto'. It should:
377 * - Call connmgr_send_packet_in() for each received packet that missed
378 * in the OpenFlow flow table or that had a OFPP_CONTROLLER output
381 * - Call ofproto_rule_expire() for each OpenFlow flow that has reached
382 * its hard_timeout or idle_timeout, to expire the flow.
384 * Returns 0 if successful, otherwise a positive errno value. */
385 int (*run)(struct ofproto *ofproto);
387 /* Performs periodic activity required by 'ofproto' that needs to be done
388 * with the least possible latency.
390 * This is run multiple times per main loop. An ofproto provider may
391 * implement it or not, according to whether it provides a performance
392 * boost for that ofproto implementation. */
393 int (*run_fast)(struct ofproto *ofproto);
395 /* Causes the poll loop to wake up when 'ofproto''s 'run' function needs to
396 * be called, e.g. by calling the timer or fd waiting functions in
398 void (*wait)(struct ofproto *ofproto);
400 /* Adds some memory usage statistics for the implementation of 'ofproto'
401 * into 'usage', for use with memory_report().
403 * This function is optional. */
404 void (*get_memory_usage)(const struct ofproto *ofproto,
405 struct simap *usage);
407 /* Every "struct rule" in 'ofproto' is about to be deleted, one by one.
408 * This function may prepare for that, for example by clearing state in
409 * advance. It should *not* actually delete any "struct rule"s from
410 * 'ofproto', only prepare for it.
412 * This function is optional; it's really just for optimization in case
413 * it's cheaper to delete all the flows from your hardware in a single pass
414 * than to do it one by one. */
415 void (*flush)(struct ofproto *ofproto);
417 /* Helper for the OpenFlow OFPT_FEATURES_REQUEST request.
419 * The implementation should store true in '*arp_match_ip' if the switch
420 * supports matching IP addresses inside ARP requests and replies, false
423 * The implementation should store in '*actions' a bitmap of the supported
424 * OpenFlow actions. Vendor actions are not included in '*actions'. */
425 void (*get_features)(struct ofproto *ofproto,
427 enum ofputil_action_bitmap *actions);
429 /* Helper for the OpenFlow OFPST_TABLE statistics request.
431 * The 'ots' array contains 'ofproto->n_tables' elements. Each element is
434 * - 'table_id' to the array index.
436 * - 'name' to "table#" where # is the table ID.
438 * - 'wildcards' to OFPFW_ALL.
440 * - 'max_entries' to 1,000,000.
442 * - 'active_count' to the classifier_count() for the table.
444 * - 'lookup_count' and 'matched_count' to 0.
446 * The implementation should update any members in each element for which
447 * it has better values:
449 * - 'name' to a more meaningful name.
451 * - 'wildcards' to the set of wildcards actually supported by the table
452 * (if it doesn't support all OpenFlow wildcards).
454 * - 'max_entries' to the maximum number of flows actually supported by
457 * - 'lookup_count' to the number of packets looked up in this flow table
460 * - 'matched_count' to the number of packets looked up in this flow
461 * table so far that matched one of the flow entries.
463 * Keep in mind that all of the members of struct ofp_table_stats are in
464 * network byte order.
466 void (*get_tables)(struct ofproto *ofproto, struct ofp_table_stats *ots);
468 /* ## ---------------- ## */
469 /* ## ofport Functions ## */
470 /* ## ---------------- ## */
472 /* Life-cycle functions for a "struct ofport" (see "Life Cycle" above).
474 * ->port_construct() should not modify any base members of the ofport.
476 * ofports are managed by the base ofproto code. The ofproto
477 * implementation should only create and destroy them in response to calls
478 * to these functions. The base ofproto code will create and destroy
479 * ofports in the following situations:
481 * - Just after the ->construct() function is called, the base ofproto
482 * iterates over all of the implementation's ports, using
483 * ->port_dump_start() and related functions, and constructs an ofport
484 * for each dumped port.
486 * - If ->port_poll() reports that a specific port has changed, then the
487 * base ofproto will query that port with ->port_query_by_name() and
488 * construct or destruct ofports as necessary to reflect the updated
491 * - If ->port_poll() returns ENOBUFS to report an unspecified port set
492 * change, then the base ofproto will iterate over all of the
493 * implementation's ports, in the same way as at ofproto
494 * initialization, and construct and destruct ofports to reflect all of
497 * ->port_construct() returns 0 if successful, otherwise a positive errno
500 struct ofport *(*port_alloc)(void);
501 int (*port_construct)(struct ofport *ofport);
502 void (*port_destruct)(struct ofport *ofport);
503 void (*port_dealloc)(struct ofport *ofport);
505 /* Called after 'ofport->netdev' is replaced by a new netdev object. If
506 * the ofproto implementation uses the ofport's netdev internally, then it
507 * should switch to using the new one. The old one has been closed.
509 * An ofproto implementation that doesn't need to do anything in this
510 * function may use a null pointer. */
511 void (*port_modified)(struct ofport *ofport);
513 /* Called after an OpenFlow request changes a port's configuration.
514 * 'ofport->pp.config' contains the new configuration. 'old_config'
515 * contains the previous configuration.
517 * The caller implements OFPUTIL_PC_PORT_DOWN using netdev functions to
518 * turn NETDEV_UP on and off, so this function doesn't have to do anything
519 * for that bit (and it won't be called if that is the only bit that
521 void (*port_reconfigured)(struct ofport *ofport,
522 enum ofputil_port_config old_config);
524 /* Looks up a port named 'devname' in 'ofproto'. On success, initializes
525 * '*port' appropriately.
527 * The caller owns the data in 'port' and must free it with
528 * ofproto_port_destroy() when it is no longer needed. */
529 int (*port_query_by_name)(const struct ofproto *ofproto,
530 const char *devname, struct ofproto_port *port);
532 /* Attempts to add 'netdev' as a port on 'ofproto'. Returns 0 if
533 * successful, otherwise a positive errno value. If successful, sets
534 * '*ofp_portp' to the new port's port number.
536 * It doesn't matter whether the new port will be returned by a later call
537 * to ->port_poll(); the implementation may do whatever is more
539 int (*port_add)(struct ofproto *ofproto, struct netdev *netdev,
540 uint16_t *ofp_portp);
542 /* Deletes port number 'ofp_port' from the datapath for 'ofproto'. Returns
543 * 0 if successful, otherwise a positive errno value.
545 * It doesn't matter whether the new port will be returned by a later call
546 * to ->port_poll(); the implementation may do whatever is more
548 int (*port_del)(struct ofproto *ofproto, uint16_t ofp_port);
551 int (*port_get_stats)(const struct ofport *port,
552 struct netdev_stats *stats);
554 /* Port iteration functions.
556 * The client might not be entirely in control of the ports within an
557 * ofproto. Some hardware implementations, for example, might have a fixed
558 * set of ports in a datapath, and the Linux datapath allows the system
559 * administrator to externally add and remove ports with ovs-dpctl. For
560 * this reason, the client needs a way to iterate through all the ports
561 * that are actually in a datapath. These functions provide that
564 * The 'state' pointer provides the implementation a place to
565 * keep track of its position. Its format is opaque to the caller.
567 * The ofproto provider retains ownership of the data that it stores into
568 * ->port_dump_next()'s 'port' argument. The data must remain valid until
569 * at least the next call to ->port_dump_next() or ->port_dump_done() for
570 * 'state'. The caller will not modify or free it.
575 * ->port_dump_start() attempts to begin dumping the ports in 'ofproto'.
576 * On success, it should return 0 and initialize '*statep' with any data
577 * needed for iteration. On failure, returns a positive errno value, and
578 * the client will not call ->port_dump_next() or ->port_dump_done().
580 * ->port_dump_next() attempts to retrieve another port from 'ofproto' for
581 * 'state'. If there is another port, it should store the port's
582 * information into 'port' and return 0. It should return EOF if all ports
583 * have already been iterated. Otherwise, on error, it should return a
584 * positive errno value. This function will not be called again once it
585 * returns nonzero once for a given iteration (but the 'port_dump_done'
586 * function will be called afterward).
588 * ->port_dump_done() allows the implementation to release resources used
589 * for iteration. The caller might decide to stop iteration in the middle
590 * by calling this function before ->port_dump_next() returns nonzero.
598 * error = ofproto->ofproto_class->port_dump_start(ofproto, &state);
601 * struct ofproto_port port;
603 * error = ofproto->ofproto_class->port_dump_next(
604 * ofproto, state, &port);
608 * // Do something with 'port' here (without modifying or freeing
609 * // any of its data).
611 * ofproto->ofproto_class->port_dump_done(ofproto, state);
613 * // 'error' is now EOF (success) or a positive errno value (failure).
615 int (*port_dump_start)(const struct ofproto *ofproto, void **statep);
616 int (*port_dump_next)(const struct ofproto *ofproto, void *state,
617 struct ofproto_port *port);
618 int (*port_dump_done)(const struct ofproto *ofproto, void *state);
620 /* Polls for changes in the set of ports in 'ofproto'. If the set of ports
621 * in 'ofproto' has changed, then this function should do one of the
624 * - Preferably: store the name of the device that was added to or deleted
625 * from 'ofproto' in '*devnamep' and return 0. The caller is responsible
626 * for freeing '*devnamep' (with free()) when it no longer needs it.
628 * - Alternatively: return ENOBUFS, without indicating the device that was
631 * Occasional 'false positives', in which the function returns 0 while
632 * indicating a device that was not actually added or deleted or returns
633 * ENOBUFS without any change, are acceptable.
635 * The purpose of 'port_poll' is to let 'ofproto' know about changes made
636 * externally to the 'ofproto' object, e.g. by a system administrator via
637 * ovs-dpctl. Therefore, it's OK, and even preferable, for port_poll() to
638 * not report changes made through calls to 'port_add' or 'port_del' on the
639 * same 'ofproto' object. (But it's OK for it to report them too, just
640 * slightly less efficient.)
642 * If the set of ports in 'ofproto' has not changed, returns EAGAIN. May
643 * also return other positive errno values to indicate that something has
646 * If the set of ports in a datapath is fixed, or if the only way that the
647 * set of ports in a datapath can change is through ->port_add() and
648 * ->port_del(), then this function may be a null pointer.
650 int (*port_poll)(const struct ofproto *ofproto, char **devnamep);
652 /* Arranges for the poll loop to wake up when ->port_poll() will return a
653 * value other than EAGAIN.
655 * If the set of ports in a datapath is fixed, or if the only way that the
656 * set of ports in a datapath can change is through ->port_add() and
657 * ->port_del(), or if the poll loop will always wake up anyway when
658 * ->port_poll() will return a value other than EAGAIN, then this function
659 * may be a null pointer.
661 void (*port_poll_wait)(const struct ofproto *ofproto);
663 /* Checks the status of LACP negotiation for 'port'. Returns 1 if LACP
664 * partner information for 'port' is up-to-date, 0 if LACP partner
665 * information is not current (generally indicating a connectivity
666 * problem), or -1 if LACP is not enabled on 'port'.
668 * This function may be a null pointer if the ofproto implementation does
669 * not support LACP. */
670 int (*port_is_lacp_current)(const struct ofport *port);
672 /* ## ----------------------- ## */
673 /* ## OpenFlow Rule Functions ## */
674 /* ## ----------------------- ## */
678 /* Chooses an appropriate table for 'cls_rule' within 'ofproto'. On
679 * success, stores the table ID into '*table_idp' and returns 0. On
680 * failure, returns an OpenFlow error code.
682 * The choice of table should be a function of 'cls_rule' and 'ofproto''s
683 * datapath capabilities. It should not depend on the flows already in
684 * 'ofproto''s flow tables. Failure implies that an OpenFlow rule with
685 * 'cls_rule' as its matching condition can never be inserted into
686 * 'ofproto', even starting from an empty flow table.
688 * If multiple tables are candidates for inserting the flow, the function
689 * should choose one arbitrarily (but deterministically).
691 * If this function is NULL then table 0 is always chosen. */
692 enum ofperr (*rule_choose_table)(const struct ofproto *ofproto,
693 const struct cls_rule *cls_rule,
696 /* Life-cycle functions for a "struct rule" (see "Life Cycle" above).
699 * Asynchronous Operation Support
700 * ==============================
702 * The life-cycle operations on rules can operate asynchronously, meaning
703 * that ->rule_construct() and ->rule_destruct() only need to initiate
704 * their respective operations and do not need to wait for them to complete
705 * before they return. ->rule_modify_actions() also operates
708 * An ofproto implementation reports the success or failure of an
709 * asynchronous operation on a rule using the rule's 'pending' member,
710 * which points to a opaque "struct ofoperation" that represents the
711 * ongoing opreation. When the operation completes, the ofproto
712 * implementation calls ofoperation_complete(), passing the ofoperation and
713 * an error indication.
715 * Only the following contexts may call ofoperation_complete():
717 * - The function called to initiate the operation,
718 * e.g. ->rule_construct() or ->rule_destruct(). This is the best
719 * choice if the operation completes quickly.
721 * - The implementation's ->run() function.
723 * - The implementation's ->destruct() function.
725 * The ofproto base code updates the flow table optimistically, assuming
726 * that the operation will probably succeed:
728 * - ofproto adds or replaces the rule in the flow table before calling
729 * ->rule_construct().
731 * - ofproto updates the rule's actions before calling
732 * ->rule_modify_actions().
734 * - ofproto removes the rule before calling ->rule_destruct().
736 * With one exception, when an asynchronous operation completes with an
737 * error, ofoperation_complete() backs out the already applied changes:
739 * - If adding or replacing a rule in the flow table fails, ofproto
740 * removes the new rule or restores the original rule.
742 * - If modifying a rule's actions fails, ofproto restores the original
745 * - Removing a rule is not allowed to fail. It must always succeed.
747 * The ofproto base code serializes operations: if any operation is in
748 * progress on a given rule, ofproto postpones initiating any new operation
749 * on that rule until the pending operation completes. Therefore, every
750 * operation must eventually complete through a call to
751 * ofoperation_complete() to avoid delaying new operations indefinitely
752 * (including any OpenFlow request that affects the rule in question, even
753 * just to query its statistics).
759 * When ->rule_construct() is called, the caller has already inserted
760 * 'rule' into 'rule->ofproto''s flow table numbered 'rule->table_id'.
761 * There are two cases:
763 * - 'rule' is a new rule in its flow table. In this case,
764 * ofoperation_get_victim(rule) returns NULL.
766 * - 'rule' is replacing an existing rule in its flow table that had the
767 * same matching criteria and priority. In this case,
768 * ofoperation_get_victim(rule) returns the rule being replaced (the
771 * ->rule_construct() should set the following in motion:
773 * - Validate that the matching rule in 'rule->cr' is supported by the
774 * datapath. For example, if the rule's table does not support
775 * registers, then it is an error if 'rule->cr' does not wildcard all
778 * - Validate that 'rule->actions' and 'rule->n_actions' are well-formed
779 * OpenFlow actions that the datapath can correctly implement. The
780 * validate_actions() function (in ofp-util.c) can be useful as a model
781 * for action validation, but it accepts all of the OpenFlow actions
782 * that OVS understands. If your ofproto implementation only
783 * implements a subset of those, then you should implement your own
786 * - If the rule is valid, update the datapath flow table, adding the new
787 * rule or replacing the existing one.
789 * - If 'rule' is replacing an existing rule, uninitialize any derived
790 * state for the victim rule, as in step 5 in the "Life Cycle"
793 * (On failure, the ofproto code will roll back the insertion from the flow
794 * table, either removing 'rule' or replacing it by the victim rule if
797 * ->rule_construct() must act in one of the following ways:
799 * - If it succeeds, it must call ofoperation_complete() and return 0.
801 * - If it fails, it must act in one of the following ways:
803 * * Call ofoperation_complete() and return 0.
805 * * Return an OpenFlow error code. (Do not call
806 * ofoperation_complete() in this case.)
808 * Either way, ->rule_destruct() will not be called for 'rule', but
809 * ->rule_dealloc() will be.
811 * - If the operation is only partially complete, then it must return 0.
812 * Later, when the operation is complete, the ->run() or ->destruct()
813 * function must call ofoperation_complete() to report success or
816 * ->rule_construct() should not modify any base members of struct rule.
822 * When ->rule_destruct() is called, the caller has already removed 'rule'
823 * from 'rule->ofproto''s flow table. ->rule_destruct() should set in
824 * motion removing 'rule' from the datapath flow table. If removal
825 * completes synchronously, it should call ofoperation_complete().
826 * Otherwise, the ->run() or ->destruct() function must later call
827 * ofoperation_complete() after the operation completes.
829 * Rule destruction must not fail. */
830 struct rule *(*rule_alloc)(void);
831 enum ofperr (*rule_construct)(struct rule *rule);
832 void (*rule_destruct)(struct rule *rule);
833 void (*rule_dealloc)(struct rule *rule);
835 /* Obtains statistics for 'rule', storing the number of packets that have
836 * matched it in '*packet_count' and the number of bytes in those packets
837 * in '*byte_count'. UINT64_MAX indicates that the packet count or byte
838 * count is unknown. */
839 void (*rule_get_stats)(struct rule *rule, uint64_t *packet_count,
840 uint64_t *byte_count);
842 /* Applies the actions in 'rule' to 'packet'. (This implements sending
843 * buffered packets for OpenFlow OFPT_FLOW_MOD commands.)
845 * Takes ownership of 'packet' (so it should eventually free it, with
848 * 'flow' reflects the flow information for 'packet'. All of the
849 * information in 'flow' is extracted from 'packet', except for
850 * flow->tun_id and flow->in_port, which are assigned the correct values
851 * for the incoming packet. The register values are zeroed. 'packet''s
852 * header pointers (e.g. packet->l3) are appropriately initialized.
854 * The implementation should add the statistics for 'packet' into 'rule'.
856 * Returns 0 if successful, otherwise an OpenFlow error code. */
857 enum ofperr (*rule_execute)(struct rule *rule, const struct flow *flow,
858 struct ofpbuf *packet);
860 /* When ->rule_modify_actions() is called, the caller has already replaced
861 * the OpenFlow actions in 'rule' by a new set. (The original actions are
862 * in rule->pending->actions.)
864 * ->rule_modify_actions() should set the following in motion:
866 * - Validate that the actions now in 'rule' are well-formed OpenFlow
867 * actions that the datapath can correctly implement.
869 * - Update the datapath flow table with the new actions.
871 * If the operation synchronously completes, ->rule_modify_actions() may
872 * call ofoperation_complete() before it returns. Otherwise, ->run()
873 * should call ofoperation_complete() later, after the operation does
876 * If the operation fails, then the base ofproto code will restore the
877 * original 'actions' and 'n_actions' of 'rule'.
879 * ->rule_modify_actions() should not modify any base members of struct
881 void (*rule_modify_actions)(struct rule *rule);
883 /* Changes the OpenFlow IP fragment handling policy to 'frag_handling',
884 * which takes one of the following values, with the corresponding
887 * - OFPC_FRAG_NORMAL: The switch should treat IP fragments the same way
888 * as other packets, omitting TCP and UDP port numbers (always setting
891 * - OFPC_FRAG_DROP: The switch should drop all IP fragments without
892 * passing them through the flow table.
894 * - OFPC_FRAG_REASM: The switch should reassemble IP fragments before
895 * passing packets through the flow table.
897 * - OFPC_FRAG_NX_MATCH (a Nicira extension): Similar to OFPC_FRAG_NORMAL,
898 * except that TCP and UDP port numbers should be included in fragments
901 * Implementations are not required to support every mode.
902 * OFPC_FRAG_NORMAL is the default mode when an ofproto is created.
904 * At the time of the call to ->set_frag_handling(), the current mode is
905 * available in 'ofproto->frag_handling'. ->set_frag_handling() returns
906 * true if the requested mode was set, false if it is not supported.
908 * Upon successful return, the caller changes 'ofproto->frag_handling' to
909 * reflect the new mode.
911 bool (*set_frag_handling)(struct ofproto *ofproto,
912 enum ofp_config_flags frag_handling);
914 /* Implements the OpenFlow OFPT_PACKET_OUT command. The datapath should
915 * execute the 'n_actions' in the 'actions' array on 'packet'.
917 * The caller retains ownership of 'packet', so ->packet_out() should not
920 * This function must validate that the 'n_actions' elements in 'actions'
921 * are well-formed OpenFlow actions that can be correctly implemented by
922 * the datapath. If not, then it should return an OpenFlow error code.
924 * 'flow' reflects the flow information for 'packet'. All of the
925 * information in 'flow' is extracted from 'packet', except for
926 * flow->in_port (see below). flow->tun_id and its register values are
929 * flow->in_port comes from the OpenFlow OFPT_PACKET_OUT message. The
930 * implementation should reject invalid flow->in_port values by returning
931 * OFPERR_NXBRC_BAD_IN_PORT. For consistency, the implementation should
932 * consider valid for flow->in_port any value that could possibly be seen
933 * in a packet that it passes to connmgr_send_packet_in(). Ideally, even
934 * an implementation that never generates packet-ins (e.g. due to hardware
935 * limitations) should still allow flow->in_port values for every possible
936 * physical port and OFPP_LOCAL. The only virtual ports (those above
937 * OFPP_MAX) that the caller will ever pass in as flow->in_port, other than
938 * OFPP_LOCAL, are OFPP_NONE and OFPP_CONTROLLER. The implementation
939 * should allow both of these, treating each of them as packets generated
940 * by the controller as opposed to packets originating from some switch
943 * (Ordinarily the only effect of flow->in_port is on output actions that
944 * involve the input port, such as actions that output to OFPP_IN_PORT,
945 * OFPP_FLOOD, or OFPP_ALL. flow->in_port can also affect Nicira extension
946 * "resubmit" actions.)
948 * 'packet' is not matched against the OpenFlow flow table, so its
949 * statistics should not be included in OpenFlow flow statistics.
951 * Returns 0 if successful, otherwise an OpenFlow error code. */
952 enum ofperr (*packet_out)(struct ofproto *ofproto, struct ofpbuf *packet,
953 const struct flow *flow,
954 const union ofp_action *actions,
957 /* ## ------------------------- ## */
958 /* ## OFPP_NORMAL configuration ## */
959 /* ## ------------------------- ## */
961 /* Configures NetFlow on 'ofproto' according to the options in
962 * 'netflow_options', or turns off NetFlow if 'netflow_options' is NULL.
964 * EOPNOTSUPP as a return value indicates that 'ofproto' does not support
965 * NetFlow, as does a null pointer. */
966 int (*set_netflow)(struct ofproto *ofproto,
967 const struct netflow_options *netflow_options);
969 void (*get_netflow_ids)(const struct ofproto *ofproto,
970 uint8_t *engine_type, uint8_t *engine_id);
972 /* Configures sFlow on 'ofproto' according to the options in
973 * 'sflow_options', or turns off sFlow if 'sflow_options' is NULL.
975 * EOPNOTSUPP as a return value indicates that 'ofproto' does not support
976 * sFlow, as does a null pointer. */
977 int (*set_sflow)(struct ofproto *ofproto,
978 const struct ofproto_sflow_options *sflow_options);
980 /* Configures connectivity fault management on 'ofport'.
982 * If 'cfm_settings' is nonnull, configures CFM according to its members.
984 * If 'cfm_settings' is null, removes any connectivity fault management
985 * configuration from 'ofport'.
987 * EOPNOTSUPP as a return value indicates that this ofproto_class does not
988 * support CFM, as does a null pointer. */
989 int (*set_cfm)(struct ofport *ofport, const struct cfm_settings *s);
991 /* Checks the fault status of CFM configured on 'ofport'. Returns a
992 * bitmask of 'cfm_fault_reason's to indicate a CFM fault (generally
993 * indicating a connectivity problem). Returns zero if CFM is not faulted,
994 * and -1 if CFM is not enabled on 'port'.
996 * This function may be a null pointer if the ofproto implementation does
997 * not support CFM. */
998 int (*get_cfm_fault)(const struct ofport *ofport);
1000 /* Gets the MPIDs of the remote maintenance points broadcasting to
1001 * 'ofport'. Populates 'rmps' with a provider owned array of MPIDs, and
1002 * 'n_rmps' with the number of MPIDs in 'rmps'. Returns a number less than
1003 * 0 if CFM is not enabled of 'ofport'.
1005 * This function may be a null pointer if the ofproto implementation does
1006 * not support CFM. */
1007 int (*get_cfm_remote_mpids)(const struct ofport *ofport,
1008 const uint64_t **rmps, size_t *n_rmps);
1010 /* Checks the health of CFM configured on 'ofport'. Returns an integer
1011 * to indicate the health percentage of the 'ofport' which is an average of
1012 * the health of all the remote_mps. Returns an integer between 0 and 100
1013 * where 0 means that the 'ofport' is very unhealthy and 100 means the
1014 * 'ofport' is perfectly healthy. Returns -1 if CFM is not enabled on
1015 * 'port' or if the number of remote_mpids is > 1.
1017 * This function may be a null pointer if the ofproto implementation does
1018 * not support CFM. */
1019 int (*get_cfm_health)(const struct ofport *ofport);
1021 /* Configures spanning tree protocol (STP) on 'ofproto' using the
1022 * settings defined in 's'.
1024 * If 's' is nonnull, configures STP according to its members.
1026 * If 's' is null, removes any STP configuration from 'ofproto'.
1028 * EOPNOTSUPP as a return value indicates that this ofproto_class does not
1029 * support STP, as does a null pointer. */
1030 int (*set_stp)(struct ofproto *ofproto,
1031 const struct ofproto_stp_settings *s);
1033 /* Retrieves state of spanning tree protocol (STP) on 'ofproto'.
1035 * Stores STP state for 'ofproto' in 's'. If the 'enabled' member
1036 * is false, the other member values are not meaningful.
1038 * EOPNOTSUPP as a return value indicates that this ofproto_class does not
1039 * support STP, as does a null pointer. */
1040 int (*get_stp_status)(struct ofproto *ofproto,
1041 struct ofproto_stp_status *s);
1043 /* Configures spanning tree protocol (STP) on 'ofport' using the
1044 * settings defined in 's'.
1046 * If 's' is nonnull, configures STP according to its members. The
1047 * caller is responsible for assigning STP port numbers (using the
1048 * 'port_num' member in the range of 1 through 255, inclusive) and
1049 * ensuring there are no duplicates.
1051 * If 's' is null, removes any STP configuration from 'ofport'.
1053 * EOPNOTSUPP as a return value indicates that this ofproto_class does not
1054 * support STP, as does a null pointer. */
1055 int (*set_stp_port)(struct ofport *ofport,
1056 const struct ofproto_port_stp_settings *s);
1058 /* Retrieves spanning tree protocol (STP) port status of 'ofport'.
1060 * Stores STP state for 'ofport' in 's'. If the 'enabled' member is
1061 * false, the other member values are not meaningful.
1063 * EOPNOTSUPP as a return value indicates that this ofproto_class does not
1064 * support STP, as does a null pointer. */
1065 int (*get_stp_port_status)(struct ofport *ofport,
1066 struct ofproto_port_stp_status *s);
1068 /* Registers meta-data associated with the 'n_qdscp' Qualities of Service
1069 * 'queues' attached to 'ofport'. This data is not intended to be
1070 * sufficient to implement QoS. Instead, providers may use this
1071 * information to implement features which require knowledge of what queues
1072 * exist on a port, and some basic information about them.
1074 * EOPNOTSUPP as a return value indicates that this ofproto_class does not
1075 * support QoS, as does a null pointer. */
1076 int (*set_queues)(struct ofport *ofport,
1077 const struct ofproto_port_queue *queues, size_t n_qdscp);
1079 /* If 's' is nonnull, this function registers a "bundle" associated with
1080 * client data pointer 'aux' in 'ofproto'. A bundle is the same concept as
1081 * a Port in OVSDB, that is, it consists of one or more "slave" devices
1082 * (Interfaces, in OVSDB) along with VLAN and LACP configuration and, if
1083 * there is more than one slave, a bonding configuration. If 'aux' is
1084 * already registered then this function updates its configuration to 's'.
1085 * Otherwise, this function registers a new bundle.
1087 * If 's' is NULL, this function unregisters the bundle registered on
1088 * 'ofproto' associated with client data pointer 'aux'. If no such bundle
1089 * has been registered, this has no effect.
1091 * This function affects only the behavior of the NXAST_AUTOPATH action and
1092 * output to the OFPP_NORMAL port. An implementation that does not support
1093 * it at all may set it to NULL or return EOPNOTSUPP. An implementation
1094 * that supports only a subset of the functionality should implement what
1095 * it can and return 0. */
1096 int (*bundle_set)(struct ofproto *ofproto, void *aux,
1097 const struct ofproto_bundle_settings *s);
1099 /* If 'port' is part of any bundle, removes it from that bundle. If the
1100 * bundle now has no ports, deletes the bundle. If the bundle now has only
1101 * one port, deconfigures the bundle's bonding configuration. */
1102 void (*bundle_remove)(struct ofport *ofport);
1104 /* If 's' is nonnull, this function registers a mirror associated with
1105 * client data pointer 'aux' in 'ofproto'. A mirror is the same concept as
1106 * a Mirror in OVSDB. If 'aux' is already registered then this function
1107 * updates its configuration to 's'. Otherwise, this function registers a
1110 * If 's' is NULL, this function unregisters the mirror registered on
1111 * 'ofproto' associated with client data pointer 'aux'. If no such mirror
1112 * has been registered, this has no effect.
1114 * An implementation that does not support mirroring at all may set
1115 * it to NULL or return EOPNOTSUPP. An implementation that supports
1116 * only a subset of the functionality should implement what it can
1118 int (*mirror_set)(struct ofproto *ofproto, void *aux,
1119 const struct ofproto_mirror_settings *s);
1121 /* Retrieves statistics from mirror associated with client data
1122 * pointer 'aux' in 'ofproto'. Stores packet and byte counts in
1123 * 'packets' and 'bytes', respectively. If a particular counter is
1124 * not supported, the appropriate argument is set to UINT64_MAX.
1126 * EOPNOTSUPP as a return value indicates that this ofproto_class does not
1127 * support retrieving mirror statistics. */
1128 int (*mirror_get_stats)(struct ofproto *ofproto, void *aux,
1129 uint64_t *packets, uint64_t *bytes);
1131 /* Configures the VLANs whose bits are set to 1 in 'flood_vlans' as VLANs
1132 * on which all packets are flooded, instead of using MAC learning. If
1133 * 'flood_vlans' is NULL, then MAC learning applies to all VLANs.
1135 * This function affects only the behavior of the OFPP_NORMAL action. An
1136 * implementation that does not support it may set it to NULL or return
1138 int (*set_flood_vlans)(struct ofproto *ofproto,
1139 unsigned long *flood_vlans);
1141 /* Returns true if 'aux' is a registered bundle that is currently in use as
1142 * the output for a mirror. */
1143 bool (*is_mirror_output_bundle)(const struct ofproto *ofproto, void *aux);
1145 /* When the configuration option of forward_bpdu changes, this function
1146 * will be invoked. */
1147 void (*forward_bpdu_changed)(struct ofproto *ofproto);
1149 /* Sets the MAC aging timeout for the OFPP_NORMAL action to 'idle_time',
1151 void (*set_mac_idle_time)(struct ofproto *ofproto, unsigned int idle_time);
1153 /* Linux VLAN device support (e.g. "eth0.10" for VLAN 10.)
1155 * This is deprecated. It is only for compatibility with broken device drivers
1156 * in old versions of Linux that do not properly support VLANs when VLAN
1157 * devices are not used. When broken device drivers are no longer in
1158 * widespread use, we will delete these interfaces. */
1160 /* If 'realdev_ofp_port' is nonzero, then this function configures 'ofport'
1161 * as a VLAN splinter port for VLAN 'vid', associated with the real device
1162 * that has OpenFlow port number 'realdev_ofp_port'.
1164 * If 'realdev_ofp_port' is zero, then this function deconfigures 'ofport'
1165 * as a VLAN splinter port.
1167 * This function should be NULL if a an implementation does not support
1169 int (*set_realdev)(struct ofport *ofport,
1170 uint16_t realdev_ofp_port, int vid);
1173 extern const struct ofproto_class ofproto_dpif_class;
1175 int ofproto_class_register(const struct ofproto_class *);
1176 int ofproto_class_unregister(const struct ofproto_class *);
1178 /* ofproto_flow_mod() returns this value if the flow_mod could not be processed
1179 * because it overlaps with an ongoing flow table operation that has not yet
1180 * completed. The caller should retry the operation later.
1182 * ofproto.c also uses this value internally for additional (similar) purposes.
1184 * This particular value is a good choice because it is large, so that it does
1185 * not collide with any errno value, but not large enough to collide with an
1186 * OFPERR_* value. */
1187 enum { OFPROTO_POSTPONE = 1 << 16 };
1188 BUILD_ASSERT_DECL(OFPROTO_POSTPONE < OFPERR_OFS);
1190 int ofproto_flow_mod(struct ofproto *, const struct ofputil_flow_mod *);
1191 void ofproto_add_flow(struct ofproto *, const struct cls_rule *,
1192 const union ofp_action *, size_t n_actions);
1193 bool ofproto_delete_flow(struct ofproto *, const struct cls_rule *);
1194 void ofproto_flush_flows(struct ofproto *);
1196 #endif /* ofproto/ofproto-provider.h */