12 #include <linux/netfilter/nf_tables.h>
15 #include <libmnl/libmnl.h>
16 #include <libnftnl/object.h>
20 static int nftnl_obj_limit_set(
struct nftnl_obj *e, uint16_t type,
21 const void *data, uint32_t data_len)
23 struct nftnl_obj_limit *limit = nftnl_obj_data(e);
26 case NFTNL_OBJ_LIMIT_RATE:
27 memcpy(&limit->rate, data, data_len);
29 case NFTNL_OBJ_LIMIT_UNIT:
30 memcpy(&limit->unit, data, data_len);
32 case NFTNL_OBJ_LIMIT_BURST:
33 memcpy(&limit->burst, data, data_len);
35 case NFTNL_OBJ_LIMIT_TYPE:
36 memcpy(&limit->type, data, data_len);
38 case NFTNL_OBJ_LIMIT_FLAGS:
39 memcpy(&limit->flags, data, data_len);
45 static const void *nftnl_obj_limit_get(
const struct nftnl_obj *e,
46 uint16_t type, uint32_t *data_len)
48 struct nftnl_obj_limit *limit = nftnl_obj_data(e);
51 case NFTNL_OBJ_LIMIT_RATE:
52 *data_len =
sizeof(limit->rate);
54 case NFTNL_OBJ_LIMIT_UNIT:
55 *data_len =
sizeof(limit->unit);
57 case NFTNL_OBJ_LIMIT_BURST:
58 *data_len =
sizeof(limit->burst);
60 case NFTNL_OBJ_LIMIT_TYPE:
61 *data_len =
sizeof(limit->type);
63 case NFTNL_OBJ_LIMIT_FLAGS:
64 *data_len =
sizeof(limit->flags);
70 static int nftnl_obj_limit_cb(
const struct nlattr *attr,
void *data)
72 int type = mnl_attr_get_type(attr);
73 const struct nlattr **tb = data;
75 if (mnl_attr_type_valid(attr, NFTA_LIMIT_MAX) < 0)
81 if (mnl_attr_validate(attr, MNL_TYPE_U64) < 0)
84 case NFTA_LIMIT_BURST:
86 case NFTA_LIMIT_FLAGS:
87 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
96 static void nftnl_obj_limit_build(
struct nlmsghdr *nlh,
97 const struct nftnl_obj *e)
99 struct nftnl_obj_limit *limit = nftnl_obj_data(e);
101 if (e->flags & (1 << NFTNL_OBJ_LIMIT_RATE))
102 mnl_attr_put_u64(nlh, NFTA_LIMIT_RATE, htobe64(limit->rate));
103 if (e->flags & (1 << NFTNL_OBJ_LIMIT_UNIT))
104 mnl_attr_put_u64(nlh, NFTA_LIMIT_UNIT, htobe64(limit->unit));
105 if (e->flags & (1 << NFTNL_OBJ_LIMIT_BURST))
106 mnl_attr_put_u32(nlh, NFTA_LIMIT_BURST, htonl(limit->burst));
107 if (e->flags & (1 << NFTNL_OBJ_LIMIT_TYPE))
108 mnl_attr_put_u32(nlh, NFTA_LIMIT_TYPE, htonl(limit->type));
109 if (e->flags & (1 << NFTNL_OBJ_LIMIT_FLAGS))
110 mnl_attr_put_u32(nlh, NFTA_LIMIT_FLAGS, htonl(limit->flags));
113 static int nftnl_obj_limit_parse(
struct nftnl_obj *e,
struct nlattr *attr)
115 struct nftnl_obj_limit *limit = nftnl_obj_data(e);
116 struct nlattr *tb[NFTA_LIMIT_MAX + 1] = {};
118 if (mnl_attr_parse_nested(attr, nftnl_obj_limit_cb, tb) < 0)
121 if (tb[NFTA_LIMIT_RATE]) {
122 limit->rate = be64toh(mnl_attr_get_u64(tb[NFTA_LIMIT_RATE]));
123 e->flags |= (1 << NFTNL_OBJ_LIMIT_RATE);
125 if (tb[NFTA_LIMIT_UNIT]) {
126 limit->unit = be64toh(mnl_attr_get_u64(tb[NFTA_LIMIT_UNIT]));
127 e->flags |= (1 << NFTNL_OBJ_LIMIT_UNIT);
129 if (tb[NFTA_LIMIT_BURST]) {
130 limit->burst = ntohl(mnl_attr_get_u32(tb[NFTA_LIMIT_BURST]));
131 e->flags |= (1 << NFTNL_OBJ_LIMIT_BURST);
133 if (tb[NFTA_LIMIT_TYPE]) {
134 limit->type = ntohl(mnl_attr_get_u32(tb[NFTA_LIMIT_TYPE]));
135 e->flags |= (1 << NFTNL_OBJ_LIMIT_TYPE);
137 if (tb[NFTA_LIMIT_FLAGS]) {
138 limit->flags = ntohl(mnl_attr_get_u32(tb[NFTA_LIMIT_FLAGS]));
139 e->flags |= (1 << NFTNL_OBJ_LIMIT_FLAGS);
145 static int nftnl_obj_limit_snprintf(
char *buf,
size_t len,
147 const struct nftnl_obj *e)
149 struct nftnl_obj_limit *limit = nftnl_obj_data(e);
151 return snprintf(buf, len,
"rate %"PRIu64
" unit %"PRIu64
" burst %u "
152 "type %u flags %u ", limit->rate, limit->unit,
153 limit->burst, limit->type, limit->flags);
156 static struct attr_policy obj_limit_attr_policy[__NFTNL_OBJ_LIMIT_MAX] = {
157 [NFTNL_OBJ_LIMIT_RATE] = { .maxlen =
sizeof(uint64_t) },
158 [NFTNL_OBJ_LIMIT_UNIT] = { .maxlen =
sizeof(uint64_t) },
159 [NFTNL_OBJ_LIMIT_BURST] = { .maxlen =
sizeof(uint32_t) },
160 [NFTNL_OBJ_LIMIT_TYPE] = { .maxlen =
sizeof(uint32_t) },
161 [NFTNL_OBJ_LIMIT_FLAGS] = { .maxlen =
sizeof(uint32_t) },
164 struct obj_ops obj_ops_limit = {
166 .type = NFT_OBJECT_LIMIT,
167 .alloc_len =
sizeof(
struct nftnl_obj_limit),
168 .nftnl_max_attr = __NFTNL_OBJ_LIMIT_MAX - 1,
169 .attr_policy = obj_limit_attr_policy,
170 .set = nftnl_obj_limit_set,
171 .get = nftnl_obj_limit_get,
172 .parse = nftnl_obj_limit_parse,
173 .build = nftnl_obj_limit_build,
174 .output = nftnl_obj_limit_snprintf,