ipdrop.h revision 7c478bd95313f5f23a4c958a745db2134aa03244
/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License, Version 1.0 only
* (the "License"). You may not use this file except in compliance
* with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* or http://www.opensolaris.org/os/licensing.
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright 2004 Sun Microsystems, Inc. All rights reserved.
* Use is subject to license terms.
*/
#ifndef _INET_IPDROP_H
#define _INET_IPDROP_H
#pragma ident "%Z%%M% %I% %E% SMI"
#ifdef __cplusplus
extern "C" {
#endif
/*
* Opaque data type which will contain state about an entity that is dropping
* a packet (e.g. IPsec SPD, IPsec SADB, TCP, IP forwarding, etc.).
*/
typedef struct ipdropper_s {
char *ipd_name;
} ipdropper_t;
void ip_drop_register(ipdropper_t *, char *);
void ip_drop_unregister(ipdropper_t *);
void ip_drop_packet(mblk_t *, boolean_t, ill_t *, ire_t *, struct kstat_named *,
ipdropper_t *);
extern kstat_t *ip_drop_kstat;
extern struct ip_dropstats *ip_drop_types;
void ip_drop_init(void);
void ip_drop_destroy(void);
/*
* ip_dropstats - When a protocol developer comes up with a new reason to
* drop a packet, it should have a bean counter placed here in this structure,
* an ipdrops_* definition for that bean counter, and an initializer in
* ipdrop.c's ip_drop_init().
*
* This will suffice until we come up with a more dynamic way of adding
* named kstats to a single kstat instance (if that is possible).
*/
struct ip_dropstats {
/* TCP IPsec drop statistics. */
kstat_named_t ipds_tcp_clear;
kstat_named_t ipds_tcp_secure;
kstat_named_t ipds_tcp_mismatch;
kstat_named_t ipds_tcp_ipsec_alloc;
/* SADB-specific drop statistics. */
kstat_named_t ipds_sadb_inlarval_timeout;
kstat_named_t ipds_sadb_inlarval_replace;
kstat_named_t ipds_sadb_acquire_nomem;
kstat_named_t ipds_sadb_acquire_toofull;
kstat_named_t ipds_sadb_acquire_timeout;
/* SPD drop statistics. */
kstat_named_t ipds_spd_ahesp_diffid;
kstat_named_t ipds_spd_loopback_mismatch;
kstat_named_t ipds_spd_explicit;
kstat_named_t ipds_spd_got_secure;
kstat_named_t ipds_spd_got_clear;
kstat_named_t ipds_spd_bad_ahalg;
kstat_named_t ipds_spd_got_ah;
kstat_named_t ipds_spd_bad_espealg;
kstat_named_t ipds_spd_bad_espaalg;
kstat_named_t ipds_spd_got_esp;
kstat_named_t ipds_spd_got_selfencap;
kstat_named_t ipds_spd_bad_selfencap;
kstat_named_t ipds_spd_nomem;
kstat_named_t ipds_spd_ah_badid;
kstat_named_t ipds_spd_esp_badid;
/* ESP-specific drop statistics. */
kstat_named_t ipds_esp_nomem;
kstat_named_t ipds_esp_no_sa;
kstat_named_t ipds_esp_early_replay;
kstat_named_t ipds_esp_replay;
kstat_named_t ipds_esp_bytes_expire;
kstat_named_t ipds_esp_bad_padlen;
kstat_named_t ipds_esp_bad_padding;
kstat_named_t ipds_esp_bad_auth;
kstat_named_t ipds_esp_crypto_failed;
kstat_named_t ipds_esp_icmp;
/* AH-specific drop statistics. */
kstat_named_t ipds_ah_nomem;
kstat_named_t ipds_ah_bad_v6_hdrs;
kstat_named_t ipds_ah_bad_v4_opts;
kstat_named_t ipds_ah_no_sa;
kstat_named_t ipds_ah_bad_length;
kstat_named_t ipds_ah_bad_auth;
kstat_named_t ipds_ah_crypto_failed;
kstat_named_t ipds_ah_early_replay;
kstat_named_t ipds_ah_replay;
kstat_named_t ipds_ah_bytes_expire;
/* IP-specific drop statistics. */
kstat_named_t ipds_ip_ipsec_not_loaded;
};
/*
* Use this section to create easy-to-name definitions for specific IP Drop
* statistics. As a naming convention, prefix them with ipdrops_<foo>.
*/
/* TCP IPsec drop statistics. */
#define ipdrops_tcp_clear ip_drop_types->ipds_tcp_clear
#define ipdrops_tcp_secure ip_drop_types->ipds_tcp_secure
#define ipdrops_tcp_mismatch ip_drop_types->ipds_tcp_mismatch
#define ipdrops_tcp_ipsec_alloc ip_drop_types->ipds_tcp_ipsec_alloc
/* SADB-specific drop statistics. */
#define ipdrops_sadb_inlarval_timeout ip_drop_types->ipds_sadb_inlarval_timeout
#define ipdrops_sadb_inlarval_replace ip_drop_types->ipds_sadb_inlarval_replace
#define ipdrops_sadb_acquire_nomem ip_drop_types->ipds_sadb_acquire_nomem
#define ipdrops_sadb_acquire_toofull ip_drop_types->ipds_sadb_acquire_toofull
#define ipdrops_sadb_acquire_timeout ip_drop_types->ipds_sadb_acquire_timeout
/* SPD drop statistics. */
#define ipdrops_spd_ahesp_diffid ip_drop_types->ipds_spd_ahesp_diffid
#define ipdrops_spd_loopback_mismatch ip_drop_types->ipds_spd_loopback_mismatch
#define ipdrops_spd_explicit ip_drop_types->ipds_spd_explicit
#define ipdrops_spd_got_secure ip_drop_types->ipds_spd_got_secure
#define ipdrops_spd_got_clear ip_drop_types->ipds_spd_got_clear
#define ipdrops_spd_bad_ahalg ip_drop_types->ipds_spd_bad_ahalg
#define ipdrops_spd_got_ah ip_drop_types->ipds_spd_got_ah
#define ipdrops_spd_bad_espealg ip_drop_types->ipds_spd_bad_espealg
#define ipdrops_spd_bad_espaalg ip_drop_types->ipds_spd_bad_espaalg
#define ipdrops_spd_got_esp ip_drop_types->ipds_spd_got_esp
#define ipdrops_spd_got_selfencap ip_drop_types->ipds_spd_got_selfencap
#define ipdrops_spd_bad_selfencap ip_drop_types->ipds_spd_bad_selfencap
#define ipdrops_spd_nomem ip_drop_types->ipds_spd_nomem
#define ipdrops_spd_ah_badid ip_drop_types->ipds_spd_ah_badid
#define ipdrops_spd_esp_badid ip_drop_types->ipds_spd_esp_badid
/* ESP-specific drop statistics. */
#define ipdrops_esp_nomem ip_drop_types->ipds_esp_nomem
#define ipdrops_esp_no_sa ip_drop_types->ipds_esp_no_sa
#define ipdrops_esp_early_replay ip_drop_types->ipds_esp_early_replay
#define ipdrops_esp_replay ip_drop_types->ipds_esp_replay
#define ipdrops_esp_bytes_expire ip_drop_types->ipds_esp_bytes_expire
#define ipdrops_esp_bad_padlen ip_drop_types->ipds_esp_bad_padlen
#define ipdrops_esp_bad_padding ip_drop_types->ipds_esp_bad_padding
#define ipdrops_esp_bad_auth ip_drop_types->ipds_esp_bad_auth
#define ipdrops_esp_crypto_failed ip_drop_types->ipds_esp_crypto_failed
#define ipdrops_esp_icmp ip_drop_types->ipds_esp_icmp
/* AH-specific drop statistics. */
#define ipdrops_ah_nomem ip_drop_types->ipds_ah_nomem
#define ipdrops_ah_bad_v6_hdrs ip_drop_types->ipds_ah_bad_v6_hdrs
#define ipdrops_ah_bad_v4_opts ip_drop_types->ipds_ah_bad_v4_opts
#define ipdrops_ah_no_sa ip_drop_types->ipds_ah_no_sa
#define ipdrops_ah_bad_length ip_drop_types->ipds_ah_bad_length
#define ipdrops_ah_bad_auth ip_drop_types->ipds_ah_bad_auth
#define ipdrops_ah_crypto_failed ip_drop_types->ipds_ah_crypto_failed
#define ipdrops_ah_early_replay ip_drop_types->ipds_ah_early_replay
#define ipdrops_ah_replay ip_drop_types->ipds_ah_replay
#define ipdrops_ah_bytes_expire ip_drop_types->ipds_ah_bytes_expire
/* IP-specific drop statistics. */
#define ipdrops_ip_ipsec_not_loaded ip_drop_types->ipds_ip_ipsec_not_loaded
#ifdef __cplusplus
}
#endif
#endif /* _INET_IPDROP_H */