2 * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
4 * Begun April 1, 1996, Mike Shaver.
5 * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
9 #include <linux/module.h>
10 #include <linux/sysctl.h>
11 #include <linux/igmp.h>
12 #include <linux/inetdevice.h>
13 #include <linux/seqlock.h>
14 #include <linux/init.h>
15 #include <linux/slab.h>
19 #include <net/route.h>
22 #include <net/cipso_ipv4.h>
23 #include <net/inet_frag.h>
26 static int tcp_retr1_max = 255;
27 static int ip_local_port_range_min[] = { 1, 1 };
28 static int ip_local_port_range_max[] = { 65535, 65535 };
29 static int tcp_adv_win_scale_min = -31;
30 static int tcp_adv_win_scale_max = 31;
31 static int ip_ttl_min = 1;
32 static int ip_ttl_max = 255;
34 /* Update system visible IP port range */
35 static void set_local_port_range(int range[2])
37 write_seqlock(&sysctl_local_ports.lock);
38 sysctl_local_ports.range[0] = range[0];
39 sysctl_local_ports.range[1] = range[1];
40 write_sequnlock(&sysctl_local_ports.lock);
43 /* Validate changes from /proc interface. */
44 static int ipv4_local_port_range(ctl_table *table, int write,
46 size_t *lenp, loff_t *ppos)
52 .maxlen = sizeof(range),
54 .extra1 = &ip_local_port_range_min,
55 .extra2 = &ip_local_port_range_max,
58 inet_get_local_port_range(range, range + 1);
59 ret = proc_dointvec_minmax(&tmp, write, buffer, lenp, ppos);
61 if (write && ret == 0) {
62 if (range[1] < range[0])
65 set_local_port_range(range);
71 static int proc_tcp_congestion_control(ctl_table *ctl, int write,
72 void __user *buffer, size_t *lenp, loff_t *ppos)
74 char val[TCP_CA_NAME_MAX];
77 .maxlen = TCP_CA_NAME_MAX,
81 tcp_get_default_congestion_control(val);
83 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
84 if (write && ret == 0)
85 ret = tcp_set_default_congestion_control(val);
89 static int proc_tcp_available_congestion_control(ctl_table *ctl,
91 void __user *buffer, size_t *lenp,
94 ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX, };
97 tbl.data = kmalloc(tbl.maxlen, GFP_USER);
100 tcp_get_available_congestion_control(tbl.data, TCP_CA_BUF_MAX);
101 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
106 static int proc_allowed_congestion_control(ctl_table *ctl,
108 void __user *buffer, size_t *lenp,
111 ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX };
114 tbl.data = kmalloc(tbl.maxlen, GFP_USER);
118 tcp_get_allowed_congestion_control(tbl.data, tbl.maxlen);
119 ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
120 if (write && ret == 0)
121 ret = tcp_set_allowed_congestion_control(tbl.data);
126 static struct ctl_table ipv4_table[] = {
128 .procname = "tcp_timestamps",
129 .data = &sysctl_tcp_timestamps,
130 .maxlen = sizeof(int),
132 .proc_handler = proc_dointvec
135 .procname = "tcp_window_scaling",
136 .data = &sysctl_tcp_window_scaling,
137 .maxlen = sizeof(int),
139 .proc_handler = proc_dointvec
142 .procname = "tcp_sack",
143 .data = &sysctl_tcp_sack,
144 .maxlen = sizeof(int),
146 .proc_handler = proc_dointvec
149 .procname = "tcp_retrans_collapse",
150 .data = &sysctl_tcp_retrans_collapse,
151 .maxlen = sizeof(int),
153 .proc_handler = proc_dointvec
156 .procname = "ip_default_ttl",
157 .data = &sysctl_ip_default_ttl,
158 .maxlen = sizeof(int),
160 .proc_handler = proc_dointvec_minmax,
161 .extra1 = &ip_ttl_min,
162 .extra2 = &ip_ttl_max,
165 .procname = "ip_no_pmtu_disc",
166 .data = &ipv4_config.no_pmtu_disc,
167 .maxlen = sizeof(int),
169 .proc_handler = proc_dointvec
172 .procname = "ip_nonlocal_bind",
173 .data = &sysctl_ip_nonlocal_bind,
174 .maxlen = sizeof(int),
176 .proc_handler = proc_dointvec
179 .procname = "tcp_syn_retries",
180 .data = &sysctl_tcp_syn_retries,
181 .maxlen = sizeof(int),
183 .proc_handler = proc_dointvec
186 .procname = "tcp_synack_retries",
187 .data = &sysctl_tcp_synack_retries,
188 .maxlen = sizeof(int),
190 .proc_handler = proc_dointvec
193 .procname = "tcp_max_orphans",
194 .data = &sysctl_tcp_max_orphans,
195 .maxlen = sizeof(int),
197 .proc_handler = proc_dointvec
200 .procname = "tcp_max_tw_buckets",
201 .data = &tcp_death_row.sysctl_max_tw_buckets,
202 .maxlen = sizeof(int),
204 .proc_handler = proc_dointvec
207 .procname = "ip_dynaddr",
208 .data = &sysctl_ip_dynaddr,
209 .maxlen = sizeof(int),
211 .proc_handler = proc_dointvec
214 .procname = "tcp_keepalive_time",
215 .data = &sysctl_tcp_keepalive_time,
216 .maxlen = sizeof(int),
218 .proc_handler = proc_dointvec_jiffies,
221 .procname = "tcp_keepalive_probes",
222 .data = &sysctl_tcp_keepalive_probes,
223 .maxlen = sizeof(int),
225 .proc_handler = proc_dointvec
228 .procname = "tcp_keepalive_intvl",
229 .data = &sysctl_tcp_keepalive_intvl,
230 .maxlen = sizeof(int),
232 .proc_handler = proc_dointvec_jiffies,
235 .procname = "tcp_retries1",
236 .data = &sysctl_tcp_retries1,
237 .maxlen = sizeof(int),
239 .proc_handler = proc_dointvec_minmax,
240 .extra2 = &tcp_retr1_max
243 .procname = "tcp_retries2",
244 .data = &sysctl_tcp_retries2,
245 .maxlen = sizeof(int),
247 .proc_handler = proc_dointvec
250 .procname = "tcp_fin_timeout",
251 .data = &sysctl_tcp_fin_timeout,
252 .maxlen = sizeof(int),
254 .proc_handler = proc_dointvec_jiffies,
256 #ifdef CONFIG_SYN_COOKIES
258 .procname = "tcp_syncookies",
259 .data = &sysctl_tcp_syncookies,
260 .maxlen = sizeof(int),
262 .proc_handler = proc_dointvec
266 .procname = "tcp_tw_recycle",
267 .data = &tcp_death_row.sysctl_tw_recycle,
268 .maxlen = sizeof(int),
270 .proc_handler = proc_dointvec
273 .procname = "tcp_abort_on_overflow",
274 .data = &sysctl_tcp_abort_on_overflow,
275 .maxlen = sizeof(int),
277 .proc_handler = proc_dointvec
280 .procname = "tcp_stdurg",
281 .data = &sysctl_tcp_stdurg,
282 .maxlen = sizeof(int),
284 .proc_handler = proc_dointvec
287 .procname = "tcp_rfc1337",
288 .data = &sysctl_tcp_rfc1337,
289 .maxlen = sizeof(int),
291 .proc_handler = proc_dointvec
294 .procname = "tcp_max_syn_backlog",
295 .data = &sysctl_max_syn_backlog,
296 .maxlen = sizeof(int),
298 .proc_handler = proc_dointvec
301 .procname = "ip_local_port_range",
302 .data = &sysctl_local_ports.range,
303 .maxlen = sizeof(sysctl_local_ports.range),
305 .proc_handler = ipv4_local_port_range,
308 .procname = "ip_local_reserved_ports",
309 .data = NULL, /* initialized in sysctl_ipv4_init */
312 .proc_handler = proc_do_large_bitmap,
314 #ifdef CONFIG_IP_MULTICAST
316 .procname = "igmp_max_memberships",
317 .data = &sysctl_igmp_max_memberships,
318 .maxlen = sizeof(int),
320 .proc_handler = proc_dointvec
325 .procname = "igmp_max_msf",
326 .data = &sysctl_igmp_max_msf,
327 .maxlen = sizeof(int),
329 .proc_handler = proc_dointvec
332 .procname = "inet_peer_threshold",
333 .data = &inet_peer_threshold,
334 .maxlen = sizeof(int),
336 .proc_handler = proc_dointvec
339 .procname = "inet_peer_minttl",
340 .data = &inet_peer_minttl,
341 .maxlen = sizeof(int),
343 .proc_handler = proc_dointvec_jiffies,
346 .procname = "inet_peer_maxttl",
347 .data = &inet_peer_maxttl,
348 .maxlen = sizeof(int),
350 .proc_handler = proc_dointvec_jiffies,
353 .procname = "inet_peer_gc_mintime",
354 .data = &inet_peer_gc_mintime,
355 .maxlen = sizeof(int),
357 .proc_handler = proc_dointvec_jiffies,
360 .procname = "inet_peer_gc_maxtime",
361 .data = &inet_peer_gc_maxtime,
362 .maxlen = sizeof(int),
364 .proc_handler = proc_dointvec_jiffies,
367 .procname = "tcp_orphan_retries",
368 .data = &sysctl_tcp_orphan_retries,
369 .maxlen = sizeof(int),
371 .proc_handler = proc_dointvec
374 .procname = "tcp_fack",
375 .data = &sysctl_tcp_fack,
376 .maxlen = sizeof(int),
378 .proc_handler = proc_dointvec
381 .procname = "tcp_reordering",
382 .data = &sysctl_tcp_reordering,
383 .maxlen = sizeof(int),
385 .proc_handler = proc_dointvec
388 .procname = "tcp_ecn",
389 .data = &sysctl_tcp_ecn,
390 .maxlen = sizeof(int),
392 .proc_handler = proc_dointvec
395 .procname = "tcp_dsack",
396 .data = &sysctl_tcp_dsack,
397 .maxlen = sizeof(int),
399 .proc_handler = proc_dointvec
402 .procname = "tcp_mem",
403 .data = &sysctl_tcp_mem,
404 .maxlen = sizeof(sysctl_tcp_mem),
406 .proc_handler = proc_doulongvec_minmax
409 .procname = "tcp_wmem",
410 .data = &sysctl_tcp_wmem,
411 .maxlen = sizeof(sysctl_tcp_wmem),
413 .proc_handler = proc_dointvec
416 .procname = "tcp_rmem",
417 .data = &sysctl_tcp_rmem,
418 .maxlen = sizeof(sysctl_tcp_rmem),
420 .proc_handler = proc_dointvec
423 .procname = "tcp_app_win",
424 .data = &sysctl_tcp_app_win,
425 .maxlen = sizeof(int),
427 .proc_handler = proc_dointvec
430 .procname = "tcp_adv_win_scale",
431 .data = &sysctl_tcp_adv_win_scale,
432 .maxlen = sizeof(int),
434 .proc_handler = proc_dointvec_minmax,
435 .extra1 = &tcp_adv_win_scale_min,
436 .extra2 = &tcp_adv_win_scale_max,
439 .procname = "tcp_tw_reuse",
440 .data = &sysctl_tcp_tw_reuse,
441 .maxlen = sizeof(int),
443 .proc_handler = proc_dointvec
446 .procname = "tcp_frto",
447 .data = &sysctl_tcp_frto,
448 .maxlen = sizeof(int),
450 .proc_handler = proc_dointvec
453 .procname = "tcp_frto_response",
454 .data = &sysctl_tcp_frto_response,
455 .maxlen = sizeof(int),
457 .proc_handler = proc_dointvec
460 .procname = "tcp_low_latency",
461 .data = &sysctl_tcp_low_latency,
462 .maxlen = sizeof(int),
464 .proc_handler = proc_dointvec
467 .procname = "tcp_no_metrics_save",
468 .data = &sysctl_tcp_nometrics_save,
469 .maxlen = sizeof(int),
471 .proc_handler = proc_dointvec,
474 .procname = "tcp_moderate_rcvbuf",
475 .data = &sysctl_tcp_moderate_rcvbuf,
476 .maxlen = sizeof(int),
478 .proc_handler = proc_dointvec,
481 .procname = "tcp_tso_win_divisor",
482 .data = &sysctl_tcp_tso_win_divisor,
483 .maxlen = sizeof(int),
485 .proc_handler = proc_dointvec,
488 .procname = "tcp_congestion_control",
490 .maxlen = TCP_CA_NAME_MAX,
491 .proc_handler = proc_tcp_congestion_control,
494 .procname = "tcp_abc",
495 .data = &sysctl_tcp_abc,
496 .maxlen = sizeof(int),
498 .proc_handler = proc_dointvec,
501 .procname = "tcp_mtu_probing",
502 .data = &sysctl_tcp_mtu_probing,
503 .maxlen = sizeof(int),
505 .proc_handler = proc_dointvec,
508 .procname = "tcp_base_mss",
509 .data = &sysctl_tcp_base_mss,
510 .maxlen = sizeof(int),
512 .proc_handler = proc_dointvec,
515 .procname = "tcp_workaround_signed_windows",
516 .data = &sysctl_tcp_workaround_signed_windows,
517 .maxlen = sizeof(int),
519 .proc_handler = proc_dointvec
521 #ifdef CONFIG_NET_DMA
523 .procname = "tcp_dma_copybreak",
524 .data = &sysctl_tcp_dma_copybreak,
525 .maxlen = sizeof(int),
527 .proc_handler = proc_dointvec
531 .procname = "tcp_slow_start_after_idle",
532 .data = &sysctl_tcp_slow_start_after_idle,
533 .maxlen = sizeof(int),
535 .proc_handler = proc_dointvec
537 #ifdef CONFIG_NETLABEL
539 .procname = "cipso_cache_enable",
540 .data = &cipso_v4_cache_enabled,
541 .maxlen = sizeof(int),
543 .proc_handler = proc_dointvec,
546 .procname = "cipso_cache_bucket_size",
547 .data = &cipso_v4_cache_bucketsize,
548 .maxlen = sizeof(int),
550 .proc_handler = proc_dointvec,
553 .procname = "cipso_rbm_optfmt",
554 .data = &cipso_v4_rbm_optfmt,
555 .maxlen = sizeof(int),
557 .proc_handler = proc_dointvec,
560 .procname = "cipso_rbm_strictvalid",
561 .data = &cipso_v4_rbm_strictvalid,
562 .maxlen = sizeof(int),
564 .proc_handler = proc_dointvec,
566 #endif /* CONFIG_NETLABEL */
568 .procname = "tcp_available_congestion_control",
569 .maxlen = TCP_CA_BUF_MAX,
571 .proc_handler = proc_tcp_available_congestion_control,
574 .procname = "tcp_allowed_congestion_control",
575 .maxlen = TCP_CA_BUF_MAX,
577 .proc_handler = proc_allowed_congestion_control,
580 .procname = "tcp_max_ssthresh",
581 .data = &sysctl_tcp_max_ssthresh,
582 .maxlen = sizeof(int),
584 .proc_handler = proc_dointvec,
587 .procname = "tcp_cookie_size",
588 .data = &sysctl_tcp_cookie_size,
589 .maxlen = sizeof(int),
591 .proc_handler = proc_dointvec
594 .procname = "tcp_thin_linear_timeouts",
595 .data = &sysctl_tcp_thin_linear_timeouts,
596 .maxlen = sizeof(int),
598 .proc_handler = proc_dointvec
601 .procname = "tcp_thin_dupack",
602 .data = &sysctl_tcp_thin_dupack,
603 .maxlen = sizeof(int),
605 .proc_handler = proc_dointvec
608 .procname = "udp_mem",
609 .data = &sysctl_udp_mem,
610 .maxlen = sizeof(sysctl_udp_mem),
612 .proc_handler = proc_doulongvec_minmax,
615 .procname = "udp_rmem_min",
616 .data = &sysctl_udp_rmem_min,
617 .maxlen = sizeof(sysctl_udp_rmem_min),
619 .proc_handler = proc_dointvec_minmax,
623 .procname = "udp_wmem_min",
624 .data = &sysctl_udp_wmem_min,
625 .maxlen = sizeof(sysctl_udp_wmem_min),
627 .proc_handler = proc_dointvec_minmax,
633 static struct ctl_table ipv4_net_table[] = {
635 .procname = "icmp_echo_ignore_all",
636 .data = &init_net.ipv4.sysctl_icmp_echo_ignore_all,
637 .maxlen = sizeof(int),
639 .proc_handler = proc_dointvec
642 .procname = "icmp_echo_ignore_broadcasts",
643 .data = &init_net.ipv4.sysctl_icmp_echo_ignore_broadcasts,
644 .maxlen = sizeof(int),
646 .proc_handler = proc_dointvec
649 .procname = "icmp_ignore_bogus_error_responses",
650 .data = &init_net.ipv4.sysctl_icmp_ignore_bogus_error_responses,
651 .maxlen = sizeof(int),
653 .proc_handler = proc_dointvec
656 .procname = "icmp_errors_use_inbound_ifaddr",
657 .data = &init_net.ipv4.sysctl_icmp_errors_use_inbound_ifaddr,
658 .maxlen = sizeof(int),
660 .proc_handler = proc_dointvec
663 .procname = "icmp_ratelimit",
664 .data = &init_net.ipv4.sysctl_icmp_ratelimit,
665 .maxlen = sizeof(int),
667 .proc_handler = proc_dointvec_ms_jiffies,
670 .procname = "icmp_ratemask",
671 .data = &init_net.ipv4.sysctl_icmp_ratemask,
672 .maxlen = sizeof(int),
674 .proc_handler = proc_dointvec
677 .procname = "rt_cache_rebuild_count",
678 .data = &init_net.ipv4.sysctl_rt_cache_rebuild_count,
679 .maxlen = sizeof(int),
681 .proc_handler = proc_dointvec
686 struct ctl_path net_ipv4_ctl_path[] = {
687 { .procname = "net", },
688 { .procname = "ipv4", },
691 EXPORT_SYMBOL_GPL(net_ipv4_ctl_path);
693 static __net_init int ipv4_sysctl_init_net(struct net *net)
695 struct ctl_table *table;
697 table = ipv4_net_table;
698 if (!net_eq(net, &init_net)) {
699 table = kmemdup(table, sizeof(ipv4_net_table), GFP_KERNEL);
704 &net->ipv4.sysctl_icmp_echo_ignore_all;
706 &net->ipv4.sysctl_icmp_echo_ignore_broadcasts;
708 &net->ipv4.sysctl_icmp_ignore_bogus_error_responses;
710 &net->ipv4.sysctl_icmp_errors_use_inbound_ifaddr;
712 &net->ipv4.sysctl_icmp_ratelimit;
714 &net->ipv4.sysctl_icmp_ratemask;
716 &net->ipv4.sysctl_rt_cache_rebuild_count;
719 net->ipv4.sysctl_rt_cache_rebuild_count = 4;
721 net->ipv4.ipv4_hdr = register_net_sysctl_table(net,
722 net_ipv4_ctl_path, table);
723 if (net->ipv4.ipv4_hdr == NULL)
729 if (!net_eq(net, &init_net))
735 static __net_exit void ipv4_sysctl_exit_net(struct net *net)
737 struct ctl_table *table;
739 table = net->ipv4.ipv4_hdr->ctl_table_arg;
740 unregister_net_sysctl_table(net->ipv4.ipv4_hdr);
744 static __net_initdata struct pernet_operations ipv4_sysctl_ops = {
745 .init = ipv4_sysctl_init_net,
746 .exit = ipv4_sysctl_exit_net,
749 static __init int sysctl_ipv4_init(void)
751 struct ctl_table_header *hdr;
754 for (i = ipv4_table; i->procname; i++) {
755 if (strcmp(i->procname, "ip_local_reserved_ports") == 0) {
756 i->data = sysctl_local_reserved_ports;
763 hdr = register_sysctl_paths(net_ipv4_ctl_path, ipv4_table);
767 if (register_pernet_subsys(&ipv4_sysctl_ops)) {
768 unregister_sysctl_table(hdr);
775 __initcall(sysctl_ipv4_init);