1 // SPDX-License-Identifier: GPL-2.0
3 * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
5 * Begun April 1, 1996, Mike Shaver.
6 * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
10 #include <linux/module.h>
11 #include <linux/sysctl.h>
12 #include <linux/igmp.h>
13 #include <linux/inetdevice.h>
14 #include <linux/seqlock.h>
15 #include <linux/init.h>
16 #include <linux/slab.h>
17 #include <linux/nsproxy.h>
18 #include <linux/swap.h>
22 #include <net/route.h>
25 #include <net/cipso_ipv4.h>
26 #include <net/inet_frag.h>
28 #include <net/protocol.h>
33 static int thousand
= 1000;
34 static int gso_max_segs
= GSO_MAX_SEGS
;
35 static int tcp_retr1_max
= 255;
36 static int ip_local_port_range_min
[] = { 1, 1 };
37 static int ip_local_port_range_max
[] = { 65535, 65535 };
38 static int tcp_adv_win_scale_min
= -31;
39 static int tcp_adv_win_scale_max
= 31;
40 static int ip_privileged_port_min
;
41 static int ip_privileged_port_max
= 65535;
42 static int ip_ttl_min
= 1;
43 static int ip_ttl_max
= 255;
44 static int tcp_syn_retries_min
= 1;
45 static int tcp_syn_retries_max
= MAX_TCP_SYNCNT
;
46 static int ip_ping_group_range_min
[] = { 0, 0 };
47 static int ip_ping_group_range_max
[] = { GID_T_MAX
, GID_T_MAX
};
50 static int sysctl_tcp_low_latency __read_mostly
;
52 /* Update system visible IP port range */
53 static void set_local_port_range(struct net
*net
, int range
[2])
55 bool same_parity
= !((range
[0] ^ range
[1]) & 1);
57 write_seqlock_bh(&net
->ipv4
.ip_local_ports
.lock
);
58 if (same_parity
&& !net
->ipv4
.ip_local_ports
.warned
) {
59 net
->ipv4
.ip_local_ports
.warned
= true;
60 pr_err_ratelimited("ip_local_port_range: prefer different parity for start/end values.\n");
62 net
->ipv4
.ip_local_ports
.range
[0] = range
[0];
63 net
->ipv4
.ip_local_ports
.range
[1] = range
[1];
64 write_sequnlock_bh(&net
->ipv4
.ip_local_ports
.lock
);
67 /* Validate changes from /proc interface. */
68 static int ipv4_local_port_range(struct ctl_table
*table
, int write
,
70 size_t *lenp
, loff_t
*ppos
)
73 container_of(table
->data
, struct net
, ipv4
.ip_local_ports
.range
);
76 struct ctl_table tmp
= {
78 .maxlen
= sizeof(range
),
80 .extra1
= &ip_local_port_range_min
,
81 .extra2
= &ip_local_port_range_max
,
84 inet_get_local_port_range(net
, &range
[0], &range
[1]);
86 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
88 if (write
&& ret
== 0) {
89 /* Ensure that the upper limit is not smaller than the lower,
90 * and that the lower does not encroach upon the privileged
93 if ((range
[1] < range
[0]) ||
94 (range
[0] < net
->ipv4
.sysctl_ip_prot_sock
))
97 set_local_port_range(net
, range
);
103 /* Validate changes from /proc interface. */
104 static int ipv4_privileged_ports(struct ctl_table
*table
, int write
,
105 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
107 struct net
*net
= container_of(table
->data
, struct net
,
108 ipv4
.sysctl_ip_prot_sock
);
112 struct ctl_table tmp
= {
114 .maxlen
= sizeof(pports
),
116 .extra1
= &ip_privileged_port_min
,
117 .extra2
= &ip_privileged_port_max
,
120 pports
= net
->ipv4
.sysctl_ip_prot_sock
;
122 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
124 if (write
&& ret
== 0) {
125 inet_get_local_port_range(net
, &range
[0], &range
[1]);
126 /* Ensure that the local port range doesn't overlap with the
127 * privileged port range.
129 if (range
[0] < pports
)
132 net
->ipv4
.sysctl_ip_prot_sock
= pports
;
138 static void inet_get_ping_group_range_table(struct ctl_table
*table
, kgid_t
*low
, kgid_t
*high
)
140 kgid_t
*data
= table
->data
;
142 container_of(table
->data
, struct net
, ipv4
.ping_group_range
.range
);
145 seq
= read_seqbegin(&net
->ipv4
.ping_group_range
.lock
);
149 } while (read_seqretry(&net
->ipv4
.ping_group_range
.lock
, seq
));
152 /* Update system visible IP port range */
153 static void set_ping_group_range(struct ctl_table
*table
, kgid_t low
, kgid_t high
)
155 kgid_t
*data
= table
->data
;
157 container_of(table
->data
, struct net
, ipv4
.ping_group_range
.range
);
158 write_seqlock(&net
->ipv4
.ping_group_range
.lock
);
161 write_sequnlock(&net
->ipv4
.ping_group_range
.lock
);
164 /* Validate changes from /proc interface. */
165 static int ipv4_ping_group_range(struct ctl_table
*table
, int write
,
167 size_t *lenp
, loff_t
*ppos
)
169 struct user_namespace
*user_ns
= current_user_ns();
173 struct ctl_table tmp
= {
175 .maxlen
= sizeof(urange
),
177 .extra1
= &ip_ping_group_range_min
,
178 .extra2
= &ip_ping_group_range_max
,
181 inet_get_ping_group_range_table(table
, &low
, &high
);
182 urange
[0] = from_kgid_munged(user_ns
, low
);
183 urange
[1] = from_kgid_munged(user_ns
, high
);
184 ret
= proc_dointvec_minmax(&tmp
, write
, buffer
, lenp
, ppos
);
186 if (write
&& ret
== 0) {
187 low
= make_kgid(user_ns
, urange
[0]);
188 high
= make_kgid(user_ns
, urange
[1]);
189 if (!gid_valid(low
) || !gid_valid(high
))
191 if (urange
[1] < urange
[0] || gid_lt(high
, low
)) {
192 low
= make_kgid(&init_user_ns
, 1);
193 high
= make_kgid(&init_user_ns
, 0);
195 set_ping_group_range(table
, low
, high
);
201 /* Validate changes from /proc interface. */
202 static int proc_tcp_default_init_rwnd(struct ctl_table
*ctl
, int write
,
204 size_t *lenp
, loff_t
*ppos
)
206 int old_value
= *(int *)ctl
->data
;
207 int ret
= proc_dointvec(ctl
, write
, buffer
, lenp
, ppos
);
208 int new_value
= *(int *)ctl
->data
;
210 if (write
&& ret
== 0 && (new_value
< 3 || new_value
> 100))
211 *(int *)ctl
->data
= old_value
;
216 static int proc_tcp_congestion_control(struct ctl_table
*ctl
, int write
,
217 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
219 char val
[TCP_CA_NAME_MAX
];
220 struct ctl_table tbl
= {
222 .maxlen
= TCP_CA_NAME_MAX
,
226 tcp_get_default_congestion_control(val
);
228 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
229 if (write
&& ret
== 0)
230 ret
= tcp_set_default_congestion_control(val
);
234 static int proc_tcp_available_congestion_control(struct ctl_table
*ctl
,
236 void __user
*buffer
, size_t *lenp
,
239 struct ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
, };
242 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
245 tcp_get_available_congestion_control(tbl
.data
, TCP_CA_BUF_MAX
);
246 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
251 static int proc_allowed_congestion_control(struct ctl_table
*ctl
,
253 void __user
*buffer
, size_t *lenp
,
256 struct ctl_table tbl
= { .maxlen
= TCP_CA_BUF_MAX
};
259 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
263 tcp_get_allowed_congestion_control(tbl
.data
, tbl
.maxlen
);
264 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
265 if (write
&& ret
== 0)
266 ret
= tcp_set_allowed_congestion_control(tbl
.data
);
271 static int proc_tcp_fastopen_key(struct ctl_table
*ctl
, int write
,
272 void __user
*buffer
, size_t *lenp
,
275 struct ctl_table tbl
= { .maxlen
= (TCP_FASTOPEN_KEY_LENGTH
* 2 + 10) };
276 struct tcp_fastopen_context
*ctxt
;
277 u32 user_key
[4]; /* 16 bytes, matching TCP_FASTOPEN_KEY_LENGTH */
281 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_KERNEL
);
286 ctxt
= rcu_dereference(tcp_fastopen_ctx
);
288 memcpy(key
, ctxt
->key
, TCP_FASTOPEN_KEY_LENGTH
);
290 memset(key
, 0, sizeof(key
));
293 for (i
= 0; i
< ARRAY_SIZE(key
); i
++)
294 user_key
[i
] = le32_to_cpu(key
[i
]);
296 snprintf(tbl
.data
, tbl
.maxlen
, "%08x-%08x-%08x-%08x",
297 user_key
[0], user_key
[1], user_key
[2], user_key
[3]);
298 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
300 if (write
&& ret
== 0) {
301 if (sscanf(tbl
.data
, "%x-%x-%x-%x", user_key
, user_key
+ 1,
302 user_key
+ 2, user_key
+ 3) != 4) {
306 /* Generate a dummy secret but don't publish it. This
307 * is needed so we don't regenerate a new key on the
308 * first invocation of tcp_fastopen_cookie_gen
310 tcp_fastopen_init_key_once(false);
312 for (i
= 0; i
< ARRAY_SIZE(user_key
); i
++)
313 key
[i
] = cpu_to_le32(user_key
[i
]);
315 tcp_fastopen_reset_cipher(key
, TCP_FASTOPEN_KEY_LENGTH
);
319 pr_debug("proc FO key set 0x%x-%x-%x-%x <- 0x%s: %u\n",
320 user_key
[0], user_key
[1], user_key
[2], user_key
[3],
321 (char *)tbl
.data
, ret
);
326 static void proc_configure_early_demux(int enabled
, int protocol
)
328 struct net_protocol
*ipprot
;
329 #if IS_ENABLED(CONFIG_IPV6)
330 struct inet6_protocol
*ip6prot
;
335 ipprot
= rcu_dereference(inet_protos
[protocol
]);
337 ipprot
->early_demux
= enabled
? ipprot
->early_demux_handler
:
340 #if IS_ENABLED(CONFIG_IPV6)
341 ip6prot
= rcu_dereference(inet6_protos
[protocol
]);
343 ip6prot
->early_demux
= enabled
? ip6prot
->early_demux_handler
:
349 static int proc_tcp_early_demux(struct ctl_table
*table
, int write
,
350 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
354 ret
= proc_dointvec(table
, write
, buffer
, lenp
, ppos
);
357 int enabled
= init_net
.ipv4
.sysctl_tcp_early_demux
;
359 proc_configure_early_demux(enabled
, IPPROTO_TCP
);
365 static int proc_udp_early_demux(struct ctl_table
*table
, int write
,
366 void __user
*buffer
, size_t *lenp
, loff_t
*ppos
)
370 ret
= proc_dointvec(table
, write
, buffer
, lenp
, ppos
);
373 int enabled
= init_net
.ipv4
.sysctl_udp_early_demux
;
375 proc_configure_early_demux(enabled
, IPPROTO_UDP
);
381 static int proc_tfo_blackhole_detect_timeout(struct ctl_table
*table
,
384 size_t *lenp
, loff_t
*ppos
)
388 ret
= proc_dointvec_minmax(table
, write
, buffer
, lenp
, ppos
);
389 if (write
&& ret
== 0)
390 tcp_fastopen_active_timeout_reset();
395 static int proc_tcp_available_ulp(struct ctl_table
*ctl
,
397 void __user
*buffer
, size_t *lenp
,
400 struct ctl_table tbl
= { .maxlen
= TCP_ULP_BUF_MAX
, };
403 tbl
.data
= kmalloc(tbl
.maxlen
, GFP_USER
);
406 tcp_get_available_ulp(tbl
.data
, TCP_ULP_BUF_MAX
);
407 ret
= proc_dostring(&tbl
, write
, buffer
, lenp
, ppos
);
413 static struct ctl_table ipv4_table
[] = {
415 .procname
= "tcp_retrans_collapse",
416 .data
= &sysctl_tcp_retrans_collapse
,
417 .maxlen
= sizeof(int),
419 .proc_handler
= proc_dointvec
422 .procname
= "tcp_max_orphans",
423 .data
= &sysctl_tcp_max_orphans
,
424 .maxlen
= sizeof(int),
426 .proc_handler
= proc_dointvec
429 .procname
= "tcp_fastopen",
430 .data
= &sysctl_tcp_fastopen
,
431 .maxlen
= sizeof(int),
433 .proc_handler
= proc_dointvec
,
436 .procname
= "tcp_fastopen_key",
438 .maxlen
= ((TCP_FASTOPEN_KEY_LENGTH
* 2) + 10),
439 .proc_handler
= proc_tcp_fastopen_key
,
442 .procname
= "tcp_fastopen_blackhole_timeout_sec",
443 .data
= &sysctl_tcp_fastopen_blackhole_timeout
,
444 .maxlen
= sizeof(int),
446 .proc_handler
= proc_tfo_blackhole_detect_timeout
,
450 .procname
= "tcp_abort_on_overflow",
451 .data
= &sysctl_tcp_abort_on_overflow
,
452 .maxlen
= sizeof(int),
454 .proc_handler
= proc_dointvec
457 .procname
= "tcp_stdurg",
458 .data
= &sysctl_tcp_stdurg
,
459 .maxlen
= sizeof(int),
461 .proc_handler
= proc_dointvec
464 .procname
= "tcp_rfc1337",
465 .data
= &sysctl_tcp_rfc1337
,
466 .maxlen
= sizeof(int),
468 .proc_handler
= proc_dointvec
471 .procname
= "inet_peer_threshold",
472 .data
= &inet_peer_threshold
,
473 .maxlen
= sizeof(int),
475 .proc_handler
= proc_dointvec
478 .procname
= "inet_peer_minttl",
479 .data
= &inet_peer_minttl
,
480 .maxlen
= sizeof(int),
482 .proc_handler
= proc_dointvec_jiffies
,
485 .procname
= "inet_peer_maxttl",
486 .data
= &inet_peer_maxttl
,
487 .maxlen
= sizeof(int),
489 .proc_handler
= proc_dointvec_jiffies
,
492 .procname
= "tcp_fack",
493 .data
= &sysctl_tcp_fack
,
494 .maxlen
= sizeof(int),
496 .proc_handler
= proc_dointvec
499 .procname
= "tcp_recovery",
500 .data
= &sysctl_tcp_recovery
,
501 .maxlen
= sizeof(int),
503 .proc_handler
= proc_dointvec
,
506 .procname
= "tcp_max_reordering",
507 .data
= &sysctl_tcp_max_reordering
,
508 .maxlen
= sizeof(int),
510 .proc_handler
= proc_dointvec
513 .procname
= "tcp_dsack",
514 .data
= &sysctl_tcp_dsack
,
515 .maxlen
= sizeof(int),
517 .proc_handler
= proc_dointvec
520 .procname
= "tcp_mem",
521 .maxlen
= sizeof(sysctl_tcp_mem
),
522 .data
= &sysctl_tcp_mem
,
524 .proc_handler
= proc_doulongvec_minmax
,
527 .procname
= "tcp_wmem",
528 .data
= &sysctl_tcp_wmem
,
529 .maxlen
= sizeof(sysctl_tcp_wmem
),
531 .proc_handler
= proc_dointvec_minmax
,
535 .procname
= "tcp_rmem",
536 .data
= &sysctl_tcp_rmem
,
537 .maxlen
= sizeof(sysctl_tcp_rmem
),
539 .proc_handler
= proc_dointvec_minmax
,
543 .procname
= "tcp_app_win",
544 .data
= &sysctl_tcp_app_win
,
545 .maxlen
= sizeof(int),
547 .proc_handler
= proc_dointvec
550 .procname
= "tcp_adv_win_scale",
551 .data
= &sysctl_tcp_adv_win_scale
,
552 .maxlen
= sizeof(int),
554 .proc_handler
= proc_dointvec_minmax
,
555 .extra1
= &tcp_adv_win_scale_min
,
556 .extra2
= &tcp_adv_win_scale_max
,
559 .procname
= "tcp_frto",
560 .data
= &sysctl_tcp_frto
,
561 .maxlen
= sizeof(int),
563 .proc_handler
= proc_dointvec
566 .procname
= "tcp_min_rtt_wlen",
567 .data
= &sysctl_tcp_min_rtt_wlen
,
568 .maxlen
= sizeof(int),
570 .proc_handler
= proc_dointvec
573 .procname
= "tcp_low_latency",
574 .data
= &sysctl_tcp_low_latency
,
575 .maxlen
= sizeof(int),
577 .proc_handler
= proc_dointvec
580 .procname
= "tcp_no_metrics_save",
581 .data
= &sysctl_tcp_nometrics_save
,
582 .maxlen
= sizeof(int),
584 .proc_handler
= proc_dointvec
,
587 .procname
= "tcp_moderate_rcvbuf",
588 .data
= &sysctl_tcp_moderate_rcvbuf
,
589 .maxlen
= sizeof(int),
591 .proc_handler
= proc_dointvec
,
594 .procname
= "tcp_tso_win_divisor",
595 .data
= &sysctl_tcp_tso_win_divisor
,
596 .maxlen
= sizeof(int),
598 .proc_handler
= proc_dointvec
,
601 .procname
= "tcp_congestion_control",
603 .maxlen
= TCP_CA_NAME_MAX
,
604 .proc_handler
= proc_tcp_congestion_control
,
607 .procname
= "tcp_workaround_signed_windows",
608 .data
= &sysctl_tcp_workaround_signed_windows
,
609 .maxlen
= sizeof(int),
611 .proc_handler
= proc_dointvec
614 .procname
= "tcp_limit_output_bytes",
615 .data
= &sysctl_tcp_limit_output_bytes
,
616 .maxlen
= sizeof(int),
618 .proc_handler
= proc_dointvec
621 .procname
= "tcp_challenge_ack_limit",
622 .data
= &sysctl_tcp_challenge_ack_limit
,
623 .maxlen
= sizeof(int),
625 .proc_handler
= proc_dointvec
628 .procname
= "tcp_slow_start_after_idle",
629 .data
= &sysctl_tcp_slow_start_after_idle
,
630 .maxlen
= sizeof(int),
632 .proc_handler
= proc_dointvec
634 #ifdef CONFIG_NETLABEL
636 .procname
= "cipso_cache_enable",
637 .data
= &cipso_v4_cache_enabled
,
638 .maxlen
= sizeof(int),
640 .proc_handler
= proc_dointvec
,
643 .procname
= "cipso_cache_bucket_size",
644 .data
= &cipso_v4_cache_bucketsize
,
645 .maxlen
= sizeof(int),
647 .proc_handler
= proc_dointvec
,
650 .procname
= "cipso_rbm_optfmt",
651 .data
= &cipso_v4_rbm_optfmt
,
652 .maxlen
= sizeof(int),
654 .proc_handler
= proc_dointvec
,
657 .procname
= "cipso_rbm_strictvalid",
658 .data
= &cipso_v4_rbm_strictvalid
,
659 .maxlen
= sizeof(int),
661 .proc_handler
= proc_dointvec
,
663 #endif /* CONFIG_NETLABEL */
665 .procname
= "tcp_available_congestion_control",
666 .maxlen
= TCP_CA_BUF_MAX
,
668 .proc_handler
= proc_tcp_available_congestion_control
,
671 .procname
= "tcp_allowed_congestion_control",
672 .maxlen
= TCP_CA_BUF_MAX
,
674 .proc_handler
= proc_allowed_congestion_control
,
677 .procname
= "tcp_thin_linear_timeouts",
678 .data
= &sysctl_tcp_thin_linear_timeouts
,
679 .maxlen
= sizeof(int),
681 .proc_handler
= proc_dointvec
684 .procname
= "tcp_early_retrans",
685 .data
= &sysctl_tcp_early_retrans
,
686 .maxlen
= sizeof(int),
688 .proc_handler
= proc_dointvec_minmax
,
693 .procname
= "tcp_min_tso_segs",
694 .data
= &sysctl_tcp_min_tso_segs
,
695 .maxlen
= sizeof(int),
697 .proc_handler
= proc_dointvec_minmax
,
699 .extra2
= &gso_max_segs
,
702 .procname
= "tcp_pacing_ss_ratio",
703 .data
= &sysctl_tcp_pacing_ss_ratio
,
704 .maxlen
= sizeof(int),
706 .proc_handler
= proc_dointvec_minmax
,
711 .procname
= "tcp_pacing_ca_ratio",
712 .data
= &sysctl_tcp_pacing_ca_ratio
,
713 .maxlen
= sizeof(int),
715 .proc_handler
= proc_dointvec_minmax
,
720 .procname
= "tcp_autocorking",
721 .data
= &sysctl_tcp_autocorking
,
722 .maxlen
= sizeof(int),
724 .proc_handler
= proc_dointvec_minmax
,
729 .procname
= "tcp_invalid_ratelimit",
730 .data
= &sysctl_tcp_invalid_ratelimit
,
731 .maxlen
= sizeof(int),
733 .proc_handler
= proc_dointvec_ms_jiffies
,
736 .procname
= "tcp_available_ulp",
737 .maxlen
= TCP_ULP_BUF_MAX
,
739 .proc_handler
= proc_tcp_available_ulp
,
742 .procname
= "tcp_default_init_rwnd",
743 .data
= &sysctl_tcp_default_init_rwnd
,
744 .maxlen
= sizeof(int),
746 .proc_handler
= proc_tcp_default_init_rwnd
749 .procname
= "icmp_msgs_per_sec",
750 .data
= &sysctl_icmp_msgs_per_sec
,
751 .maxlen
= sizeof(int),
753 .proc_handler
= proc_dointvec_minmax
,
757 .procname
= "icmp_msgs_burst",
758 .data
= &sysctl_icmp_msgs_burst
,
759 .maxlen
= sizeof(int),
761 .proc_handler
= proc_dointvec_minmax
,
765 .procname
= "udp_mem",
766 .data
= &sysctl_udp_mem
,
767 .maxlen
= sizeof(sysctl_udp_mem
),
769 .proc_handler
= proc_doulongvec_minmax
,
772 .procname
= "udp_rmem_min",
773 .data
= &sysctl_udp_rmem_min
,
774 .maxlen
= sizeof(sysctl_udp_rmem_min
),
776 .proc_handler
= proc_dointvec_minmax
,
780 .procname
= "udp_wmem_min",
781 .data
= &sysctl_udp_wmem_min
,
782 .maxlen
= sizeof(sysctl_udp_wmem_min
),
784 .proc_handler
= proc_dointvec_minmax
,
790 static struct ctl_table ipv4_net_table
[] = {
792 .procname
= "icmp_echo_ignore_all",
793 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_all
,
794 .maxlen
= sizeof(int),
796 .proc_handler
= proc_dointvec
799 .procname
= "icmp_echo_ignore_broadcasts",
800 .data
= &init_net
.ipv4
.sysctl_icmp_echo_ignore_broadcasts
,
801 .maxlen
= sizeof(int),
803 .proc_handler
= proc_dointvec
806 .procname
= "icmp_ignore_bogus_error_responses",
807 .data
= &init_net
.ipv4
.sysctl_icmp_ignore_bogus_error_responses
,
808 .maxlen
= sizeof(int),
810 .proc_handler
= proc_dointvec
813 .procname
= "icmp_errors_use_inbound_ifaddr",
814 .data
= &init_net
.ipv4
.sysctl_icmp_errors_use_inbound_ifaddr
,
815 .maxlen
= sizeof(int),
817 .proc_handler
= proc_dointvec
820 .procname
= "icmp_ratelimit",
821 .data
= &init_net
.ipv4
.sysctl_icmp_ratelimit
,
822 .maxlen
= sizeof(int),
824 .proc_handler
= proc_dointvec_ms_jiffies
,
827 .procname
= "icmp_ratemask",
828 .data
= &init_net
.ipv4
.sysctl_icmp_ratemask
,
829 .maxlen
= sizeof(int),
831 .proc_handler
= proc_dointvec
834 .procname
= "ping_group_range",
835 .data
= &init_net
.ipv4
.ping_group_range
.range
,
836 .maxlen
= sizeof(gid_t
)*2,
838 .proc_handler
= ipv4_ping_group_range
,
841 .procname
= "tcp_ecn",
842 .data
= &init_net
.ipv4
.sysctl_tcp_ecn
,
843 .maxlen
= sizeof(int),
845 .proc_handler
= proc_dointvec
848 .procname
= "tcp_ecn_fallback",
849 .data
= &init_net
.ipv4
.sysctl_tcp_ecn_fallback
,
850 .maxlen
= sizeof(int),
852 .proc_handler
= proc_dointvec
855 .procname
= "ip_dynaddr",
856 .data
= &init_net
.ipv4
.sysctl_ip_dynaddr
,
857 .maxlen
= sizeof(int),
859 .proc_handler
= proc_dointvec
862 .procname
= "ip_early_demux",
863 .data
= &init_net
.ipv4
.sysctl_ip_early_demux
,
864 .maxlen
= sizeof(int),
866 .proc_handler
= proc_dointvec
869 .procname
= "udp_early_demux",
870 .data
= &init_net
.ipv4
.sysctl_udp_early_demux
,
871 .maxlen
= sizeof(int),
873 .proc_handler
= proc_udp_early_demux
876 .procname
= "tcp_early_demux",
877 .data
= &init_net
.ipv4
.sysctl_tcp_early_demux
,
878 .maxlen
= sizeof(int),
880 .proc_handler
= proc_tcp_early_demux
883 .procname
= "ip_default_ttl",
884 .data
= &init_net
.ipv4
.sysctl_ip_default_ttl
,
885 .maxlen
= sizeof(int),
887 .proc_handler
= proc_dointvec_minmax
,
888 .extra1
= &ip_ttl_min
,
889 .extra2
= &ip_ttl_max
,
892 .procname
= "ip_local_port_range",
893 .maxlen
= sizeof(init_net
.ipv4
.ip_local_ports
.range
),
894 .data
= &init_net
.ipv4
.ip_local_ports
.range
,
896 .proc_handler
= ipv4_local_port_range
,
899 .procname
= "ip_local_reserved_ports",
900 .data
= &init_net
.ipv4
.sysctl_local_reserved_ports
,
903 .proc_handler
= proc_do_large_bitmap
,
906 .procname
= "ip_no_pmtu_disc",
907 .data
= &init_net
.ipv4
.sysctl_ip_no_pmtu_disc
,
908 .maxlen
= sizeof(int),
910 .proc_handler
= proc_dointvec
913 .procname
= "ip_forward_use_pmtu",
914 .data
= &init_net
.ipv4
.sysctl_ip_fwd_use_pmtu
,
915 .maxlen
= sizeof(int),
917 .proc_handler
= proc_dointvec
,
920 .procname
= "ip_nonlocal_bind",
921 .data
= &init_net
.ipv4
.sysctl_ip_nonlocal_bind
,
922 .maxlen
= sizeof(int),
924 .proc_handler
= proc_dointvec
927 .procname
= "fwmark_reflect",
928 .data
= &init_net
.ipv4
.sysctl_fwmark_reflect
,
929 .maxlen
= sizeof(int),
931 .proc_handler
= proc_dointvec
,
934 .procname
= "tcp_fwmark_accept",
935 .data
= &init_net
.ipv4
.sysctl_tcp_fwmark_accept
,
936 .maxlen
= sizeof(int),
938 .proc_handler
= proc_dointvec
,
940 #ifdef CONFIG_NET_L3_MASTER_DEV
942 .procname
= "tcp_l3mdev_accept",
943 .data
= &init_net
.ipv4
.sysctl_tcp_l3mdev_accept
,
944 .maxlen
= sizeof(int),
946 .proc_handler
= proc_dointvec_minmax
,
952 .procname
= "tcp_mtu_probing",
953 .data
= &init_net
.ipv4
.sysctl_tcp_mtu_probing
,
954 .maxlen
= sizeof(int),
956 .proc_handler
= proc_dointvec
,
959 .procname
= "tcp_base_mss",
960 .data
= &init_net
.ipv4
.sysctl_tcp_base_mss
,
961 .maxlen
= sizeof(int),
963 .proc_handler
= proc_dointvec
,
966 .procname
= "tcp_probe_threshold",
967 .data
= &init_net
.ipv4
.sysctl_tcp_probe_threshold
,
968 .maxlen
= sizeof(int),
970 .proc_handler
= proc_dointvec
,
973 .procname
= "tcp_probe_interval",
974 .data
= &init_net
.ipv4
.sysctl_tcp_probe_interval
,
975 .maxlen
= sizeof(int),
977 .proc_handler
= proc_dointvec
,
980 .procname
= "igmp_link_local_mcast_reports",
981 .data
= &init_net
.ipv4
.sysctl_igmp_llm_reports
,
982 .maxlen
= sizeof(int),
984 .proc_handler
= proc_dointvec
987 .procname
= "igmp_max_memberships",
988 .data
= &init_net
.ipv4
.sysctl_igmp_max_memberships
,
989 .maxlen
= sizeof(int),
991 .proc_handler
= proc_dointvec
994 .procname
= "igmp_max_msf",
995 .data
= &init_net
.ipv4
.sysctl_igmp_max_msf
,
996 .maxlen
= sizeof(int),
998 .proc_handler
= proc_dointvec
1000 #ifdef CONFIG_IP_MULTICAST
1002 .procname
= "igmp_qrv",
1003 .data
= &init_net
.ipv4
.sysctl_igmp_qrv
,
1004 .maxlen
= sizeof(int),
1006 .proc_handler
= proc_dointvec_minmax
,
1011 .procname
= "tcp_keepalive_time",
1012 .data
= &init_net
.ipv4
.sysctl_tcp_keepalive_time
,
1013 .maxlen
= sizeof(int),
1015 .proc_handler
= proc_dointvec_jiffies
,
1018 .procname
= "tcp_keepalive_probes",
1019 .data
= &init_net
.ipv4
.sysctl_tcp_keepalive_probes
,
1020 .maxlen
= sizeof(int),
1022 .proc_handler
= proc_dointvec
1025 .procname
= "tcp_keepalive_intvl",
1026 .data
= &init_net
.ipv4
.sysctl_tcp_keepalive_intvl
,
1027 .maxlen
= sizeof(int),
1029 .proc_handler
= proc_dointvec_jiffies
,
1032 .procname
= "tcp_syn_retries",
1033 .data
= &init_net
.ipv4
.sysctl_tcp_syn_retries
,
1034 .maxlen
= sizeof(int),
1036 .proc_handler
= proc_dointvec_minmax
,
1037 .extra1
= &tcp_syn_retries_min
,
1038 .extra2
= &tcp_syn_retries_max
1041 .procname
= "tcp_synack_retries",
1042 .data
= &init_net
.ipv4
.sysctl_tcp_synack_retries
,
1043 .maxlen
= sizeof(int),
1045 .proc_handler
= proc_dointvec
1047 #ifdef CONFIG_SYN_COOKIES
1049 .procname
= "tcp_syncookies",
1050 .data
= &init_net
.ipv4
.sysctl_tcp_syncookies
,
1051 .maxlen
= sizeof(int),
1053 .proc_handler
= proc_dointvec
1057 .procname
= "tcp_reordering",
1058 .data
= &init_net
.ipv4
.sysctl_tcp_reordering
,
1059 .maxlen
= sizeof(int),
1061 .proc_handler
= proc_dointvec
1064 .procname
= "tcp_retries1",
1065 .data
= &init_net
.ipv4
.sysctl_tcp_retries1
,
1066 .maxlen
= sizeof(int),
1068 .proc_handler
= proc_dointvec_minmax
,
1069 .extra2
= &tcp_retr1_max
1072 .procname
= "tcp_retries2",
1073 .data
= &init_net
.ipv4
.sysctl_tcp_retries2
,
1074 .maxlen
= sizeof(int),
1076 .proc_handler
= proc_dointvec
1079 .procname
= "tcp_orphan_retries",
1080 .data
= &init_net
.ipv4
.sysctl_tcp_orphan_retries
,
1081 .maxlen
= sizeof(int),
1083 .proc_handler
= proc_dointvec
1086 .procname
= "tcp_fin_timeout",
1087 .data
= &init_net
.ipv4
.sysctl_tcp_fin_timeout
,
1088 .maxlen
= sizeof(int),
1090 .proc_handler
= proc_dointvec_jiffies
,
1093 .procname
= "tcp_notsent_lowat",
1094 .data
= &init_net
.ipv4
.sysctl_tcp_notsent_lowat
,
1095 .maxlen
= sizeof(unsigned int),
1097 .proc_handler
= proc_douintvec
,
1100 .procname
= "tcp_tw_reuse",
1101 .data
= &init_net
.ipv4
.sysctl_tcp_tw_reuse
,
1102 .maxlen
= sizeof(int),
1104 .proc_handler
= proc_dointvec
1107 .procname
= "tcp_max_tw_buckets",
1108 .data
= &init_net
.ipv4
.tcp_death_row
.sysctl_max_tw_buckets
,
1109 .maxlen
= sizeof(int),
1111 .proc_handler
= proc_dointvec
1114 .procname
= "tcp_max_syn_backlog",
1115 .data
= &init_net
.ipv4
.sysctl_max_syn_backlog
,
1116 .maxlen
= sizeof(int),
1118 .proc_handler
= proc_dointvec
1120 #ifdef CONFIG_IP_ROUTE_MULTIPATH
1122 .procname
= "fib_multipath_use_neigh",
1123 .data
= &init_net
.ipv4
.sysctl_fib_multipath_use_neigh
,
1124 .maxlen
= sizeof(int),
1126 .proc_handler
= proc_dointvec_minmax
,
1131 .procname
= "fib_multipath_hash_policy",
1132 .data
= &init_net
.ipv4
.sysctl_fib_multipath_hash_policy
,
1133 .maxlen
= sizeof(int),
1135 .proc_handler
= proc_dointvec_minmax
,
1141 .procname
= "ip_unprivileged_port_start",
1142 .maxlen
= sizeof(int),
1143 .data
= &init_net
.ipv4
.sysctl_ip_prot_sock
,
1145 .proc_handler
= ipv4_privileged_ports
,
1147 #ifdef CONFIG_NET_L3_MASTER_DEV
1149 .procname
= "udp_l3mdev_accept",
1150 .data
= &init_net
.ipv4
.sysctl_udp_l3mdev_accept
,
1151 .maxlen
= sizeof(int),
1153 .proc_handler
= proc_dointvec_minmax
,
1159 .procname
= "tcp_sack",
1160 .data
= &init_net
.ipv4
.sysctl_tcp_sack
,
1161 .maxlen
= sizeof(int),
1163 .proc_handler
= proc_dointvec
1166 .procname
= "tcp_window_scaling",
1167 .data
= &init_net
.ipv4
.sysctl_tcp_window_scaling
,
1168 .maxlen
= sizeof(int),
1170 .proc_handler
= proc_dointvec
1173 .procname
= "tcp_timestamps",
1174 .data
= &init_net
.ipv4
.sysctl_tcp_timestamps
,
1175 .maxlen
= sizeof(int),
1177 .proc_handler
= proc_dointvec
1182 static __net_init
int ipv4_sysctl_init_net(struct net
*net
)
1184 struct ctl_table
*table
;
1186 table
= ipv4_net_table
;
1187 if (!net_eq(net
, &init_net
)) {
1190 table
= kmemdup(table
, sizeof(ipv4_net_table
), GFP_KERNEL
);
1194 /* Update the variables to point into the current struct net */
1195 for (i
= 0; i
< ARRAY_SIZE(ipv4_net_table
) - 1; i
++)
1196 table
[i
].data
+= (void *)net
- (void *)&init_net
;
1199 net
->ipv4
.ipv4_hdr
= register_net_sysctl(net
, "net/ipv4", table
);
1200 if (!net
->ipv4
.ipv4_hdr
)
1203 net
->ipv4
.sysctl_local_reserved_ports
= kzalloc(65536 / 8, GFP_KERNEL
);
1204 if (!net
->ipv4
.sysctl_local_reserved_ports
)
1210 unregister_net_sysctl_table(net
->ipv4
.ipv4_hdr
);
1212 if (!net_eq(net
, &init_net
))
1218 static __net_exit
void ipv4_sysctl_exit_net(struct net
*net
)
1220 struct ctl_table
*table
;
1222 kfree(net
->ipv4
.sysctl_local_reserved_ports
);
1223 table
= net
->ipv4
.ipv4_hdr
->ctl_table_arg
;
1224 unregister_net_sysctl_table(net
->ipv4
.ipv4_hdr
);
1228 static __net_initdata
struct pernet_operations ipv4_sysctl_ops
= {
1229 .init
= ipv4_sysctl_init_net
,
1230 .exit
= ipv4_sysctl_exit_net
,
1233 static __init
int sysctl_ipv4_init(void)
1235 struct ctl_table_header
*hdr
;
1237 hdr
= register_net_sysctl(&init_net
, "net/ipv4", ipv4_table
);
1241 if (register_pernet_subsys(&ipv4_sysctl_ops
)) {
1242 unregister_net_sysctl_table(hdr
);
1249 __initcall(sysctl_ipv4_init
);