2 * Copyright (c) 2009, 2010, 2011, 2012, 2013, 2014, 2015 Nicira, Inc.
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at:
8 * http://www.apache.org/licenses/LICENSE-2.0
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
20 #include "byte-order.h"
21 #include "dynamic-string.h"
24 #include "tun-metadata.h"
26 /* Converts the flow in 'flow' into a match in 'match', with the given
29 match_init(struct match *match,
30 const struct flow *flow, const struct flow_wildcards *wc)
34 match_zero_wildcarded_fields(match);
35 memset(&match->tun_md, 0, sizeof match->tun_md);
38 /* Converts a flow into a match. It sets the wildcard masks based on
39 * the packet contents. It will not set the mask for fields that do not
40 * make sense for the packet type. */
42 match_wc_init(struct match *match, const struct flow *flow)
46 flow_wildcards_init_for_packet(&match->wc, flow);
47 WC_MASK_FIELD(&match->wc, regs);
48 WC_MASK_FIELD(&match->wc, metadata);
50 memset(&match->tun_md, 0, sizeof match->tun_md);
53 /* Initializes 'match' as a "catch-all" match that matches every packet. */
55 match_init_catchall(struct match *match)
57 memset(&match->flow, 0, sizeof match->flow);
58 flow_wildcards_init_catchall(&match->wc);
59 memset(&match->tun_md, 0, sizeof match->tun_md);
62 /* For each bit or field wildcarded in 'match', sets the corresponding bit or
63 * field in 'flow' to all-0-bits. It is important to maintain this invariant
64 * in a match that might be inserted into a classifier.
66 * It is never necessary to call this function directly for a match that is
67 * initialized or modified only by match_*() functions. It is useful to
68 * restore the invariant in a match whose 'wc' member is modified by hand.
71 match_zero_wildcarded_fields(struct match *match)
73 flow_zero_wildcards(&match->flow, &match->wc);
77 match_set_dp_hash(struct match *match, uint32_t value)
79 match_set_dp_hash_masked(match, value, UINT32_MAX);
83 match_set_dp_hash_masked(struct match *match, uint32_t value, uint32_t mask)
85 match->wc.masks.dp_hash = mask;
86 match->flow.dp_hash = value & mask;
90 match_set_recirc_id(struct match *match, uint32_t value)
92 match->flow.recirc_id = value;
93 match->wc.masks.recirc_id = UINT32_MAX;
97 match_set_conj_id(struct match *match, uint32_t value)
99 match->flow.conj_id = value;
100 match->wc.masks.conj_id = UINT32_MAX;
104 match_set_reg(struct match *match, unsigned int reg_idx, uint32_t value)
106 match_set_reg_masked(match, reg_idx, value, UINT32_MAX);
110 match_set_reg_masked(struct match *match, unsigned int reg_idx,
111 uint32_t value, uint32_t mask)
113 ovs_assert(reg_idx < FLOW_N_REGS);
114 flow_wildcards_set_reg_mask(&match->wc, reg_idx, mask);
115 match->flow.regs[reg_idx] = value & mask;
119 match_set_xreg(struct match *match, unsigned int xreg_idx, uint64_t value)
121 match_set_xreg_masked(match, xreg_idx, value, UINT64_MAX);
125 match_set_xreg_masked(struct match *match, unsigned int xreg_idx,
126 uint64_t value, uint64_t mask)
128 ovs_assert(xreg_idx < FLOW_N_XREGS);
129 flow_wildcards_set_xreg_mask(&match->wc, xreg_idx, mask);
130 flow_set_xreg(&match->flow, xreg_idx, value & mask);
134 match_set_actset_output(struct match *match, ofp_port_t actset_output)
136 match->wc.masks.actset_output = u16_to_ofp(UINT16_MAX);
137 match->flow.actset_output = actset_output;
141 match_set_metadata(struct match *match, ovs_be64 metadata)
143 match_set_metadata_masked(match, metadata, OVS_BE64_MAX);
147 match_set_metadata_masked(struct match *match,
148 ovs_be64 metadata, ovs_be64 mask)
150 match->wc.masks.metadata = mask;
151 match->flow.metadata = metadata & mask;
155 match_set_tun_id(struct match *match, ovs_be64 tun_id)
157 match_set_tun_id_masked(match, tun_id, OVS_BE64_MAX);
161 match_set_tun_id_masked(struct match *match, ovs_be64 tun_id, ovs_be64 mask)
163 match->wc.masks.tunnel.tun_id = mask;
164 match->flow.tunnel.tun_id = tun_id & mask;
168 match_set_tun_src(struct match *match, ovs_be32 src)
170 match_set_tun_src_masked(match, src, OVS_BE32_MAX);
174 match_set_tun_src_masked(struct match *match, ovs_be32 src, ovs_be32 mask)
176 match->wc.masks.tunnel.ip_src = mask;
177 match->flow.tunnel.ip_src = src & mask;
181 match_set_tun_dst(struct match *match, ovs_be32 dst)
183 match_set_tun_dst_masked(match, dst, OVS_BE32_MAX);
187 match_set_tun_dst_masked(struct match *match, ovs_be32 dst, ovs_be32 mask)
189 match->wc.masks.tunnel.ip_dst = mask;
190 match->flow.tunnel.ip_dst = dst & mask;
194 match_set_tun_ttl(struct match *match, uint8_t ttl)
196 match_set_tun_ttl_masked(match, ttl, UINT8_MAX);
200 match_set_tun_ttl_masked(struct match *match, uint8_t ttl, uint8_t mask)
202 match->wc.masks.tunnel.ip_ttl = mask;
203 match->flow.tunnel.ip_ttl = ttl & mask;
207 match_set_tun_tos(struct match *match, uint8_t tos)
209 match_set_tun_tos_masked(match, tos, UINT8_MAX);
213 match_set_tun_tos_masked(struct match *match, uint8_t tos, uint8_t mask)
215 match->wc.masks.tunnel.ip_tos = mask;
216 match->flow.tunnel.ip_tos = tos & mask;
220 match_set_tun_flags(struct match *match, uint16_t flags)
222 match_set_tun_flags_masked(match, flags, UINT16_MAX);
226 match_set_tun_flags_masked(struct match *match, uint16_t flags, uint16_t mask)
228 mask &= FLOW_TNL_PUB_F_MASK;
230 match->wc.masks.tunnel.flags = mask;
231 match->flow.tunnel.flags = flags & mask;
235 match_set_tun_gbp_id_masked(struct match *match, ovs_be16 gbp_id, ovs_be16 mask)
237 match->wc.masks.tunnel.gbp_id = mask;
238 match->flow.tunnel.gbp_id = gbp_id & mask;
242 match_set_tun_gbp_id(struct match *match, ovs_be16 gbp_id)
244 match_set_tun_gbp_id_masked(match, gbp_id, OVS_BE16_MAX);
248 match_set_tun_gbp_flags_masked(struct match *match, uint8_t flags, uint8_t mask)
250 match->wc.masks.tunnel.gbp_flags = mask;
251 match->flow.tunnel.gbp_flags = flags & mask;
255 match_set_tun_gbp_flags(struct match *match, uint8_t flags)
257 match_set_tun_gbp_flags_masked(match, flags, UINT8_MAX);
261 match_set_in_port(struct match *match, ofp_port_t ofp_port)
263 match->wc.masks.in_port.ofp_port = u16_to_ofp(UINT16_MAX);
264 match->flow.in_port.ofp_port = ofp_port;
268 match_set_skb_priority(struct match *match, uint32_t skb_priority)
270 match->wc.masks.skb_priority = UINT32_MAX;
271 match->flow.skb_priority = skb_priority;
275 match_set_pkt_mark(struct match *match, uint32_t pkt_mark)
277 match_set_pkt_mark_masked(match, pkt_mark, UINT32_MAX);
281 match_set_pkt_mark_masked(struct match *match, uint32_t pkt_mark, uint32_t mask)
283 match->flow.pkt_mark = pkt_mark & mask;
284 match->wc.masks.pkt_mark = mask;
288 match_set_ct_state(struct match *match, uint32_t ct_state)
290 match_set_ct_state_masked(match, ct_state, UINT32_MAX);
294 match_set_ct_state_masked(struct match *match, uint32_t ct_state, uint32_t mask)
296 match->flow.ct_state = ct_state & mask & UINT16_MAX;
297 match->wc.masks.ct_state = mask & UINT16_MAX;
301 match_set_ct_zone(struct match *match, uint16_t ct_zone)
303 match->flow.ct_zone = ct_zone;
304 match->wc.masks.ct_zone = UINT16_MAX;
308 match_set_ct_mark(struct match *match, uint32_t ct_mark)
310 match_set_ct_mark_masked(match, ct_mark, UINT32_MAX);
314 match_set_ct_mark_masked(struct match *match, uint32_t ct_mark,
317 match->flow.ct_mark = ct_mark & mask;
318 match->wc.masks.ct_mark = mask;
322 match_set_ct_label(struct match *match, ovs_u128 ct_label)
326 mask.u64.lo = UINT64_MAX;
327 mask.u64.hi = UINT64_MAX;
328 match_set_ct_label_masked(match, ct_label, mask);
332 match_set_ct_label_masked(struct match *match, ovs_u128 value, ovs_u128 mask)
334 match->flow.ct_label.u64.lo = value.u64.lo & mask.u64.lo;
335 match->flow.ct_label.u64.hi = value.u64.hi & mask.u64.hi;
336 match->wc.masks.ct_label = mask;
340 match_set_dl_type(struct match *match, ovs_be16 dl_type)
342 match->wc.masks.dl_type = OVS_BE16_MAX;
343 match->flow.dl_type = dl_type;
346 /* Modifies 'value_src' so that the Ethernet address must match 'value_dst'
347 * exactly. 'mask_dst' is set to all 1s. */
349 set_eth(const struct eth_addr value_src,
350 struct eth_addr *value_dst,
351 struct eth_addr *mask_dst)
353 *value_dst = value_src;
354 *mask_dst = eth_addr_exact;
357 /* Modifies 'value_src' so that the Ethernet address must match 'value_src'
358 * after each byte is ANDed with the appropriate byte in 'mask_src'.
359 * 'mask_dst' is set to 'mask_src' */
361 set_eth_masked(const struct eth_addr value_src,
362 const struct eth_addr mask_src,
363 struct eth_addr *value_dst, struct eth_addr *mask_dst)
367 for (i = 0; i < ARRAY_SIZE(value_dst->be16); i++) {
368 value_dst->be16[i] = value_src.be16[i] & mask_src.be16[i];
370 *mask_dst = mask_src;
373 /* Modifies 'rule' so that the source Ethernet address must match 'dl_src'
376 match_set_dl_src(struct match *match, const struct eth_addr dl_src)
378 set_eth(dl_src, &match->flow.dl_src, &match->wc.masks.dl_src);
381 /* Modifies 'rule' so that the source Ethernet address must match 'dl_src'
382 * after each byte is ANDed with the appropriate byte in 'mask'. */
384 match_set_dl_src_masked(struct match *match,
385 const struct eth_addr dl_src,
386 const struct eth_addr mask)
388 set_eth_masked(dl_src, mask, &match->flow.dl_src, &match->wc.masks.dl_src);
391 /* Modifies 'match' so that the Ethernet address must match 'dl_dst'
394 match_set_dl_dst(struct match *match, const struct eth_addr dl_dst)
396 set_eth(dl_dst, &match->flow.dl_dst, &match->wc.masks.dl_dst);
399 /* Modifies 'match' so that the Ethernet address must match 'dl_dst' after each
400 * byte is ANDed with the appropriate byte in 'mask'.
402 * This function will assert-fail if 'mask' is invalid. Only 'mask' values
403 * accepted by flow_wildcards_is_dl_dst_mask_valid() are allowed. */
405 match_set_dl_dst_masked(struct match *match,
406 const struct eth_addr dl_dst,
407 const struct eth_addr mask)
409 set_eth_masked(dl_dst, mask, &match->flow.dl_dst, &match->wc.masks.dl_dst);
413 match_set_dl_tci(struct match *match, ovs_be16 tci)
415 match_set_dl_tci_masked(match, tci, htons(0xffff));
419 match_set_dl_tci_masked(struct match *match, ovs_be16 tci, ovs_be16 mask)
421 match->flow.vlan_tci = tci & mask;
422 match->wc.masks.vlan_tci = mask;
425 /* Modifies 'match' so that the VLAN VID is wildcarded. If the PCP is already
426 * wildcarded, then 'match' will match a packet regardless of whether it has an
427 * 802.1Q header or not. */
429 match_set_any_vid(struct match *match)
431 if (match->wc.masks.vlan_tci & htons(VLAN_PCP_MASK)) {
432 match->wc.masks.vlan_tci &= ~htons(VLAN_VID_MASK);
433 match->flow.vlan_tci &= ~htons(VLAN_VID_MASK);
435 match_set_dl_tci_masked(match, htons(0), htons(0));
439 /* Modifies 'match' depending on 'dl_vlan':
441 * - If 'dl_vlan' is htons(OFP_VLAN_NONE), makes 'match' match only packets
442 * without an 802.1Q header.
444 * - Otherwise, makes 'match' match only packets with an 802.1Q header whose
445 * VID equals the low 12 bits of 'dl_vlan'.
448 match_set_dl_vlan(struct match *match, ovs_be16 dl_vlan)
450 flow_set_dl_vlan(&match->flow, dl_vlan);
451 if (dl_vlan == htons(OFP10_VLAN_NONE)) {
452 match->wc.masks.vlan_tci = OVS_BE16_MAX;
454 match->wc.masks.vlan_tci |= htons(VLAN_VID_MASK | VLAN_CFI);
458 /* Sets the VLAN VID that 'match' matches to 'vid', which is interpreted as an
459 * OpenFlow 1.2 "vlan_vid" value, that is, the low 13 bits of 'vlan_tci' (VID
462 match_set_vlan_vid(struct match *match, ovs_be16 vid)
464 match_set_vlan_vid_masked(match, vid, htons(VLAN_VID_MASK | VLAN_CFI));
468 /* Sets the VLAN VID that 'flow' matches to 'vid', which is interpreted as an
469 * OpenFlow 1.2 "vlan_vid" value, that is, the low 13 bits of 'vlan_tci' (VID
470 * plus CFI), with the corresponding 'mask'. */
472 match_set_vlan_vid_masked(struct match *match, ovs_be16 vid, ovs_be16 mask)
474 ovs_be16 pcp_mask = htons(VLAN_PCP_MASK);
475 ovs_be16 vid_mask = htons(VLAN_VID_MASK | VLAN_CFI);
478 flow_set_vlan_vid(&match->flow, vid & mask);
479 match->wc.masks.vlan_tci = mask | (match->wc.masks.vlan_tci & pcp_mask);
482 /* Modifies 'match' so that the VLAN PCP is wildcarded. If the VID is already
483 * wildcarded, then 'match' will match a packet regardless of whether it has an
484 * 802.1Q header or not. */
486 match_set_any_pcp(struct match *match)
488 if (match->wc.masks.vlan_tci & htons(VLAN_VID_MASK)) {
489 match->wc.masks.vlan_tci &= ~htons(VLAN_PCP_MASK);
490 match->flow.vlan_tci &= ~htons(VLAN_PCP_MASK);
492 match_set_dl_tci_masked(match, htons(0), htons(0));
496 /* Modifies 'match' so that it matches only packets with an 802.1Q header whose
497 * PCP equals the low 3 bits of 'dl_vlan_pcp'. */
499 match_set_dl_vlan_pcp(struct match *match, uint8_t dl_vlan_pcp)
501 flow_set_vlan_pcp(&match->flow, dl_vlan_pcp);
502 match->wc.masks.vlan_tci |= htons(VLAN_CFI | VLAN_PCP_MASK);
505 /* Modifies 'match' so that the MPLS label 'idx' matches 'lse' exactly. */
507 match_set_mpls_lse(struct match *match, int idx, ovs_be32 lse)
509 match->wc.masks.mpls_lse[idx] = OVS_BE32_MAX;
510 match->flow.mpls_lse[idx] = lse;
513 /* Modifies 'match' so that the MPLS label is wildcarded. */
515 match_set_any_mpls_label(struct match *match, int idx)
517 match->wc.masks.mpls_lse[idx] &= ~htonl(MPLS_LABEL_MASK);
518 flow_set_mpls_label(&match->flow, idx, htonl(0));
521 /* Modifies 'match' so that it matches only packets with an MPLS header whose
522 * label equals the low 20 bits of 'mpls_label'. */
524 match_set_mpls_label(struct match *match, int idx, ovs_be32 mpls_label)
526 match->wc.masks.mpls_lse[idx] |= htonl(MPLS_LABEL_MASK);
527 flow_set_mpls_label(&match->flow, idx, mpls_label);
530 /* Modifies 'match' so that the MPLS TC is wildcarded. */
532 match_set_any_mpls_tc(struct match *match, int idx)
534 match->wc.masks.mpls_lse[idx] &= ~htonl(MPLS_TC_MASK);
535 flow_set_mpls_tc(&match->flow, idx, 0);
538 /* Modifies 'match' so that it matches only packets with an MPLS header whose
539 * Traffic Class equals the low 3 bits of 'mpls_tc'. */
541 match_set_mpls_tc(struct match *match, int idx, uint8_t mpls_tc)
543 match->wc.masks.mpls_lse[idx] |= htonl(MPLS_TC_MASK);
544 flow_set_mpls_tc(&match->flow, idx, mpls_tc);
547 /* Modifies 'match' so that the MPLS stack flag is wildcarded. */
549 match_set_any_mpls_bos(struct match *match, int idx)
551 match->wc.masks.mpls_lse[idx] &= ~htonl(MPLS_BOS_MASK);
552 flow_set_mpls_bos(&match->flow, idx, 0);
555 /* Modifies 'match' so that it matches only packets with an MPLS header whose
556 * Stack Flag equals the lower bit of 'mpls_bos' */
558 match_set_mpls_bos(struct match *match, int idx, uint8_t mpls_bos)
560 match->wc.masks.mpls_lse[idx] |= htonl(MPLS_BOS_MASK);
561 flow_set_mpls_bos(&match->flow, idx, mpls_bos);
564 /* Modifies 'match' so that the MPLS LSE is wildcarded. */
566 match_set_any_mpls_lse(struct match *match, int idx)
568 match->wc.masks.mpls_lse[idx] = htonl(0);
569 flow_set_mpls_lse(&match->flow, idx, htonl(0));
573 match_set_tp_src(struct match *match, ovs_be16 tp_src)
575 match_set_tp_src_masked(match, tp_src, OVS_BE16_MAX);
579 match_set_tp_src_masked(struct match *match, ovs_be16 port, ovs_be16 mask)
581 match->flow.tp_src = port & mask;
582 match->wc.masks.tp_src = mask;
586 match_set_tp_dst(struct match *match, ovs_be16 tp_dst)
588 match_set_tp_dst_masked(match, tp_dst, OVS_BE16_MAX);
592 match_set_tp_dst_masked(struct match *match, ovs_be16 port, ovs_be16 mask)
594 match->flow.tp_dst = port & mask;
595 match->wc.masks.tp_dst = mask;
599 match_set_tcp_flags(struct match *match, ovs_be16 flags)
601 match_set_tcp_flags_masked(match, flags, OVS_BE16_MAX);
605 match_set_tcp_flags_masked(struct match *match, ovs_be16 flags, ovs_be16 mask)
607 match->flow.tcp_flags = flags & mask;
608 match->wc.masks.tcp_flags = mask;
612 match_set_nw_proto(struct match *match, uint8_t nw_proto)
614 match->flow.nw_proto = nw_proto;
615 match->wc.masks.nw_proto = UINT8_MAX;
619 match_set_nw_src(struct match *match, ovs_be32 nw_src)
621 match->flow.nw_src = nw_src;
622 match->wc.masks.nw_src = OVS_BE32_MAX;
626 match_set_nw_src_masked(struct match *match,
627 ovs_be32 nw_src, ovs_be32 mask)
629 match->flow.nw_src = nw_src & mask;
630 match->wc.masks.nw_src = mask;
634 match_set_nw_dst(struct match *match, ovs_be32 nw_dst)
636 match->flow.nw_dst = nw_dst;
637 match->wc.masks.nw_dst = OVS_BE32_MAX;
641 match_set_nw_dst_masked(struct match *match, ovs_be32 ip, ovs_be32 mask)
643 match->flow.nw_dst = ip & mask;
644 match->wc.masks.nw_dst = mask;
648 match_set_nw_dscp(struct match *match, uint8_t nw_dscp)
650 match->wc.masks.nw_tos |= IP_DSCP_MASK;
651 match->flow.nw_tos &= ~IP_DSCP_MASK;
652 match->flow.nw_tos |= nw_dscp & IP_DSCP_MASK;
656 match_set_nw_ecn(struct match *match, uint8_t nw_ecn)
658 match->wc.masks.nw_tos |= IP_ECN_MASK;
659 match->flow.nw_tos &= ~IP_ECN_MASK;
660 match->flow.nw_tos |= nw_ecn & IP_ECN_MASK;
664 match_set_nw_ttl(struct match *match, uint8_t nw_ttl)
666 match->wc.masks.nw_ttl = UINT8_MAX;
667 match->flow.nw_ttl = nw_ttl;
671 match_set_nw_frag(struct match *match, uint8_t nw_frag)
673 match->wc.masks.nw_frag |= FLOW_NW_FRAG_MASK;
674 match->flow.nw_frag = nw_frag;
678 match_set_nw_frag_masked(struct match *match,
679 uint8_t nw_frag, uint8_t mask)
681 match->flow.nw_frag = nw_frag & mask;
682 match->wc.masks.nw_frag = mask;
686 match_set_icmp_type(struct match *match, uint8_t icmp_type)
688 match_set_tp_src(match, htons(icmp_type));
692 match_set_icmp_code(struct match *match, uint8_t icmp_code)
694 match_set_tp_dst(match, htons(icmp_code));
698 match_set_arp_sha(struct match *match, const struct eth_addr sha)
700 match->flow.arp_sha = sha;
701 match->wc.masks.arp_sha = eth_addr_exact;
705 match_set_arp_sha_masked(struct match *match,
706 const struct eth_addr arp_sha,
707 const struct eth_addr mask)
709 set_eth_masked(arp_sha, mask,
710 &match->flow.arp_sha, &match->wc.masks.arp_sha);
714 match_set_arp_tha(struct match *match, const struct eth_addr tha)
716 match->flow.arp_tha = tha;
717 match->wc.masks.arp_tha = eth_addr_exact;
721 match_set_arp_tha_masked(struct match *match,
722 const struct eth_addr arp_tha,
723 const struct eth_addr mask)
725 set_eth_masked(arp_tha, mask,
726 &match->flow.arp_tha, &match->wc.masks.arp_tha);
730 match_set_ipv6_src(struct match *match, const struct in6_addr *src)
732 match->flow.ipv6_src = *src;
733 match->wc.masks.ipv6_src = in6addr_exact;
737 match_set_ipv6_src_masked(struct match *match, const struct in6_addr *src,
738 const struct in6_addr *mask)
740 match->flow.ipv6_src = ipv6_addr_bitand(src, mask);
741 match->wc.masks.ipv6_src = *mask;
745 match_set_ipv6_dst(struct match *match, const struct in6_addr *dst)
747 match->flow.ipv6_dst = *dst;
748 match->wc.masks.ipv6_dst = in6addr_exact;
752 match_set_ipv6_dst_masked(struct match *match, const struct in6_addr *dst,
753 const struct in6_addr *mask)
755 match->flow.ipv6_dst = ipv6_addr_bitand(dst, mask);
756 match->wc.masks.ipv6_dst = *mask;
760 match_set_ipv6_label(struct match *match, ovs_be32 ipv6_label)
762 match->wc.masks.ipv6_label = OVS_BE32_MAX;
763 match->flow.ipv6_label = ipv6_label;
768 match_set_ipv6_label_masked(struct match *match, ovs_be32 ipv6_label,
771 match->flow.ipv6_label = ipv6_label & mask;
772 match->wc.masks.ipv6_label = mask;
776 match_set_nd_target(struct match *match, const struct in6_addr *target)
778 match->flow.nd_target = *target;
779 match->wc.masks.nd_target = in6addr_exact;
783 match_set_nd_target_masked(struct match *match,
784 const struct in6_addr *target,
785 const struct in6_addr *mask)
787 match->flow.nd_target = ipv6_addr_bitand(target, mask);
788 match->wc.masks.nd_target = *mask;
791 /* Returns true if 'a' and 'b' wildcard the same fields and have the same
792 * values for fixed fields, otherwise false. */
794 match_equal(const struct match *a, const struct match *b)
796 return (flow_wildcards_equal(&a->wc, &b->wc)
797 && flow_equal(&a->flow, &b->flow));
800 /* Returns a hash value for the flow and wildcards in 'match', starting from
803 match_hash(const struct match *match, uint32_t basis)
805 return flow_wildcards_hash(&match->wc, flow_hash(&match->flow, basis));
809 match_has_default_recirc_id(const struct match *m)
811 return m->flow.recirc_id == 0 && (m->wc.masks.recirc_id == UINT32_MAX ||
812 m->wc.masks.recirc_id == 0);
816 match_has_default_dp_hash(const struct match *m)
818 return ((m->flow.dp_hash | m->wc.masks.dp_hash) == 0);
821 /* Return true if the hidden fields of the match are set to the default values.
822 * The default values equals to those set up by match_init_hidden_fields(). */
824 match_has_default_hidden_fields(const struct match *m)
826 return match_has_default_recirc_id(m) && match_has_default_dp_hash(m);
830 match_init_hidden_fields(struct match *m)
832 match_set_recirc_id(m, 0);
833 match_set_dp_hash_masked(m, 0, 0);
837 format_eth_masked(struct ds *s, const char *name,
838 const struct eth_addr eth, const struct eth_addr mask)
840 if (!eth_addr_is_zero(mask)) {
841 ds_put_format(s, "%s=", name);
842 eth_format_masked(eth, &mask, s);
848 format_ip_netmask(struct ds *s, const char *name, ovs_be32 ip,
852 ds_put_format(s, "%s=", name);
853 ip_format_masked(ip, netmask, s);
859 format_ipv6_netmask(struct ds *s, const char *name,
860 const struct in6_addr *addr,
861 const struct in6_addr *netmask)
863 if (!ipv6_mask_is_any(netmask)) {
864 ds_put_format(s, "%s=", name);
865 ipv6_format_masked(addr, netmask, s);
871 format_uint16_masked(struct ds *s, const char *name,
872 uint16_t value, uint16_t mask)
875 ds_put_format(s, "%s=", name);
876 if (mask == UINT16_MAX) {
877 ds_put_format(s, "%"PRIu16, value);
879 ds_put_format(s, "0x%"PRIx16"/0x%"PRIx16, value, mask);
886 format_be16_masked(struct ds *s, const char *name,
887 ovs_be16 value, ovs_be16 mask)
889 if (mask != htons(0)) {
890 ds_put_format(s, "%s=", name);
891 if (mask == OVS_BE16_MAX) {
892 ds_put_format(s, "%"PRIu16, ntohs(value));
894 ds_put_format(s, "0x%"PRIx16"/0x%"PRIx16,
895 ntohs(value), ntohs(mask));
902 format_be32_masked(struct ds *s, const char *name,
903 ovs_be32 value, ovs_be32 mask)
905 if (mask != htonl(0)) {
906 ds_put_format(s, "%s=", name);
907 if (mask == OVS_BE32_MAX) {
908 ds_put_format(s, "%"PRIu32, ntohl(value));
910 ds_put_format(s, "0x%"PRIx32"/0x%"PRIx32,
911 ntohl(value), ntohl(mask));
918 format_uint32_masked(struct ds *s, const char *name,
919 uint32_t value, uint32_t mask)
922 ds_put_format(s, "%s=%#"PRIx32, name, value);
923 if (mask != UINT32_MAX) {
924 ds_put_format(s, "/%#"PRIx32, mask);
931 format_be64_masked(struct ds *s, const char *name,
932 ovs_be64 value, ovs_be64 mask)
934 if (mask != htonll(0)) {
935 ds_put_format(s, "%s=%#"PRIx64, name, ntohll(value));
936 if (mask != OVS_BE64_MAX) {
937 ds_put_format(s, "/%#"PRIx64, ntohll(mask));
944 format_flow_tunnel(struct ds *s, const struct match *match)
946 const struct flow_wildcards *wc = &match->wc;
947 const struct flow_tnl *tnl = &match->flow.tunnel;
949 format_be64_masked(s, "tun_id", tnl->tun_id, wc->masks.tunnel.tun_id);
950 format_ip_netmask(s, "tun_src", tnl->ip_src, wc->masks.tunnel.ip_src);
951 format_ip_netmask(s, "tun_dst", tnl->ip_dst, wc->masks.tunnel.ip_dst);
953 if (wc->masks.tunnel.gbp_id) {
954 format_be16_masked(s, "tun_gbp_id", tnl->gbp_id,
955 wc->masks.tunnel.gbp_id);
958 if (wc->masks.tunnel.gbp_flags) {
959 ds_put_format(s, "tun_gbp_flags=%#"PRIx8",", tnl->gbp_flags);
962 if (wc->masks.tunnel.ip_tos) {
963 ds_put_format(s, "tun_tos=%"PRIx8",", tnl->ip_tos);
965 if (wc->masks.tunnel.ip_ttl) {
966 ds_put_format(s, "tun_ttl=%"PRIu8",", tnl->ip_ttl);
968 if (wc->masks.tunnel.flags) {
969 format_flags_masked(s, "tun_flags", flow_tun_flag_to_string,
971 wc->masks.tunnel.flags & FLOW_TNL_F_MASK,
975 tun_metadata_match_format(s, match);
979 format_ct_label_masked(struct ds *s, const ovs_u128 *key, const ovs_u128 *mask)
981 if (!ovs_u128_is_zero(mask)) {
982 ovs_be128 value = hton128(*key);
983 ds_put_format(s, "ct_label=");
984 ds_put_hex(s, &value, sizeof value);
985 if (!is_all_ones(mask, sizeof(*mask))) {
986 value = hton128(*mask);
988 ds_put_hex(s, &value, sizeof value);
994 /* Appends a string representation of 'match' to 's'. If 'priority' is
995 * different from OFP_DEFAULT_PRIORITY, includes it in 's'. */
997 match_format(const struct match *match, struct ds *s, int priority)
999 const struct flow_wildcards *wc = &match->wc;
1000 size_t start_len = s->length;
1001 const struct flow *f = &match->flow;
1002 bool skip_type = false;
1003 bool skip_proto = false;
1007 BUILD_ASSERT_DECL(FLOW_WC_SEQ == 34);
1009 if (priority != OFP_DEFAULT_PRIORITY) {
1010 ds_put_format(s, "priority=%d,", priority);
1013 format_uint32_masked(s, "pkt_mark", f->pkt_mark, wc->masks.pkt_mark);
1015 if (wc->masks.recirc_id) {
1016 format_uint32_masked(s, "recirc_id", f->recirc_id,
1017 wc->masks.recirc_id);
1020 if (wc->masks.dp_hash) {
1021 format_uint32_masked(s, "dp_hash", f->dp_hash,
1025 if (wc->masks.conj_id) {
1026 ds_put_format(s, "conj_id=%"PRIu32",", f->conj_id);
1029 if (wc->masks.skb_priority) {
1030 ds_put_format(s, "skb_priority=%#"PRIx32",", f->skb_priority);
1033 if (wc->masks.actset_output) {
1034 ds_put_cstr(s, "actset_output=");
1035 ofputil_format_port(f->actset_output, s);
1036 ds_put_char(s, ',');
1039 if (wc->masks.ct_state) {
1040 if (wc->masks.ct_state == UINT16_MAX) {
1041 ds_put_cstr(s, "ct_state=");
1043 format_flags(s, ct_state_to_string, f->ct_state, '|');
1045 ds_put_cstr(s, "0"); /* No state. */
1048 format_flags_masked(s, "ct_state", ct_state_to_string,
1049 f->ct_state, wc->masks.ct_state, UINT16_MAX);
1051 ds_put_char(s, ',');
1054 if (wc->masks.ct_zone) {
1055 format_uint16_masked(s, "ct_zone", f->ct_zone, wc->masks.ct_zone);
1058 if (wc->masks.ct_mark) {
1059 format_uint32_masked(s, "ct_mark", f->ct_mark, wc->masks.ct_mark);
1062 if (!ovs_u128_is_zero(&wc->masks.ct_label)) {
1063 format_ct_label_masked(s, &f->ct_label, &wc->masks.ct_label);
1066 if (wc->masks.dl_type) {
1068 if (f->dl_type == htons(ETH_TYPE_IP)) {
1069 if (wc->masks.nw_proto) {
1071 if (f->nw_proto == IPPROTO_ICMP) {
1072 ds_put_cstr(s, "icmp,");
1073 } else if (f->nw_proto == IPPROTO_IGMP) {
1074 ds_put_cstr(s, "igmp,");
1075 } else if (f->nw_proto == IPPROTO_TCP) {
1076 ds_put_cstr(s, "tcp,");
1077 } else if (f->nw_proto == IPPROTO_UDP) {
1078 ds_put_cstr(s, "udp,");
1079 } else if (f->nw_proto == IPPROTO_SCTP) {
1080 ds_put_cstr(s, "sctp,");
1082 ds_put_cstr(s, "ip,");
1086 ds_put_cstr(s, "ip,");
1088 } else if (f->dl_type == htons(ETH_TYPE_IPV6)) {
1089 if (wc->masks.nw_proto) {
1091 if (f->nw_proto == IPPROTO_ICMPV6) {
1092 ds_put_cstr(s, "icmp6,");
1093 } else if (f->nw_proto == IPPROTO_TCP) {
1094 ds_put_cstr(s, "tcp6,");
1095 } else if (f->nw_proto == IPPROTO_UDP) {
1096 ds_put_cstr(s, "udp6,");
1097 } else if (f->nw_proto == IPPROTO_SCTP) {
1098 ds_put_cstr(s, "sctp6,");
1100 ds_put_cstr(s, "ipv6,");
1104 ds_put_cstr(s, "ipv6,");
1106 } else if (f->dl_type == htons(ETH_TYPE_ARP)) {
1107 ds_put_cstr(s, "arp,");
1108 } else if (f->dl_type == htons(ETH_TYPE_RARP)) {
1109 ds_put_cstr(s, "rarp,");
1110 } else if (f->dl_type == htons(ETH_TYPE_MPLS)) {
1111 ds_put_cstr(s, "mpls,");
1112 } else if (f->dl_type == htons(ETH_TYPE_MPLS_MCAST)) {
1113 ds_put_cstr(s, "mplsm,");
1118 for (i = 0; i < FLOW_N_REGS; i++) {
1119 #define REGNAME_LEN 20
1120 char regname[REGNAME_LEN];
1121 if (snprintf(regname, REGNAME_LEN, "reg%d", i) >= REGNAME_LEN) {
1122 strcpy(regname, "reg?");
1124 format_uint32_masked(s, regname, f->regs[i], wc->masks.regs[i]);
1127 format_flow_tunnel(s, match);
1129 format_be64_masked(s, "metadata", f->metadata, wc->masks.metadata);
1131 if (wc->masks.in_port.ofp_port) {
1132 ds_put_cstr(s, "in_port=");
1133 ofputil_format_port(f->in_port.ofp_port, s);
1134 ds_put_char(s, ',');
1136 if (wc->masks.vlan_tci) {
1137 ovs_be16 vid_mask = wc->masks.vlan_tci & htons(VLAN_VID_MASK);
1138 ovs_be16 pcp_mask = wc->masks.vlan_tci & htons(VLAN_PCP_MASK);
1139 ovs_be16 cfi = wc->masks.vlan_tci & htons(VLAN_CFI);
1141 if (cfi && f->vlan_tci & htons(VLAN_CFI)
1142 && (!vid_mask || vid_mask == htons(VLAN_VID_MASK))
1143 && (!pcp_mask || pcp_mask == htons(VLAN_PCP_MASK))
1144 && (vid_mask || pcp_mask)) {
1146 ds_put_format(s, "dl_vlan=%"PRIu16",",
1147 vlan_tci_to_vid(f->vlan_tci));
1150 ds_put_format(s, "dl_vlan_pcp=%d,",
1151 vlan_tci_to_pcp(f->vlan_tci));
1153 } else if (wc->masks.vlan_tci == htons(0xffff)) {
1154 ds_put_format(s, "vlan_tci=0x%04"PRIx16",", ntohs(f->vlan_tci));
1156 ds_put_format(s, "vlan_tci=0x%04"PRIx16"/0x%04"PRIx16",",
1157 ntohs(f->vlan_tci), ntohs(wc->masks.vlan_tci));
1160 format_eth_masked(s, "dl_src", f->dl_src, wc->masks.dl_src);
1161 format_eth_masked(s, "dl_dst", f->dl_dst, wc->masks.dl_dst);
1162 if (!skip_type && wc->masks.dl_type) {
1163 ds_put_format(s, "dl_type=0x%04"PRIx16",", ntohs(f->dl_type));
1165 if (f->dl_type == htons(ETH_TYPE_IPV6)) {
1166 format_ipv6_netmask(s, "ipv6_src", &f->ipv6_src, &wc->masks.ipv6_src);
1167 format_ipv6_netmask(s, "ipv6_dst", &f->ipv6_dst, &wc->masks.ipv6_dst);
1168 if (wc->masks.ipv6_label) {
1169 if (wc->masks.ipv6_label == OVS_BE32_MAX) {
1170 ds_put_format(s, "ipv6_label=0x%05"PRIx32",",
1171 ntohl(f->ipv6_label));
1173 ds_put_format(s, "ipv6_label=0x%05"PRIx32"/0x%05"PRIx32",",
1174 ntohl(f->ipv6_label),
1175 ntohl(wc->masks.ipv6_label));
1178 } else if (f->dl_type == htons(ETH_TYPE_ARP) ||
1179 f->dl_type == htons(ETH_TYPE_RARP)) {
1180 format_ip_netmask(s, "arp_spa", f->nw_src, wc->masks.nw_src);
1181 format_ip_netmask(s, "arp_tpa", f->nw_dst, wc->masks.nw_dst);
1183 format_ip_netmask(s, "nw_src", f->nw_src, wc->masks.nw_src);
1184 format_ip_netmask(s, "nw_dst", f->nw_dst, wc->masks.nw_dst);
1186 if (!skip_proto && wc->masks.nw_proto) {
1187 if (f->dl_type == htons(ETH_TYPE_ARP) ||
1188 f->dl_type == htons(ETH_TYPE_RARP)) {
1189 ds_put_format(s, "arp_op=%"PRIu8",", f->nw_proto);
1191 ds_put_format(s, "nw_proto=%"PRIu8",", f->nw_proto);
1194 if (f->dl_type == htons(ETH_TYPE_ARP) ||
1195 f->dl_type == htons(ETH_TYPE_RARP)) {
1196 format_eth_masked(s, "arp_sha", f->arp_sha, wc->masks.arp_sha);
1197 format_eth_masked(s, "arp_tha", f->arp_tha, wc->masks.arp_tha);
1199 if (wc->masks.nw_tos & IP_DSCP_MASK) {
1200 ds_put_format(s, "nw_tos=%"PRIu8",", f->nw_tos & IP_DSCP_MASK);
1202 if (wc->masks.nw_tos & IP_ECN_MASK) {
1203 ds_put_format(s, "nw_ecn=%"PRIu8",", f->nw_tos & IP_ECN_MASK);
1205 if (wc->masks.nw_ttl) {
1206 ds_put_format(s, "nw_ttl=%"PRIu8",", f->nw_ttl);
1208 if (wc->masks.mpls_lse[0] & htonl(MPLS_LABEL_MASK)) {
1209 ds_put_format(s, "mpls_label=%"PRIu32",",
1210 mpls_lse_to_label(f->mpls_lse[0]));
1212 if (wc->masks.mpls_lse[0] & htonl(MPLS_TC_MASK)) {
1213 ds_put_format(s, "mpls_tc=%"PRIu8",",
1214 mpls_lse_to_tc(f->mpls_lse[0]));
1216 if (wc->masks.mpls_lse[0] & htonl(MPLS_TTL_MASK)) {
1217 ds_put_format(s, "mpls_ttl=%"PRIu8",",
1218 mpls_lse_to_ttl(f->mpls_lse[0]));
1220 if (wc->masks.mpls_lse[0] & htonl(MPLS_BOS_MASK)) {
1221 ds_put_format(s, "mpls_bos=%"PRIu8",",
1222 mpls_lse_to_bos(f->mpls_lse[0]));
1224 format_be32_masked(s, "mpls_lse1", f->mpls_lse[1], wc->masks.mpls_lse[1]);
1225 format_be32_masked(s, "mpls_lse2", f->mpls_lse[2], wc->masks.mpls_lse[2]);
1227 switch (wc->masks.nw_frag) {
1228 case FLOW_NW_FRAG_ANY | FLOW_NW_FRAG_LATER:
1229 ds_put_format(s, "nw_frag=%s,",
1230 f->nw_frag & FLOW_NW_FRAG_ANY
1231 ? (f->nw_frag & FLOW_NW_FRAG_LATER ? "later" : "first")
1232 : (f->nw_frag & FLOW_NW_FRAG_LATER ? "<error>" : "no"));
1235 case FLOW_NW_FRAG_ANY:
1236 ds_put_format(s, "nw_frag=%s,",
1237 f->nw_frag & FLOW_NW_FRAG_ANY ? "yes" : "no");
1240 case FLOW_NW_FRAG_LATER:
1241 ds_put_format(s, "nw_frag=%s,",
1242 f->nw_frag & FLOW_NW_FRAG_LATER ? "later" : "not_later");
1245 if (f->dl_type == htons(ETH_TYPE_IP) &&
1246 f->nw_proto == IPPROTO_ICMP) {
1247 format_be16_masked(s, "icmp_type", f->tp_src, wc->masks.tp_src);
1248 format_be16_masked(s, "icmp_code", f->tp_dst, wc->masks.tp_dst);
1249 } else if (f->dl_type == htons(ETH_TYPE_IP) &&
1250 f->nw_proto == IPPROTO_IGMP) {
1251 format_be16_masked(s, "igmp_type", f->tp_src, wc->masks.tp_src);
1252 format_be16_masked(s, "igmp_code", f->tp_dst, wc->masks.tp_dst);
1253 } else if (f->dl_type == htons(ETH_TYPE_IPV6) &&
1254 f->nw_proto == IPPROTO_ICMPV6) {
1255 format_be16_masked(s, "icmp_type", f->tp_src, wc->masks.tp_src);
1256 format_be16_masked(s, "icmp_code", f->tp_dst, wc->masks.tp_dst);
1257 format_ipv6_netmask(s, "nd_target", &f->nd_target,
1258 &wc->masks.nd_target);
1259 format_eth_masked(s, "nd_sll", f->arp_sha, wc->masks.arp_sha);
1260 format_eth_masked(s, "nd_tll", f->arp_tha, wc->masks.arp_tha);
1262 format_be16_masked(s, "tp_src", f->tp_src, wc->masks.tp_src);
1263 format_be16_masked(s, "tp_dst", f->tp_dst, wc->masks.tp_dst);
1265 if (is_ip_any(f) && f->nw_proto == IPPROTO_TCP && wc->masks.tcp_flags) {
1266 format_flags_masked(s, "tcp_flags", packet_tcp_flag_to_string,
1267 ntohs(f->tcp_flags), TCP_FLAGS(wc->masks.tcp_flags),
1268 TCP_FLAGS(OVS_BE16_MAX));
1271 if (s->length > start_len) {
1276 /* Converts 'match' to a string and returns the string. If 'priority' is
1277 * different from OFP_DEFAULT_PRIORITY, includes it in the string. The caller
1278 * must free the string (with free()). */
1280 match_to_string(const struct match *match, int priority)
1282 struct ds s = DS_EMPTY_INITIALIZER;
1283 match_format(match, &s, priority);
1284 return ds_steal_cstr(&s);
1288 match_print(const struct match *match)
1290 char *s = match_to_string(match, OFP_DEFAULT_PRIORITY);
1295 /* Initializes 'dst' as a copy of 'src'. The caller must eventually free 'dst'
1296 * with minimatch_destroy(). */
1298 minimatch_init(struct minimatch *dst, const struct match *src)
1300 struct miniflow tmp;
1302 miniflow_map_init(&tmp, &src->wc.masks);
1303 /* Allocate two consecutive miniflows. */
1304 miniflow_alloc(dst->flows, 2, &tmp);
1305 miniflow_init(dst->flow, &src->flow);
1306 minimask_init(dst->mask, &src->wc);
1309 /* Initializes 'dst' as a copy of 'src'. The caller must eventually free 'dst'
1310 * with minimatch_destroy(). */
1312 minimatch_clone(struct minimatch *dst, const struct minimatch *src)
1314 /* Allocate two consecutive miniflows. */
1315 size_t data_size = miniflow_alloc(dst->flows, 2, &src->mask->masks);
1317 memcpy(miniflow_values(dst->flow),
1318 miniflow_get_values(src->flow), data_size);
1319 memcpy(miniflow_values(&dst->mask->masks),
1320 miniflow_get_values(&src->mask->masks), data_size);
1323 /* Initializes 'dst' with the data in 'src', destroying 'src'. The caller must
1324 * eventually free 'dst' with minimatch_destroy(). */
1326 minimatch_move(struct minimatch *dst, struct minimatch *src)
1328 dst->flow = src->flow;
1329 dst->mask = src->mask;
1332 /* Frees any memory owned by 'match'. Does not free the storage in which
1333 * 'match' itself resides; the caller is responsible for that. */
1335 minimatch_destroy(struct minimatch *match)
1340 /* Initializes 'dst' as a copy of 'src'. */
1342 minimatch_expand(const struct minimatch *src, struct match *dst)
1344 miniflow_expand(src->flow, &dst->flow);
1345 minimask_expand(src->mask, &dst->wc);
1346 memset(&dst->tun_md, 0, sizeof dst->tun_md);
1349 /* Returns true if 'a' and 'b' match the same packets, false otherwise. */
1351 minimatch_equal(const struct minimatch *a, const struct minimatch *b)
1353 return minimask_equal(a->mask, b->mask)
1354 && miniflow_equal(a->flow, b->flow);
1357 /* Returns true if 'target' satisifies 'match', that is, if each bit for which
1358 * 'match' specifies a particular value has the correct value in 'target'.
1360 * This function is equivalent to miniflow_equal_flow_in_minimask(&match->flow,
1361 * target, &match->mask) but it is faster because of the invariant that
1362 * match->flow.map and match->mask.map are the same. */
1364 minimatch_matches_flow(const struct minimatch *match,
1365 const struct flow *target)
1367 const uint64_t *flowp = miniflow_get_values(match->flow);
1368 const uint64_t *maskp = miniflow_get_values(&match->mask->masks);
1371 FLOWMAP_FOR_EACH_INDEX(idx, match->flow->map) {
1372 if ((*flowp++ ^ flow_u64_value(target, idx)) & *maskp++) {
1380 /* Appends a string representation of 'match' to 's'. If 'priority' is
1381 * different from OFP_DEFAULT_PRIORITY, includes it in 's'. */
1383 minimatch_format(const struct minimatch *match, struct ds *s, int priority)
1385 struct match megamatch;
1387 minimatch_expand(match, &megamatch);
1388 match_format(&megamatch, s, priority);
1391 /* Converts 'match' to a string and returns the string. If 'priority' is
1392 * different from OFP_DEFAULT_PRIORITY, includes it in the string. The caller
1393 * must free the string (with free()). */
1395 minimatch_to_string(const struct minimatch *match, int priority)
1397 struct match megamatch;
1399 minimatch_expand(match, &megamatch);
1400 return match_to_string(&megamatch, priority);