1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun #include <linux/bpf.h>
3*4882a593Smuzhiyun #include <linux/version.h>
4*4882a593Smuzhiyun
5*4882a593Smuzhiyun #include <bpf/bpf_helpers.h>
6*4882a593Smuzhiyun #include "netcnt_common.h"
7*4882a593Smuzhiyun
8*4882a593Smuzhiyun #define MAX_BPS (3 * 1024 * 1024)
9*4882a593Smuzhiyun
10*4882a593Smuzhiyun #define REFRESH_TIME_NS 100000000
11*4882a593Smuzhiyun #define NS_PER_SEC 1000000000
12*4882a593Smuzhiyun
13*4882a593Smuzhiyun struct {
14*4882a593Smuzhiyun __uint(type, BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE);
15*4882a593Smuzhiyun __type(key, struct bpf_cgroup_storage_key);
16*4882a593Smuzhiyun __type(value, struct percpu_net_cnt);
17*4882a593Smuzhiyun } percpu_netcnt SEC(".maps");
18*4882a593Smuzhiyun
19*4882a593Smuzhiyun struct {
20*4882a593Smuzhiyun __uint(type, BPF_MAP_TYPE_CGROUP_STORAGE);
21*4882a593Smuzhiyun __type(key, struct bpf_cgroup_storage_key);
22*4882a593Smuzhiyun __type(value, struct net_cnt);
23*4882a593Smuzhiyun } netcnt SEC(".maps");
24*4882a593Smuzhiyun
25*4882a593Smuzhiyun SEC("cgroup/skb")
bpf_nextcnt(struct __sk_buff * skb)26*4882a593Smuzhiyun int bpf_nextcnt(struct __sk_buff *skb)
27*4882a593Smuzhiyun {
28*4882a593Smuzhiyun struct percpu_net_cnt *percpu_cnt;
29*4882a593Smuzhiyun char fmt[] = "%d %llu %llu\n";
30*4882a593Smuzhiyun struct net_cnt *cnt;
31*4882a593Smuzhiyun __u64 ts, dt;
32*4882a593Smuzhiyun int ret;
33*4882a593Smuzhiyun
34*4882a593Smuzhiyun cnt = bpf_get_local_storage(&netcnt, 0);
35*4882a593Smuzhiyun percpu_cnt = bpf_get_local_storage(&percpu_netcnt, 0);
36*4882a593Smuzhiyun
37*4882a593Smuzhiyun percpu_cnt->packets++;
38*4882a593Smuzhiyun percpu_cnt->bytes += skb->len;
39*4882a593Smuzhiyun
40*4882a593Smuzhiyun if (percpu_cnt->packets > MAX_PERCPU_PACKETS) {
41*4882a593Smuzhiyun __sync_fetch_and_add(&cnt->packets,
42*4882a593Smuzhiyun percpu_cnt->packets);
43*4882a593Smuzhiyun percpu_cnt->packets = 0;
44*4882a593Smuzhiyun
45*4882a593Smuzhiyun __sync_fetch_and_add(&cnt->bytes,
46*4882a593Smuzhiyun percpu_cnt->bytes);
47*4882a593Smuzhiyun percpu_cnt->bytes = 0;
48*4882a593Smuzhiyun }
49*4882a593Smuzhiyun
50*4882a593Smuzhiyun ts = bpf_ktime_get_ns();
51*4882a593Smuzhiyun dt = ts - percpu_cnt->prev_ts;
52*4882a593Smuzhiyun
53*4882a593Smuzhiyun dt *= MAX_BPS;
54*4882a593Smuzhiyun dt /= NS_PER_SEC;
55*4882a593Smuzhiyun
56*4882a593Smuzhiyun if (cnt->bytes + percpu_cnt->bytes - percpu_cnt->prev_bytes < dt)
57*4882a593Smuzhiyun ret = 1;
58*4882a593Smuzhiyun else
59*4882a593Smuzhiyun ret = 0;
60*4882a593Smuzhiyun
61*4882a593Smuzhiyun if (dt > REFRESH_TIME_NS) {
62*4882a593Smuzhiyun percpu_cnt->prev_ts = ts;
63*4882a593Smuzhiyun percpu_cnt->prev_packets = cnt->packets;
64*4882a593Smuzhiyun percpu_cnt->prev_bytes = cnt->bytes;
65*4882a593Smuzhiyun }
66*4882a593Smuzhiyun
67*4882a593Smuzhiyun return !!ret;
68*4882a593Smuzhiyun }
69*4882a593Smuzhiyun
70*4882a593Smuzhiyun char _license[] SEC("license") = "GPL";
71*4882a593Smuzhiyun __u32 _version SEC("version") = LINUX_VERSION_CODE;
72