vhost: check for ring descriptors overflow
[dpdk.git] / lib / librte_vhost / vhost_rxtx.c
1 /*-
2  *   BSD LICENSE
3  *
4  *   Copyright(c) 2010-2014 Intel Corporation. All rights reserved.
5  *   All rights reserved.
6  *
7  *   Redistribution and use in source and binary forms, with or without
8  *   modification, are permitted provided that the following conditions
9  *   are met:
10  *
11  *     * Redistributions of source code must retain the above copyright
12  *       notice, this list of conditions and the following disclaimer.
13  *     * Redistributions in binary form must reproduce the above copyright
14  *       notice, this list of conditions and the following disclaimer in
15  *       the documentation and/or other materials provided with the
16  *       distribution.
17  *     * Neither the name of Intel Corporation nor the names of its
18  *       contributors may be used to endorse or promote products derived
19  *       from this software without specific prior written permission.
20  *
21  *   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
22  *   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
23  *   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
24  *   A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
25  *   OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
26  *   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
27  *   LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
28  *   DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
29  *   THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
30  *   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
31  *   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
32  */
33
34 #include <stdint.h>
35 #include <stdbool.h>
36 #include <linux/virtio_net.h>
37
38 #include <rte_mbuf.h>
39 #include <rte_memcpy.h>
40 #include <rte_ether.h>
41 #include <rte_ip.h>
42 #include <rte_virtio_net.h>
43 #include <rte_tcp.h>
44 #include <rte_udp.h>
45 #include <rte_sctp.h>
46 #include <rte_arp.h>
47
48 #include "vhost-net.h"
49
50 #define MAX_PKT_BURST 32
51 #define VHOST_LOG_PAGE  4096
52
53 static inline void __attribute__((always_inline))
54 vhost_log_page(uint8_t *log_base, uint64_t page)
55 {
56         log_base[page / 8] |= 1 << (page % 8);
57 }
58
59 static inline void __attribute__((always_inline))
60 vhost_log_write(struct virtio_net *dev, uint64_t addr, uint64_t len)
61 {
62         uint64_t page;
63
64         if (likely(((dev->features & (1ULL << VHOST_F_LOG_ALL)) == 0) ||
65                    !dev->log_base || !len))
66                 return;
67
68         if (unlikely(dev->log_size <= ((addr + len - 1) / VHOST_LOG_PAGE / 8)))
69                 return;
70
71         /* To make sure guest memory updates are committed before logging */
72         rte_smp_wmb();
73
74         page = addr / VHOST_LOG_PAGE;
75         while (page * VHOST_LOG_PAGE < addr + len) {
76                 vhost_log_page((uint8_t *)(uintptr_t)dev->log_base, page);
77                 page += 1;
78         }
79 }
80
81 static inline void __attribute__((always_inline))
82 vhost_log_used_vring(struct virtio_net *dev, struct vhost_virtqueue *vq,
83                      uint64_t offset, uint64_t len)
84 {
85         vhost_log_write(dev, vq->log_guest_addr + offset, len);
86 }
87
88 static bool
89 is_valid_virt_queue_idx(uint32_t idx, int is_tx, uint32_t qp_nb)
90 {
91         return (is_tx ^ (idx & 1)) == 0 && idx < qp_nb * VIRTIO_QNUM;
92 }
93
94 static void
95 virtio_enqueue_offload(struct rte_mbuf *m_buf, struct virtio_net_hdr *net_hdr)
96 {
97         memset(net_hdr, 0, sizeof(struct virtio_net_hdr));
98
99         if (m_buf->ol_flags & PKT_TX_L4_MASK) {
100                 net_hdr->flags = VIRTIO_NET_HDR_F_NEEDS_CSUM;
101                 net_hdr->csum_start = m_buf->l2_len + m_buf->l3_len;
102
103                 switch (m_buf->ol_flags & PKT_TX_L4_MASK) {
104                 case PKT_TX_TCP_CKSUM:
105                         net_hdr->csum_offset = (offsetof(struct tcp_hdr,
106                                                 cksum));
107                         break;
108                 case PKT_TX_UDP_CKSUM:
109                         net_hdr->csum_offset = (offsetof(struct udp_hdr,
110                                                 dgram_cksum));
111                         break;
112                 case PKT_TX_SCTP_CKSUM:
113                         net_hdr->csum_offset = (offsetof(struct sctp_hdr,
114                                                 cksum));
115                         break;
116                 }
117         }
118
119         if (m_buf->ol_flags & PKT_TX_TCP_SEG) {
120                 if (m_buf->ol_flags & PKT_TX_IPV4)
121                         net_hdr->gso_type = VIRTIO_NET_HDR_GSO_TCPV4;
122                 else
123                         net_hdr->gso_type = VIRTIO_NET_HDR_GSO_TCPV6;
124                 net_hdr->gso_size = m_buf->tso_segsz;
125                 net_hdr->hdr_len = m_buf->l2_len + m_buf->l3_len
126                                         + m_buf->l4_len;
127         }
128
129         return;
130 }
131
132 static inline void
133 copy_virtio_net_hdr(struct vhost_virtqueue *vq, uint64_t desc_addr,
134                     struct virtio_net_hdr_mrg_rxbuf hdr)
135 {
136         if (vq->vhost_hlen == sizeof(struct virtio_net_hdr_mrg_rxbuf))
137                 *(struct virtio_net_hdr_mrg_rxbuf *)(uintptr_t)desc_addr = hdr;
138         else
139                 *(struct virtio_net_hdr *)(uintptr_t)desc_addr = hdr.hdr;
140 }
141
142 static inline int __attribute__((always_inline))
143 copy_mbuf_to_desc(struct virtio_net *dev, struct vhost_virtqueue *vq,
144                   struct rte_mbuf *m, uint16_t desc_idx, uint32_t *copied)
145 {
146         uint32_t desc_avail, desc_offset;
147         uint32_t mbuf_avail, mbuf_offset;
148         uint32_t cpy_len;
149         struct vring_desc *desc;
150         uint64_t desc_addr;
151         struct virtio_net_hdr_mrg_rxbuf virtio_hdr = {{0, 0, 0, 0, 0, 0}, 0};
152
153         desc = &vq->desc[desc_idx];
154         if (unlikely(desc->len < vq->vhost_hlen))
155                 return -1;
156
157         desc_addr = gpa_to_vva(dev, desc->addr);
158         rte_prefetch0((void *)(uintptr_t)desc_addr);
159
160         virtio_enqueue_offload(m, &virtio_hdr.hdr);
161         copy_virtio_net_hdr(vq, desc_addr, virtio_hdr);
162         vhost_log_write(dev, desc->addr, vq->vhost_hlen);
163         PRINT_PACKET(dev, (uintptr_t)desc_addr, vq->vhost_hlen, 0);
164
165         desc_offset = vq->vhost_hlen;
166         desc_avail  = desc->len - vq->vhost_hlen;
167
168         *copied = rte_pktmbuf_pkt_len(m);
169         mbuf_avail  = rte_pktmbuf_data_len(m);
170         mbuf_offset = 0;
171         while (mbuf_avail != 0 || m->next != NULL) {
172                 /* done with current mbuf, fetch next */
173                 if (mbuf_avail == 0) {
174                         m = m->next;
175
176                         mbuf_offset = 0;
177                         mbuf_avail  = rte_pktmbuf_data_len(m);
178                 }
179
180                 /* done with current desc buf, fetch next */
181                 if (desc_avail == 0) {
182                         if ((desc->flags & VRING_DESC_F_NEXT) == 0) {
183                                 /* Room in vring buffer is not enough */
184                                 return -1;
185                         }
186                         if (unlikely(desc->next >= vq->size))
187                                 return -1;
188
189                         desc = &vq->desc[desc->next];
190                         desc_addr   = gpa_to_vva(dev, desc->addr);
191                         desc_offset = 0;
192                         desc_avail  = desc->len;
193                 }
194
195                 cpy_len = RTE_MIN(desc_avail, mbuf_avail);
196                 rte_memcpy((void *)((uintptr_t)(desc_addr + desc_offset)),
197                         rte_pktmbuf_mtod_offset(m, void *, mbuf_offset),
198                         cpy_len);
199                 vhost_log_write(dev, desc->addr + desc_offset, cpy_len);
200                 PRINT_PACKET(dev, (uintptr_t)(desc_addr + desc_offset),
201                              cpy_len, 0);
202
203                 mbuf_avail  -= cpy_len;
204                 mbuf_offset += cpy_len;
205                 desc_avail  -= cpy_len;
206                 desc_offset += cpy_len;
207         }
208
209         return 0;
210 }
211
212 /*
213  * As many data cores may want to access available buffers
214  * they need to be reserved.
215  */
216 static inline uint32_t
217 reserve_avail_buf(struct vhost_virtqueue *vq, uint32_t count,
218                   uint16_t *start, uint16_t *end)
219 {
220         uint16_t res_start_idx;
221         uint16_t res_end_idx;
222         uint16_t avail_idx;
223         uint16_t free_entries;
224         int success;
225
226         count = RTE_MIN(count, (uint32_t)MAX_PKT_BURST);
227
228 again:
229         res_start_idx = vq->last_used_idx_res;
230         avail_idx = *((volatile uint16_t *)&vq->avail->idx);
231
232         free_entries = avail_idx - res_start_idx;
233         count = RTE_MIN(count, free_entries);
234         if (count == 0)
235                 return 0;
236
237         res_end_idx = res_start_idx + count;
238
239         /*
240          * update vq->last_used_idx_res atomically; try again if failed.
241          *
242          * TODO: Allow to disable cmpset if no concurrency in application.
243          */
244         success = rte_atomic16_cmpset(&vq->last_used_idx_res,
245                                       res_start_idx, res_end_idx);
246         if (unlikely(!success))
247                 goto again;
248
249         *start = res_start_idx;
250         *end   = res_end_idx;
251
252         return count;
253 }
254
255 /**
256  * This function adds buffers to the virtio devices RX virtqueue. Buffers can
257  * be received from the physical port or from another virtio device. A packet
258  * count is returned to indicate the number of packets that are succesfully
259  * added to the RX queue. This function works when the mbuf is scattered, but
260  * it doesn't support the mergeable feature.
261  */
262 static inline uint32_t __attribute__((always_inline))
263 virtio_dev_rx(struct virtio_net *dev, uint16_t queue_id,
264               struct rte_mbuf **pkts, uint32_t count)
265 {
266         struct vhost_virtqueue *vq;
267         uint16_t res_start_idx, res_end_idx;
268         uint16_t desc_indexes[MAX_PKT_BURST];
269         uint32_t i;
270
271         LOG_DEBUG(VHOST_DATA, "(%"PRIu64") virtio_dev_rx()\n", dev->device_fh);
272         if (unlikely(!is_valid_virt_queue_idx(queue_id, 0, dev->virt_qp_nb))) {
273                 RTE_LOG(ERR, VHOST_DATA,
274                         "%s (%"PRIu64"): virtqueue idx:%d invalid.\n",
275                         __func__, dev->device_fh, queue_id);
276                 return 0;
277         }
278
279         vq = dev->virtqueue[queue_id];
280         if (unlikely(vq->enabled == 0))
281                 return 0;
282
283         count = reserve_avail_buf(vq, count, &res_start_idx, &res_end_idx);
284         if (count == 0)
285                 return 0;
286
287         LOG_DEBUG(VHOST_DATA,
288                 "(%"PRIu64") res_start_idx %d| res_end_idx Index %d\n",
289                 dev->device_fh, res_start_idx, res_end_idx);
290
291         /* Retrieve all of the desc indexes first to avoid caching issues. */
292         rte_prefetch0(&vq->avail->ring[res_start_idx & (vq->size - 1)]);
293         for (i = 0; i < count; i++) {
294                 desc_indexes[i] = vq->avail->ring[(res_start_idx + i) &
295                                                   (vq->size - 1)];
296         }
297
298         rte_prefetch0(&vq->desc[desc_indexes[0]]);
299         for (i = 0; i < count; i++) {
300                 uint16_t desc_idx = desc_indexes[i];
301                 uint16_t used_idx = (res_start_idx + i) & (vq->size - 1);
302                 uint32_t copied;
303                 int err;
304
305                 err = copy_mbuf_to_desc(dev, vq, pkts[i], desc_idx, &copied);
306
307                 vq->used->ring[used_idx].id = desc_idx;
308                 if (unlikely(err))
309                         vq->used->ring[used_idx].len = vq->vhost_hlen;
310                 else
311                         vq->used->ring[used_idx].len = copied + vq->vhost_hlen;
312                 vhost_log_used_vring(dev, vq,
313                         offsetof(struct vring_used, ring[used_idx]),
314                         sizeof(vq->used->ring[used_idx]));
315
316                 if (i + 1 < count)
317                         rte_prefetch0(&vq->desc[desc_indexes[i+1]]);
318         }
319
320         rte_compiler_barrier();
321
322         /* Wait until it's our turn to add our buffer to the used ring. */
323         while (unlikely(vq->last_used_idx != res_start_idx))
324                 rte_pause();
325
326         *(volatile uint16_t *)&vq->used->idx += count;
327         vq->last_used_idx = res_end_idx;
328         vhost_log_used_vring(dev, vq,
329                 offsetof(struct vring_used, idx),
330                 sizeof(vq->used->idx));
331
332         /* flush used->idx update before we read avail->flags. */
333         rte_mb();
334
335         /* Kick the guest if necessary. */
336         if (!(vq->avail->flags & VRING_AVAIL_F_NO_INTERRUPT))
337                 eventfd_write(vq->callfd, (eventfd_t)1);
338         return count;
339 }
340
341 static inline int
342 fill_vec_buf(struct vhost_virtqueue *vq, uint32_t avail_idx,
343              uint32_t *allocated, uint32_t *vec_idx)
344 {
345         uint16_t idx = vq->avail->ring[avail_idx & (vq->size - 1)];
346         uint32_t vec_id = *vec_idx;
347         uint32_t len    = *allocated;
348
349         while (1) {
350                 if (unlikely(vec_id >= BUF_VECTOR_MAX || idx >= vq->size))
351                         return -1;
352
353                 len += vq->desc[idx].len;
354                 vq->buf_vec[vec_id].buf_addr = vq->desc[idx].addr;
355                 vq->buf_vec[vec_id].buf_len  = vq->desc[idx].len;
356                 vq->buf_vec[vec_id].desc_idx = idx;
357                 vec_id++;
358
359                 if ((vq->desc[idx].flags & VRING_DESC_F_NEXT) == 0)
360                         break;
361
362                 idx = vq->desc[idx].next;
363         }
364
365         *allocated = len;
366         *vec_idx   = vec_id;
367
368         return 0;
369 }
370
371 /*
372  * As many data cores may want to access available buffers concurrently,
373  * they need to be reserved.
374  *
375  * Returns -1 on fail, 0 on success
376  */
377 static inline int
378 reserve_avail_buf_mergeable(struct vhost_virtqueue *vq, uint32_t size,
379                             uint16_t *start, uint16_t *end)
380 {
381         uint16_t res_start_idx;
382         uint16_t res_cur_idx;
383         uint16_t avail_idx;
384         uint32_t allocated;
385         uint32_t vec_idx;
386         uint16_t tries;
387
388 again:
389         res_start_idx = vq->last_used_idx_res;
390         res_cur_idx  = res_start_idx;
391
392         allocated = 0;
393         vec_idx   = 0;
394         tries     = 0;
395         while (1) {
396                 avail_idx = *((volatile uint16_t *)&vq->avail->idx);
397                 if (unlikely(res_cur_idx == avail_idx))
398                         return -1;
399
400                 if (unlikely(fill_vec_buf(vq, res_cur_idx, &allocated,
401                                           &vec_idx) < 0))
402                         return -1;
403
404                 res_cur_idx++;
405                 tries++;
406
407                 if (allocated >= size)
408                         break;
409
410                 /*
411                  * if we tried all available ring items, and still
412                  * can't get enough buf, it means something abnormal
413                  * happened.
414                  */
415                 if (unlikely(tries >= vq->size))
416                         return -1;
417         }
418
419         /*
420          * update vq->last_used_idx_res atomically.
421          * retry again if failed.
422          */
423         if (rte_atomic16_cmpset(&vq->last_used_idx_res,
424                                 res_start_idx, res_cur_idx) == 0)
425                 goto again;
426
427         *start = res_start_idx;
428         *end   = res_cur_idx;
429         return 0;
430 }
431
432 static inline uint32_t __attribute__((always_inline))
433 copy_mbuf_to_desc_mergeable(struct virtio_net *dev, struct vhost_virtqueue *vq,
434                             uint16_t res_start_idx, uint16_t res_end_idx,
435                             struct rte_mbuf *m)
436 {
437         struct virtio_net_hdr_mrg_rxbuf virtio_hdr = {{0, 0, 0, 0, 0, 0}, 0};
438         uint32_t vec_idx = 0;
439         uint16_t cur_idx = res_start_idx;
440         uint64_t desc_addr;
441         uint32_t mbuf_offset, mbuf_avail;
442         uint32_t desc_offset, desc_avail;
443         uint32_t cpy_len;
444         uint16_t desc_idx, used_idx;
445
446         if (unlikely(m == NULL))
447                 return 0;
448
449         LOG_DEBUG(VHOST_DATA,
450                 "(%"PRIu64") Current Index %d| End Index %d\n",
451                 dev->device_fh, cur_idx, res_end_idx);
452
453         if (vq->buf_vec[vec_idx].buf_len < vq->vhost_hlen)
454                 return -1;
455
456         desc_addr = gpa_to_vva(dev, vq->buf_vec[vec_idx].buf_addr);
457         rte_prefetch0((void *)(uintptr_t)desc_addr);
458
459         virtio_hdr.num_buffers = res_end_idx - res_start_idx;
460         LOG_DEBUG(VHOST_DATA, "(%"PRIu64") RX: Num merge buffers %d\n",
461                 dev->device_fh, virtio_hdr.num_buffers);
462
463         virtio_enqueue_offload(m, &virtio_hdr.hdr);
464         copy_virtio_net_hdr(vq, desc_addr, virtio_hdr);
465         vhost_log_write(dev, vq->buf_vec[vec_idx].buf_addr, vq->vhost_hlen);
466         PRINT_PACKET(dev, (uintptr_t)desc_addr, vq->vhost_hlen, 0);
467
468         desc_avail  = vq->buf_vec[vec_idx].buf_len - vq->vhost_hlen;
469         desc_offset = vq->vhost_hlen;
470
471         mbuf_avail  = rte_pktmbuf_data_len(m);
472         mbuf_offset = 0;
473         while (mbuf_avail != 0 || m->next != NULL) {
474                 /* done with current desc buf, get the next one */
475                 if (desc_avail == 0) {
476                         desc_idx = vq->buf_vec[vec_idx].desc_idx;
477
478                         if (!(vq->desc[desc_idx].flags & VRING_DESC_F_NEXT)) {
479                                 /* Update used ring with desc information */
480                                 used_idx = cur_idx++ & (vq->size - 1);
481                                 vq->used->ring[used_idx].id  = desc_idx;
482                                 vq->used->ring[used_idx].len = desc_offset;
483                                 vhost_log_used_vring(dev, vq,
484                                         offsetof(struct vring_used,
485                                                  ring[used_idx]),
486                                         sizeof(vq->used->ring[used_idx]));
487                         }
488
489                         vec_idx++;
490                         desc_addr = gpa_to_vva(dev, vq->buf_vec[vec_idx].buf_addr);
491
492                         /* Prefetch buffer address. */
493                         rte_prefetch0((void *)(uintptr_t)desc_addr);
494                         desc_offset = 0;
495                         desc_avail  = vq->buf_vec[vec_idx].buf_len;
496                 }
497
498                 /* done with current mbuf, get the next one */
499                 if (mbuf_avail == 0) {
500                         m = m->next;
501
502                         mbuf_offset = 0;
503                         mbuf_avail  = rte_pktmbuf_data_len(m);
504                 }
505
506                 cpy_len = RTE_MIN(desc_avail, mbuf_avail);
507                 rte_memcpy((void *)((uintptr_t)(desc_addr + desc_offset)),
508                         rte_pktmbuf_mtod_offset(m, void *, mbuf_offset),
509                         cpy_len);
510                 vhost_log_write(dev, vq->buf_vec[vec_idx].buf_addr + desc_offset,
511                         cpy_len);
512                 PRINT_PACKET(dev, (uintptr_t)(desc_addr + desc_offset),
513                         cpy_len, 0);
514
515                 mbuf_avail  -= cpy_len;
516                 mbuf_offset += cpy_len;
517                 desc_avail  -= cpy_len;
518                 desc_offset += cpy_len;
519         }
520
521         used_idx = cur_idx & (vq->size - 1);
522         vq->used->ring[used_idx].id = vq->buf_vec[vec_idx].desc_idx;
523         vq->used->ring[used_idx].len = desc_offset;
524         vhost_log_used_vring(dev, vq,
525                 offsetof(struct vring_used, ring[used_idx]),
526                 sizeof(vq->used->ring[used_idx]));
527
528         return res_end_idx - res_start_idx;
529 }
530
531 static inline uint32_t __attribute__((always_inline))
532 virtio_dev_merge_rx(struct virtio_net *dev, uint16_t queue_id,
533         struct rte_mbuf **pkts, uint32_t count)
534 {
535         struct vhost_virtqueue *vq;
536         uint32_t pkt_idx = 0, nr_used = 0;
537         uint16_t start, end;
538
539         LOG_DEBUG(VHOST_DATA, "(%"PRIu64") virtio_dev_merge_rx()\n",
540                 dev->device_fh);
541         if (unlikely(!is_valid_virt_queue_idx(queue_id, 0, dev->virt_qp_nb))) {
542                 RTE_LOG(ERR, VHOST_DATA,
543                         "%s (%"PRIu64"): virtqueue idx:%d invalid.\n",
544                         __func__, dev->device_fh, queue_id);
545                 return 0;
546         }
547
548         vq = dev->virtqueue[queue_id];
549         if (unlikely(vq->enabled == 0))
550                 return 0;
551
552         count = RTE_MIN((uint32_t)MAX_PKT_BURST, count);
553         if (count == 0)
554                 return 0;
555
556         for (pkt_idx = 0; pkt_idx < count; pkt_idx++) {
557                 uint32_t pkt_len = pkts[pkt_idx]->pkt_len + vq->vhost_hlen;
558
559                 if (unlikely(reserve_avail_buf_mergeable(vq, pkt_len,
560                                                          &start, &end) < 0)) {
561                         LOG_DEBUG(VHOST_DATA,
562                                 "(%" PRIu64 ") Failed to get enough desc from vring\n",
563                                 dev->device_fh);
564                         break;
565                 }
566
567                 nr_used = copy_mbuf_to_desc_mergeable(dev, vq, start, end,
568                                                       pkts[pkt_idx]);
569                 rte_compiler_barrier();
570
571                 /*
572                  * Wait until it's our turn to add our buffer
573                  * to the used ring.
574                  */
575                 while (unlikely(vq->last_used_idx != start))
576                         rte_pause();
577
578                 *(volatile uint16_t *)&vq->used->idx += nr_used;
579                 vhost_log_used_vring(dev, vq, offsetof(struct vring_used, idx),
580                         sizeof(vq->used->idx));
581                 vq->last_used_idx = end;
582         }
583
584         if (likely(pkt_idx)) {
585                 /* flush used->idx update before we read avail->flags. */
586                 rte_mb();
587
588                 /* Kick the guest if necessary. */
589                 if (!(vq->avail->flags & VRING_AVAIL_F_NO_INTERRUPT))
590                         eventfd_write(vq->callfd, (eventfd_t)1);
591         }
592
593         return pkt_idx;
594 }
595
596 uint16_t
597 rte_vhost_enqueue_burst(struct virtio_net *dev, uint16_t queue_id,
598         struct rte_mbuf **pkts, uint16_t count)
599 {
600         if (dev->features & (1 << VIRTIO_NET_F_MRG_RXBUF))
601                 return virtio_dev_merge_rx(dev, queue_id, pkts, count);
602         else
603                 return virtio_dev_rx(dev, queue_id, pkts, count);
604 }
605
606 static void
607 parse_ethernet(struct rte_mbuf *m, uint16_t *l4_proto, void **l4_hdr)
608 {
609         struct ipv4_hdr *ipv4_hdr;
610         struct ipv6_hdr *ipv6_hdr;
611         void *l3_hdr = NULL;
612         struct ether_hdr *eth_hdr;
613         uint16_t ethertype;
614
615         eth_hdr = rte_pktmbuf_mtod(m, struct ether_hdr *);
616
617         m->l2_len = sizeof(struct ether_hdr);
618         ethertype = rte_be_to_cpu_16(eth_hdr->ether_type);
619
620         if (ethertype == ETHER_TYPE_VLAN) {
621                 struct vlan_hdr *vlan_hdr = (struct vlan_hdr *)(eth_hdr + 1);
622
623                 m->l2_len += sizeof(struct vlan_hdr);
624                 ethertype = rte_be_to_cpu_16(vlan_hdr->eth_proto);
625         }
626
627         l3_hdr = (char *)eth_hdr + m->l2_len;
628
629         switch (ethertype) {
630         case ETHER_TYPE_IPv4:
631                 ipv4_hdr = (struct ipv4_hdr *)l3_hdr;
632                 *l4_proto = ipv4_hdr->next_proto_id;
633                 m->l3_len = (ipv4_hdr->version_ihl & 0x0f) * 4;
634                 *l4_hdr = (char *)l3_hdr + m->l3_len;
635                 m->ol_flags |= PKT_TX_IPV4;
636                 break;
637         case ETHER_TYPE_IPv6:
638                 ipv6_hdr = (struct ipv6_hdr *)l3_hdr;
639                 *l4_proto = ipv6_hdr->proto;
640                 m->l3_len = sizeof(struct ipv6_hdr);
641                 *l4_hdr = (char *)l3_hdr + m->l3_len;
642                 m->ol_flags |= PKT_TX_IPV6;
643                 break;
644         default:
645                 m->l3_len = 0;
646                 *l4_proto = 0;
647                 break;
648         }
649 }
650
651 static inline void __attribute__((always_inline))
652 vhost_dequeue_offload(struct virtio_net_hdr *hdr, struct rte_mbuf *m)
653 {
654         uint16_t l4_proto = 0;
655         void *l4_hdr = NULL;
656         struct tcp_hdr *tcp_hdr = NULL;
657
658         parse_ethernet(m, &l4_proto, &l4_hdr);
659         if (hdr->flags == VIRTIO_NET_HDR_F_NEEDS_CSUM) {
660                 if (hdr->csum_start == (m->l2_len + m->l3_len)) {
661                         switch (hdr->csum_offset) {
662                         case (offsetof(struct tcp_hdr, cksum)):
663                                 if (l4_proto == IPPROTO_TCP)
664                                         m->ol_flags |= PKT_TX_TCP_CKSUM;
665                                 break;
666                         case (offsetof(struct udp_hdr, dgram_cksum)):
667                                 if (l4_proto == IPPROTO_UDP)
668                                         m->ol_flags |= PKT_TX_UDP_CKSUM;
669                                 break;
670                         case (offsetof(struct sctp_hdr, cksum)):
671                                 if (l4_proto == IPPROTO_SCTP)
672                                         m->ol_flags |= PKT_TX_SCTP_CKSUM;
673                                 break;
674                         default:
675                                 break;
676                         }
677                 }
678         }
679
680         if (hdr->gso_type != VIRTIO_NET_HDR_GSO_NONE) {
681                 switch (hdr->gso_type & ~VIRTIO_NET_HDR_GSO_ECN) {
682                 case VIRTIO_NET_HDR_GSO_TCPV4:
683                 case VIRTIO_NET_HDR_GSO_TCPV6:
684                         tcp_hdr = (struct tcp_hdr *)l4_hdr;
685                         m->ol_flags |= PKT_TX_TCP_SEG;
686                         m->tso_segsz = hdr->gso_size;
687                         m->l4_len = (tcp_hdr->data_off & 0xf0) >> 2;
688                         break;
689                 default:
690                         RTE_LOG(WARNING, VHOST_DATA,
691                                 "unsupported gso type %u.\n", hdr->gso_type);
692                         break;
693                 }
694         }
695 }
696
697 #define RARP_PKT_SIZE   64
698
699 static int
700 make_rarp_packet(struct rte_mbuf *rarp_mbuf, const struct ether_addr *mac)
701 {
702         struct ether_hdr *eth_hdr;
703         struct arp_hdr  *rarp;
704
705         if (rarp_mbuf->buf_len < 64) {
706                 RTE_LOG(WARNING, VHOST_DATA,
707                         "failed to make RARP; mbuf size too small %u (< %d)\n",
708                         rarp_mbuf->buf_len, RARP_PKT_SIZE);
709                 return -1;
710         }
711
712         /* Ethernet header. */
713         eth_hdr = rte_pktmbuf_mtod_offset(rarp_mbuf, struct ether_hdr *, 0);
714         memset(eth_hdr->d_addr.addr_bytes, 0xff, ETHER_ADDR_LEN);
715         ether_addr_copy(mac, &eth_hdr->s_addr);
716         eth_hdr->ether_type = htons(ETHER_TYPE_RARP);
717
718         /* RARP header. */
719         rarp = (struct arp_hdr *)(eth_hdr + 1);
720         rarp->arp_hrd = htons(ARP_HRD_ETHER);
721         rarp->arp_pro = htons(ETHER_TYPE_IPv4);
722         rarp->arp_hln = ETHER_ADDR_LEN;
723         rarp->arp_pln = 4;
724         rarp->arp_op  = htons(ARP_OP_REVREQUEST);
725
726         ether_addr_copy(mac, &rarp->arp_data.arp_sha);
727         ether_addr_copy(mac, &rarp->arp_data.arp_tha);
728         memset(&rarp->arp_data.arp_sip, 0x00, 4);
729         memset(&rarp->arp_data.arp_tip, 0x00, 4);
730
731         rarp_mbuf->pkt_len  = rarp_mbuf->data_len = RARP_PKT_SIZE;
732
733         return 0;
734 }
735
736 static inline int __attribute__((always_inline))
737 copy_desc_to_mbuf(struct virtio_net *dev, struct vhost_virtqueue *vq,
738                   struct rte_mbuf *m, uint16_t desc_idx,
739                   struct rte_mempool *mbuf_pool)
740 {
741         struct vring_desc *desc;
742         uint64_t desc_addr;
743         uint32_t desc_avail, desc_offset;
744         uint32_t mbuf_avail, mbuf_offset;
745         uint32_t cpy_len;
746         struct rte_mbuf *cur = m, *prev = m;
747         struct virtio_net_hdr *hdr;
748
749         desc = &vq->desc[desc_idx];
750         if (unlikely(desc->len < vq->vhost_hlen))
751                 return -1;
752
753         desc_addr = gpa_to_vva(dev, desc->addr);
754         rte_prefetch0((void *)(uintptr_t)desc_addr);
755
756         /* Retrieve virtio net header */
757         hdr = (struct virtio_net_hdr *)((uintptr_t)desc_addr);
758         desc_avail  = desc->len - vq->vhost_hlen;
759         desc_offset = vq->vhost_hlen;
760
761         mbuf_offset = 0;
762         mbuf_avail  = m->buf_len - RTE_PKTMBUF_HEADROOM;
763         while (desc_avail != 0 || (desc->flags & VRING_DESC_F_NEXT) != 0) {
764                 /* This desc reaches to its end, get the next one */
765                 if (desc_avail == 0) {
766                         if (unlikely(desc->next >= vq->size))
767                                 return -1;
768                         desc = &vq->desc[desc->next];
769
770                         desc_addr = gpa_to_vva(dev, desc->addr);
771                         rte_prefetch0((void *)(uintptr_t)desc_addr);
772
773                         desc_offset = 0;
774                         desc_avail  = desc->len;
775
776                         PRINT_PACKET(dev, (uintptr_t)desc_addr, desc->len, 0);
777                 }
778
779                 /*
780                  * This mbuf reaches to its end, get a new one
781                  * to hold more data.
782                  */
783                 if (mbuf_avail == 0) {
784                         cur = rte_pktmbuf_alloc(mbuf_pool);
785                         if (unlikely(cur == NULL)) {
786                                 RTE_LOG(ERR, VHOST_DATA, "Failed to "
787                                         "allocate memory for mbuf.\n");
788                                 return -1;
789                         }
790
791                         prev->next = cur;
792                         prev->data_len = mbuf_offset;
793                         m->nb_segs += 1;
794                         m->pkt_len += mbuf_offset;
795                         prev = cur;
796
797                         mbuf_offset = 0;
798                         mbuf_avail  = cur->buf_len - RTE_PKTMBUF_HEADROOM;
799                 }
800
801                 cpy_len = RTE_MIN(desc_avail, mbuf_avail);
802                 rte_memcpy(rte_pktmbuf_mtod_offset(cur, void *, mbuf_offset),
803                         (void *)((uintptr_t)(desc_addr + desc_offset)),
804                         cpy_len);
805
806                 mbuf_avail  -= cpy_len;
807                 mbuf_offset += cpy_len;
808                 desc_avail  -= cpy_len;
809                 desc_offset += cpy_len;
810         }
811
812         prev->data_len = mbuf_offset;
813         m->pkt_len    += mbuf_offset;
814
815         if (hdr->flags != 0 || hdr->gso_type != VIRTIO_NET_HDR_GSO_NONE)
816                 vhost_dequeue_offload(hdr, m);
817
818         return 0;
819 }
820
821 uint16_t
822 rte_vhost_dequeue_burst(struct virtio_net *dev, uint16_t queue_id,
823         struct rte_mempool *mbuf_pool, struct rte_mbuf **pkts, uint16_t count)
824 {
825         struct rte_mbuf *rarp_mbuf = NULL;
826         struct vhost_virtqueue *vq;
827         uint32_t desc_indexes[MAX_PKT_BURST];
828         uint32_t used_idx;
829         uint32_t i = 0;
830         uint16_t free_entries;
831         uint16_t avail_idx;
832
833         if (unlikely(!is_valid_virt_queue_idx(queue_id, 1, dev->virt_qp_nb))) {
834                 RTE_LOG(ERR, VHOST_DATA,
835                         "%s (%"PRIu64"): virtqueue idx:%d invalid.\n",
836                         __func__, dev->device_fh, queue_id);
837                 return 0;
838         }
839
840         vq = dev->virtqueue[queue_id];
841         if (unlikely(vq->enabled == 0))
842                 return 0;
843
844         /*
845          * Construct a RARP broadcast packet, and inject it to the "pkts"
846          * array, to looks like that guest actually send such packet.
847          *
848          * Check user_send_rarp() for more information.
849          */
850         if (unlikely(rte_atomic16_cmpset((volatile uint16_t *)
851                                          &dev->broadcast_rarp.cnt, 1, 0))) {
852                 rarp_mbuf = rte_pktmbuf_alloc(mbuf_pool);
853                 if (rarp_mbuf == NULL) {
854                         RTE_LOG(ERR, VHOST_DATA,
855                                 "Failed to allocate memory for mbuf.\n");
856                         return 0;
857                 }
858
859                 if (make_rarp_packet(rarp_mbuf, &dev->mac)) {
860                         rte_pktmbuf_free(rarp_mbuf);
861                         rarp_mbuf = NULL;
862                 } else {
863                         count -= 1;
864                 }
865         }
866
867         avail_idx =  *((volatile uint16_t *)&vq->avail->idx);
868         free_entries = avail_idx - vq->last_used_idx;
869         if (free_entries == 0)
870                 goto out;
871
872         LOG_DEBUG(VHOST_DATA, "%s (%"PRIu64")\n", __func__, dev->device_fh);
873
874         /* Prefetch available ring to retrieve head indexes. */
875         used_idx = vq->last_used_idx & (vq->size - 1);
876         rte_prefetch0(&vq->avail->ring[used_idx]);
877
878         count = RTE_MIN(count, MAX_PKT_BURST);
879         count = RTE_MIN(count, free_entries);
880         LOG_DEBUG(VHOST_DATA, "(%"PRIu64") about to dequeue %u buffers\n",
881                         dev->device_fh, count);
882
883         /* Retrieve all of the head indexes first to avoid caching issues. */
884         for (i = 0; i < count; i++) {
885                 desc_indexes[i] = vq->avail->ring[(vq->last_used_idx + i) &
886                                         (vq->size - 1)];
887         }
888
889         /* Prefetch descriptor index. */
890         rte_prefetch0(&vq->desc[desc_indexes[0]]);
891         rte_prefetch0(&vq->used->ring[vq->last_used_idx & (vq->size - 1)]);
892
893         for (i = 0; i < count; i++) {
894                 int err;
895
896                 if (likely(i + 1 < count)) {
897                         rte_prefetch0(&vq->desc[desc_indexes[i + 1]]);
898                         rte_prefetch0(&vq->used->ring[(used_idx + 1) &
899                                                       (vq->size - 1)]);
900                 }
901
902                 pkts[i] = rte_pktmbuf_alloc(mbuf_pool);
903                 if (unlikely(pkts[i] == NULL)) {
904                         RTE_LOG(ERR, VHOST_DATA,
905                                 "Failed to allocate memory for mbuf.\n");
906                         break;
907                 }
908                 err = copy_desc_to_mbuf(dev, vq, pkts[i], desc_indexes[i],
909                                         mbuf_pool);
910                 if (unlikely(err)) {
911                         rte_pktmbuf_free(pkts[i]);
912                         break;
913                 }
914
915                 used_idx = vq->last_used_idx++ & (vq->size - 1);
916                 vq->used->ring[used_idx].id  = desc_indexes[i];
917                 vq->used->ring[used_idx].len = 0;
918                 vhost_log_used_vring(dev, vq,
919                                 offsetof(struct vring_used, ring[used_idx]),
920                                 sizeof(vq->used->ring[used_idx]));
921         }
922
923         rte_compiler_barrier();
924         vq->used->idx += i;
925         vhost_log_used_vring(dev, vq, offsetof(struct vring_used, idx),
926                         sizeof(vq->used->idx));
927
928         /* Kick guest if required. */
929         if (!(vq->avail->flags & VRING_AVAIL_F_NO_INTERRUPT))
930                 eventfd_write(vq->callfd, (eventfd_t)1);
931
932 out:
933         if (unlikely(rarp_mbuf != NULL)) {
934                 /*
935                  * Inject it to the head of "pkts" array, so that switch's mac
936                  * learning table will get updated first.
937                  */
938                 memmove(&pkts[1], pkts, i * sizeof(struct rte_mbuf *));
939                 pkts[0] = rarp_mbuf;
940                 i += 1;
941         }
942
943         return i;
944 }