sysctl_net_ipv4.c 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811
  1. /*
  2. * sysctl_net_ipv4.c: sysctl interface to net IPV4 subsystem.
  3. *
  4. * $Id: sysctl_net_ipv4.c,v 1.1.1.1 2007/06/12 07:27:14 eyryu Exp $
  5. *
  6. * Begun April 1, 1996, Mike Shaver.
  7. * Added /proc/sys/net/ipv4 directory entry (empty =) ). [MS]
  8. */
  9. #include <linux/mm.h>
  10. #include <linux/module.h>
  11. #include <linux/sysctl.h>
  12. #include <linux/igmp.h>
  13. #include <linux/inetdevice.h>
  14. #include <net/snmp.h>
  15. #include <net/icmp.h>
  16. #include <net/ip.h>
  17. #include <net/route.h>
  18. #include <net/tcp.h>
  19. #include <net/cipso_ipv4.h>
  20. /* From af_inet.c */
  21. extern int sysctl_ip_nonlocal_bind;
  22. #ifdef CONFIG_SYSCTL
  23. static int zero;
  24. static int tcp_retr1_max = 255;
  25. static int ip_local_port_range_min[] = { 1, 1 };
  26. static int ip_local_port_range_max[] = { 65535, 65535 };
  27. #endif
  28. struct ipv4_config ipv4_config;
  29. #ifdef CONFIG_SYSCTL
  30. static
  31. int ipv4_sysctl_forward(ctl_table *ctl, int write, struct file * filp,
  32. void __user *buffer, size_t *lenp, loff_t *ppos)
  33. {
  34. int val = ipv4_devconf.forwarding;
  35. int ret;
  36. ret = proc_dointvec(ctl, write, filp, buffer, lenp, ppos);
  37. if (write && ipv4_devconf.forwarding != val)
  38. inet_forward_change();
  39. return ret;
  40. }
  41. static int ipv4_sysctl_forward_strategy(ctl_table *table,
  42. int __user *name, int nlen,
  43. void __user *oldval, size_t __user *oldlenp,
  44. void __user *newval, size_t newlen)
  45. {
  46. int *valp = table->data;
  47. int new;
  48. if (!newval || !newlen)
  49. return 0;
  50. if (newlen != sizeof(int))
  51. return -EINVAL;
  52. if (get_user(new, (int __user *)newval))
  53. return -EFAULT;
  54. if (new == *valp)
  55. return 0;
  56. if (oldval && oldlenp) {
  57. size_t len;
  58. if (get_user(len, oldlenp))
  59. return -EFAULT;
  60. if (len) {
  61. if (len > table->maxlen)
  62. len = table->maxlen;
  63. if (copy_to_user(oldval, valp, len))
  64. return -EFAULT;
  65. if (put_user(len, oldlenp))
  66. return -EFAULT;
  67. }
  68. }
  69. *valp = new;
  70. inet_forward_change();
  71. return 1;
  72. }
  73. static int proc_tcp_congestion_control(ctl_table *ctl, int write, struct file * filp,
  74. void __user *buffer, size_t *lenp, loff_t *ppos)
  75. {
  76. char val[TCP_CA_NAME_MAX];
  77. ctl_table tbl = {
  78. .data = val,
  79. .maxlen = TCP_CA_NAME_MAX,
  80. };
  81. int ret;
  82. tcp_get_default_congestion_control(val);
  83. ret = proc_dostring(&tbl, write, filp, buffer, lenp, ppos);
  84. if (write && ret == 0)
  85. ret = tcp_set_default_congestion_control(val);
  86. return ret;
  87. }
  88. static int sysctl_tcp_congestion_control(ctl_table *table, int __user *name,
  89. int nlen, void __user *oldval,
  90. size_t __user *oldlenp,
  91. void __user *newval, size_t newlen)
  92. {
  93. char val[TCP_CA_NAME_MAX];
  94. ctl_table tbl = {
  95. .data = val,
  96. .maxlen = TCP_CA_NAME_MAX,
  97. };
  98. int ret;
  99. tcp_get_default_congestion_control(val);
  100. ret = sysctl_string(&tbl, name, nlen, oldval, oldlenp, newval, newlen);
  101. if (ret == 0 && newval && newlen)
  102. ret = tcp_set_default_congestion_control(val);
  103. return ret;
  104. }
  105. static int proc_tcp_available_congestion_control(ctl_table *ctl,
  106. int write, struct file * filp,
  107. void __user *buffer, size_t *lenp,
  108. loff_t *ppos)
  109. {
  110. ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX, };
  111. int ret;
  112. tbl.data = kmalloc(tbl.maxlen, GFP_USER);
  113. if (!tbl.data)
  114. return -ENOMEM;
  115. tcp_get_available_congestion_control(tbl.data, TCP_CA_BUF_MAX);
  116. ret = proc_dostring(&tbl, write, filp, buffer, lenp, ppos);
  117. kfree(tbl.data);
  118. return ret;
  119. }
  120. static int proc_allowed_congestion_control(ctl_table *ctl,
  121. int write, struct file * filp,
  122. void __user *buffer, size_t *lenp,
  123. loff_t *ppos)
  124. {
  125. ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX };
  126. int ret;
  127. tbl.data = kmalloc(tbl.maxlen, GFP_USER);
  128. if (!tbl.data)
  129. return -ENOMEM;
  130. tcp_get_allowed_congestion_control(tbl.data, tbl.maxlen);
  131. ret = proc_dostring(&tbl, write, filp, buffer, lenp, ppos);
  132. if (write && ret == 0)
  133. ret = tcp_set_allowed_congestion_control(tbl.data);
  134. kfree(tbl.data);
  135. return ret;
  136. }
  137. static int strategy_allowed_congestion_control(ctl_table *table, int __user *name,
  138. int nlen, void __user *oldval,
  139. size_t __user *oldlenp,
  140. void __user *newval,
  141. size_t newlen)
  142. {
  143. ctl_table tbl = { .maxlen = TCP_CA_BUF_MAX };
  144. int ret;
  145. tbl.data = kmalloc(tbl.maxlen, GFP_USER);
  146. if (!tbl.data)
  147. return -ENOMEM;
  148. tcp_get_available_congestion_control(tbl.data, tbl.maxlen);
  149. ret = sysctl_string(&tbl, name, nlen, oldval, oldlenp, newval, newlen);
  150. if (ret == 0 && newval && newlen)
  151. ret = tcp_set_allowed_congestion_control(tbl.data);
  152. kfree(tbl.data);
  153. return ret;
  154. }
  155. ctl_table ipv4_table[] = {
  156. {
  157. .ctl_name = NET_IPV4_TCP_TIMESTAMPS,
  158. .procname = "tcp_timestamps",
  159. .data = &sysctl_tcp_timestamps,
  160. .maxlen = sizeof(int),
  161. .mode = 0644,
  162. .proc_handler = &proc_dointvec
  163. },
  164. {
  165. .ctl_name = NET_IPV4_TCP_WINDOW_SCALING,
  166. .procname = "tcp_window_scaling",
  167. .data = &sysctl_tcp_window_scaling,
  168. .maxlen = sizeof(int),
  169. .mode = 0644,
  170. .proc_handler = &proc_dointvec
  171. },
  172. {
  173. .ctl_name = NET_IPV4_TCP_SACK,
  174. .procname = "tcp_sack",
  175. .data = &sysctl_tcp_sack,
  176. .maxlen = sizeof(int),
  177. .mode = 0644,
  178. .proc_handler = &proc_dointvec
  179. },
  180. {
  181. .ctl_name = NET_IPV4_TCP_RETRANS_COLLAPSE,
  182. .procname = "tcp_retrans_collapse",
  183. .data = &sysctl_tcp_retrans_collapse,
  184. .maxlen = sizeof(int),
  185. .mode = 0644,
  186. .proc_handler = &proc_dointvec
  187. },
  188. {
  189. .ctl_name = NET_IPV4_FORWARD,
  190. .procname = "ip_forward",
  191. .data = &ipv4_devconf.forwarding,
  192. .maxlen = sizeof(int),
  193. .mode = 0644,
  194. .proc_handler = &ipv4_sysctl_forward,
  195. .strategy = &ipv4_sysctl_forward_strategy
  196. },
  197. {
  198. .ctl_name = NET_IPV4_DEFAULT_TTL,
  199. .procname = "ip_default_ttl",
  200. .data = &sysctl_ip_default_ttl,
  201. .maxlen = sizeof(int),
  202. .mode = 0644,
  203. .proc_handler = &ipv4_doint_and_flush,
  204. .strategy = &ipv4_doint_and_flush_strategy,
  205. },
  206. {
  207. .ctl_name = NET_IPV4_NO_PMTU_DISC,
  208. .procname = "ip_no_pmtu_disc",
  209. .data = &ipv4_config.no_pmtu_disc,
  210. .maxlen = sizeof(int),
  211. .mode = 0644,
  212. .proc_handler = &proc_dointvec
  213. },
  214. {
  215. .ctl_name = NET_IPV4_NONLOCAL_BIND,
  216. .procname = "ip_nonlocal_bind",
  217. .data = &sysctl_ip_nonlocal_bind,
  218. .maxlen = sizeof(int),
  219. .mode = 0644,
  220. .proc_handler = &proc_dointvec
  221. },
  222. {
  223. .ctl_name = NET_IPV4_TCP_SYN_RETRIES,
  224. .procname = "tcp_syn_retries",
  225. .data = &sysctl_tcp_syn_retries,
  226. .maxlen = sizeof(int),
  227. .mode = 0644,
  228. .proc_handler = &proc_dointvec
  229. },
  230. {
  231. .ctl_name = NET_TCP_SYNACK_RETRIES,
  232. .procname = "tcp_synack_retries",
  233. .data = &sysctl_tcp_synack_retries,
  234. .maxlen = sizeof(int),
  235. .mode = 0644,
  236. .proc_handler = &proc_dointvec
  237. },
  238. {
  239. .ctl_name = NET_TCP_MAX_ORPHANS,
  240. .procname = "tcp_max_orphans",
  241. .data = &sysctl_tcp_max_orphans,
  242. .maxlen = sizeof(int),
  243. .mode = 0644,
  244. .proc_handler = &proc_dointvec
  245. },
  246. {
  247. .ctl_name = NET_TCP_MAX_TW_BUCKETS,
  248. .procname = "tcp_max_tw_buckets",
  249. .data = &tcp_death_row.sysctl_max_tw_buckets,
  250. .maxlen = sizeof(int),
  251. .mode = 0644,
  252. .proc_handler = &proc_dointvec
  253. },
  254. {
  255. .ctl_name = NET_IPV4_IPFRAG_HIGH_THRESH,
  256. .procname = "ipfrag_high_thresh",
  257. .data = &sysctl_ipfrag_high_thresh,
  258. .maxlen = sizeof(int),
  259. .mode = 0644,
  260. .proc_handler = &proc_dointvec
  261. },
  262. {
  263. .ctl_name = NET_IPV4_IPFRAG_LOW_THRESH,
  264. .procname = "ipfrag_low_thresh",
  265. .data = &sysctl_ipfrag_low_thresh,
  266. .maxlen = sizeof(int),
  267. .mode = 0644,
  268. .proc_handler = &proc_dointvec
  269. },
  270. {
  271. .ctl_name = NET_IPV4_DYNADDR,
  272. .procname = "ip_dynaddr",
  273. .data = &sysctl_ip_dynaddr,
  274. .maxlen = sizeof(int),
  275. .mode = 0644,
  276. .proc_handler = &proc_dointvec
  277. },
  278. {
  279. .ctl_name = NET_IPV4_IPFRAG_TIME,
  280. .procname = "ipfrag_time",
  281. .data = &sysctl_ipfrag_time,
  282. .maxlen = sizeof(int),
  283. .mode = 0644,
  284. .proc_handler = &proc_dointvec_jiffies,
  285. .strategy = &sysctl_jiffies
  286. },
  287. {
  288. .ctl_name = NET_IPV4_TCP_KEEPALIVE_TIME,
  289. .procname = "tcp_keepalive_time",
  290. .data = &sysctl_tcp_keepalive_time,
  291. .maxlen = sizeof(int),
  292. .mode = 0644,
  293. .proc_handler = &proc_dointvec_jiffies,
  294. .strategy = &sysctl_jiffies
  295. },
  296. {
  297. .ctl_name = NET_IPV4_TCP_KEEPALIVE_PROBES,
  298. .procname = "tcp_keepalive_probes",
  299. .data = &sysctl_tcp_keepalive_probes,
  300. .maxlen = sizeof(int),
  301. .mode = 0644,
  302. .proc_handler = &proc_dointvec
  303. },
  304. {
  305. .ctl_name = NET_IPV4_TCP_KEEPALIVE_INTVL,
  306. .procname = "tcp_keepalive_intvl",
  307. .data = &sysctl_tcp_keepalive_intvl,
  308. .maxlen = sizeof(int),
  309. .mode = 0644,
  310. .proc_handler = &proc_dointvec_jiffies,
  311. .strategy = &sysctl_jiffies
  312. },
  313. {
  314. .ctl_name = NET_IPV4_TCP_RETRIES1,
  315. .procname = "tcp_retries1",
  316. .data = &sysctl_tcp_retries1,
  317. .maxlen = sizeof(int),
  318. .mode = 0644,
  319. .proc_handler = &proc_dointvec_minmax,
  320. .strategy = &sysctl_intvec,
  321. .extra2 = &tcp_retr1_max
  322. },
  323. {
  324. .ctl_name = NET_IPV4_TCP_RETRIES2,
  325. .procname = "tcp_retries2",
  326. .data = &sysctl_tcp_retries2,
  327. .maxlen = sizeof(int),
  328. .mode = 0644,
  329. .proc_handler = &proc_dointvec
  330. },
  331. {
  332. .ctl_name = NET_IPV4_TCP_FIN_TIMEOUT,
  333. .procname = "tcp_fin_timeout",
  334. .data = &sysctl_tcp_fin_timeout,
  335. .maxlen = sizeof(int),
  336. .mode = 0644,
  337. .proc_handler = &proc_dointvec_jiffies,
  338. .strategy = &sysctl_jiffies
  339. },
  340. #ifdef CONFIG_SYN_COOKIES
  341. {
  342. .ctl_name = NET_TCP_SYNCOOKIES,
  343. .procname = "tcp_syncookies",
  344. .data = &sysctl_tcp_syncookies,
  345. .maxlen = sizeof(int),
  346. .mode = 0644,
  347. .proc_handler = &proc_dointvec
  348. },
  349. #endif
  350. {
  351. .ctl_name = NET_TCP_TW_RECYCLE,
  352. .procname = "tcp_tw_recycle",
  353. .data = &tcp_death_row.sysctl_tw_recycle,
  354. .maxlen = sizeof(int),
  355. .mode = 0644,
  356. .proc_handler = &proc_dointvec
  357. },
  358. {
  359. .ctl_name = NET_TCP_ABORT_ON_OVERFLOW,
  360. .procname = "tcp_abort_on_overflow",
  361. .data = &sysctl_tcp_abort_on_overflow,
  362. .maxlen = sizeof(int),
  363. .mode = 0644,
  364. .proc_handler = &proc_dointvec
  365. },
  366. {
  367. .ctl_name = NET_TCP_STDURG,
  368. .procname = "tcp_stdurg",
  369. .data = &sysctl_tcp_stdurg,
  370. .maxlen = sizeof(int),
  371. .mode = 0644,
  372. .proc_handler = &proc_dointvec
  373. },
  374. {
  375. .ctl_name = NET_TCP_RFC1337,
  376. .procname = "tcp_rfc1337",
  377. .data = &sysctl_tcp_rfc1337,
  378. .maxlen = sizeof(int),
  379. .mode = 0644,
  380. .proc_handler = &proc_dointvec
  381. },
  382. {
  383. .ctl_name = NET_TCP_MAX_SYN_BACKLOG,
  384. .procname = "tcp_max_syn_backlog",
  385. .data = &sysctl_max_syn_backlog,
  386. .maxlen = sizeof(int),
  387. .mode = 0644,
  388. .proc_handler = &proc_dointvec
  389. },
  390. {
  391. .ctl_name = NET_IPV4_LOCAL_PORT_RANGE,
  392. .procname = "ip_local_port_range",
  393. .data = &sysctl_local_port_range,
  394. .maxlen = sizeof(sysctl_local_port_range),
  395. .mode = 0644,
  396. .proc_handler = &proc_dointvec_minmax,
  397. .strategy = &sysctl_intvec,
  398. .extra1 = ip_local_port_range_min,
  399. .extra2 = ip_local_port_range_max
  400. },
  401. {
  402. .ctl_name = NET_IPV4_ICMP_ECHO_IGNORE_ALL,
  403. .procname = "icmp_echo_ignore_all",
  404. .data = &sysctl_icmp_echo_ignore_all,
  405. .maxlen = sizeof(int),
  406. .mode = 0644,
  407. .proc_handler = &proc_dointvec
  408. },
  409. {
  410. .ctl_name = NET_IPV4_ICMP_ECHO_IGNORE_BROADCASTS,
  411. .procname = "icmp_echo_ignore_broadcasts",
  412. .data = &sysctl_icmp_echo_ignore_broadcasts,
  413. .maxlen = sizeof(int),
  414. .mode = 0644,
  415. .proc_handler = &proc_dointvec
  416. },
  417. {
  418. .ctl_name = NET_IPV4_ICMP_IGNORE_BOGUS_ERROR_RESPONSES,
  419. .procname = "icmp_ignore_bogus_error_responses",
  420. .data = &sysctl_icmp_ignore_bogus_error_responses,
  421. .maxlen = sizeof(int),
  422. .mode = 0644,
  423. .proc_handler = &proc_dointvec
  424. },
  425. {
  426. .ctl_name = NET_IPV4_ICMP_ERRORS_USE_INBOUND_IFADDR,
  427. .procname = "icmp_errors_use_inbound_ifaddr",
  428. .data = &sysctl_icmp_errors_use_inbound_ifaddr,
  429. .maxlen = sizeof(int),
  430. .mode = 0644,
  431. .proc_handler = &proc_dointvec
  432. },
  433. {
  434. .ctl_name = NET_IPV4_ROUTE,
  435. .procname = "route",
  436. .maxlen = 0,
  437. .mode = 0555,
  438. .child = ipv4_route_table
  439. },
  440. #ifdef CONFIG_IP_MULTICAST
  441. {
  442. .ctl_name = NET_IPV4_IGMP_MAX_MEMBERSHIPS,
  443. .procname = "igmp_max_memberships",
  444. .data = &sysctl_igmp_max_memberships,
  445. .maxlen = sizeof(int),
  446. .mode = 0644,
  447. .proc_handler = &proc_dointvec
  448. },
  449. #endif
  450. {
  451. .ctl_name = NET_IPV4_IGMP_MAX_MSF,
  452. .procname = "igmp_max_msf",
  453. .data = &sysctl_igmp_max_msf,
  454. .maxlen = sizeof(int),
  455. .mode = 0644,
  456. .proc_handler = &proc_dointvec
  457. },
  458. {
  459. .ctl_name = NET_IPV4_INET_PEER_THRESHOLD,
  460. .procname = "inet_peer_threshold",
  461. .data = &inet_peer_threshold,
  462. .maxlen = sizeof(int),
  463. .mode = 0644,
  464. .proc_handler = &proc_dointvec
  465. },
  466. {
  467. .ctl_name = NET_IPV4_INET_PEER_MINTTL,
  468. .procname = "inet_peer_minttl",
  469. .data = &inet_peer_minttl,
  470. .maxlen = sizeof(int),
  471. .mode = 0644,
  472. .proc_handler = &proc_dointvec_jiffies,
  473. .strategy = &sysctl_jiffies
  474. },
  475. {
  476. .ctl_name = NET_IPV4_INET_PEER_MAXTTL,
  477. .procname = "inet_peer_maxttl",
  478. .data = &inet_peer_maxttl,
  479. .maxlen = sizeof(int),
  480. .mode = 0644,
  481. .proc_handler = &proc_dointvec_jiffies,
  482. .strategy = &sysctl_jiffies
  483. },
  484. {
  485. .ctl_name = NET_IPV4_INET_PEER_GC_MINTIME,
  486. .procname = "inet_peer_gc_mintime",
  487. .data = &inet_peer_gc_mintime,
  488. .maxlen = sizeof(int),
  489. .mode = 0644,
  490. .proc_handler = &proc_dointvec_jiffies,
  491. .strategy = &sysctl_jiffies
  492. },
  493. {
  494. .ctl_name = NET_IPV4_INET_PEER_GC_MAXTIME,
  495. .procname = "inet_peer_gc_maxtime",
  496. .data = &inet_peer_gc_maxtime,
  497. .maxlen = sizeof(int),
  498. .mode = 0644,
  499. .proc_handler = &proc_dointvec_jiffies,
  500. .strategy = &sysctl_jiffies
  501. },
  502. {
  503. .ctl_name = NET_TCP_ORPHAN_RETRIES,
  504. .procname = "tcp_orphan_retries",
  505. .data = &sysctl_tcp_orphan_retries,
  506. .maxlen = sizeof(int),
  507. .mode = 0644,
  508. .proc_handler = &proc_dointvec
  509. },
  510. {
  511. .ctl_name = NET_TCP_FACK,
  512. .procname = "tcp_fack",
  513. .data = &sysctl_tcp_fack,
  514. .maxlen = sizeof(int),
  515. .mode = 0644,
  516. .proc_handler = &proc_dointvec
  517. },
  518. {
  519. .ctl_name = NET_TCP_REORDERING,
  520. .procname = "tcp_reordering",
  521. .data = &sysctl_tcp_reordering,
  522. .maxlen = sizeof(int),
  523. .mode = 0644,
  524. .proc_handler = &proc_dointvec
  525. },
  526. {
  527. .ctl_name = NET_TCP_ECN,
  528. .procname = "tcp_ecn",
  529. .data = &sysctl_tcp_ecn,
  530. .maxlen = sizeof(int),
  531. .mode = 0644,
  532. .proc_handler = &proc_dointvec
  533. },
  534. {
  535. .ctl_name = NET_TCP_DSACK,
  536. .procname = "tcp_dsack",
  537. .data = &sysctl_tcp_dsack,
  538. .maxlen = sizeof(int),
  539. .mode = 0644,
  540. .proc_handler = &proc_dointvec
  541. },
  542. {
  543. .ctl_name = NET_TCP_MEM,
  544. .procname = "tcp_mem",
  545. .data = &sysctl_tcp_mem,
  546. .maxlen = sizeof(sysctl_tcp_mem),
  547. .mode = 0644,
  548. .proc_handler = &proc_dointvec
  549. },
  550. {
  551. .ctl_name = NET_TCP_WMEM,
  552. .procname = "tcp_wmem",
  553. .data = &sysctl_tcp_wmem,
  554. .maxlen = sizeof(sysctl_tcp_wmem),
  555. .mode = 0644,
  556. .proc_handler = &proc_dointvec
  557. },
  558. {
  559. .ctl_name = NET_TCP_RMEM,
  560. .procname = "tcp_rmem",
  561. .data = &sysctl_tcp_rmem,
  562. .maxlen = sizeof(sysctl_tcp_rmem),
  563. .mode = 0644,
  564. .proc_handler = &proc_dointvec
  565. },
  566. {
  567. .ctl_name = NET_TCP_APP_WIN,
  568. .procname = "tcp_app_win",
  569. .data = &sysctl_tcp_app_win,
  570. .maxlen = sizeof(int),
  571. .mode = 0644,
  572. .proc_handler = &proc_dointvec
  573. },
  574. {
  575. .ctl_name = NET_TCP_ADV_WIN_SCALE,
  576. .procname = "tcp_adv_win_scale",
  577. .data = &sysctl_tcp_adv_win_scale,
  578. .maxlen = sizeof(int),
  579. .mode = 0644,
  580. .proc_handler = &proc_dointvec
  581. },
  582. {
  583. .ctl_name = NET_IPV4_ICMP_RATELIMIT,
  584. .procname = "icmp_ratelimit",
  585. .data = &sysctl_icmp_ratelimit,
  586. .maxlen = sizeof(int),
  587. .mode = 0644,
  588. .proc_handler = &proc_dointvec
  589. },
  590. {
  591. .ctl_name = NET_IPV4_ICMP_RATEMASK,
  592. .procname = "icmp_ratemask",
  593. .data = &sysctl_icmp_ratemask,
  594. .maxlen = sizeof(int),
  595. .mode = 0644,
  596. .proc_handler = &proc_dointvec
  597. },
  598. {
  599. .ctl_name = NET_TCP_TW_REUSE,
  600. .procname = "tcp_tw_reuse",
  601. .data = &sysctl_tcp_tw_reuse,
  602. .maxlen = sizeof(int),
  603. .mode = 0644,
  604. .proc_handler = &proc_dointvec
  605. },
  606. {
  607. .ctl_name = NET_TCP_FRTO,
  608. .procname = "tcp_frto",
  609. .data = &sysctl_tcp_frto,
  610. .maxlen = sizeof(int),
  611. .mode = 0644,
  612. .proc_handler = &proc_dointvec
  613. },
  614. {
  615. .ctl_name = NET_TCP_LOW_LATENCY,
  616. .procname = "tcp_low_latency",
  617. .data = &sysctl_tcp_low_latency,
  618. .maxlen = sizeof(int),
  619. .mode = 0644,
  620. .proc_handler = &proc_dointvec
  621. },
  622. {
  623. .ctl_name = NET_IPV4_IPFRAG_SECRET_INTERVAL,
  624. .procname = "ipfrag_secret_interval",
  625. .data = &sysctl_ipfrag_secret_interval,
  626. .maxlen = sizeof(int),
  627. .mode = 0644,
  628. .proc_handler = &proc_dointvec_jiffies,
  629. .strategy = &sysctl_jiffies
  630. },
  631. {
  632. .ctl_name = NET_IPV4_IPFRAG_MAX_DIST,
  633. .procname = "ipfrag_max_dist",
  634. .data = &sysctl_ipfrag_max_dist,
  635. .maxlen = sizeof(int),
  636. .mode = 0644,
  637. .proc_handler = &proc_dointvec_minmax,
  638. .extra1 = &zero
  639. },
  640. {
  641. .ctl_name = NET_TCP_NO_METRICS_SAVE,
  642. .procname = "tcp_no_metrics_save",
  643. .data = &sysctl_tcp_nometrics_save,
  644. .maxlen = sizeof(int),
  645. .mode = 0644,
  646. .proc_handler = &proc_dointvec,
  647. },
  648. {
  649. .ctl_name = NET_TCP_MODERATE_RCVBUF,
  650. .procname = "tcp_moderate_rcvbuf",
  651. .data = &sysctl_tcp_moderate_rcvbuf,
  652. .maxlen = sizeof(int),
  653. .mode = 0644,
  654. .proc_handler = &proc_dointvec,
  655. },
  656. {
  657. .ctl_name = NET_TCP_TSO_WIN_DIVISOR,
  658. .procname = "tcp_tso_win_divisor",
  659. .data = &sysctl_tcp_tso_win_divisor,
  660. .maxlen = sizeof(int),
  661. .mode = 0644,
  662. .proc_handler = &proc_dointvec,
  663. },
  664. {
  665. .ctl_name = NET_TCP_CONG_CONTROL,
  666. .procname = "tcp_congestion_control",
  667. .mode = 0644,
  668. .maxlen = TCP_CA_NAME_MAX,
  669. .proc_handler = &proc_tcp_congestion_control,
  670. .strategy = &sysctl_tcp_congestion_control,
  671. },
  672. {
  673. .ctl_name = NET_TCP_ABC,
  674. .procname = "tcp_abc",
  675. .data = &sysctl_tcp_abc,
  676. .maxlen = sizeof(int),
  677. .mode = 0644,
  678. .proc_handler = &proc_dointvec,
  679. },
  680. {
  681. .ctl_name = NET_TCP_MTU_PROBING,
  682. .procname = "tcp_mtu_probing",
  683. .data = &sysctl_tcp_mtu_probing,
  684. .maxlen = sizeof(int),
  685. .mode = 0644,
  686. .proc_handler = &proc_dointvec,
  687. },
  688. {
  689. .ctl_name = NET_TCP_BASE_MSS,
  690. .procname = "tcp_base_mss",
  691. .data = &sysctl_tcp_base_mss,
  692. .maxlen = sizeof(int),
  693. .mode = 0644,
  694. .proc_handler = &proc_dointvec,
  695. },
  696. {
  697. .ctl_name = NET_IPV4_TCP_WORKAROUND_SIGNED_WINDOWS,
  698. .procname = "tcp_workaround_signed_windows",
  699. .data = &sysctl_tcp_workaround_signed_windows,
  700. .maxlen = sizeof(int),
  701. .mode = 0644,
  702. .proc_handler = &proc_dointvec
  703. },
  704. #ifdef CONFIG_NET_DMA
  705. {
  706. .ctl_name = NET_TCP_DMA_COPYBREAK,
  707. .procname = "tcp_dma_copybreak",
  708. .data = &sysctl_tcp_dma_copybreak,
  709. .maxlen = sizeof(int),
  710. .mode = 0644,
  711. .proc_handler = &proc_dointvec
  712. },
  713. #endif
  714. {
  715. .ctl_name = NET_TCP_SLOW_START_AFTER_IDLE,
  716. .procname = "tcp_slow_start_after_idle",
  717. .data = &sysctl_tcp_slow_start_after_idle,
  718. .maxlen = sizeof(int),
  719. .mode = 0644,
  720. .proc_handler = &proc_dointvec
  721. },
  722. #ifdef CONFIG_NETLABEL
  723. {
  724. .ctl_name = NET_CIPSOV4_CACHE_ENABLE,
  725. .procname = "cipso_cache_enable",
  726. .data = &cipso_v4_cache_enabled,
  727. .maxlen = sizeof(int),
  728. .mode = 0644,
  729. .proc_handler = &proc_dointvec,
  730. },
  731. {
  732. .ctl_name = NET_CIPSOV4_CACHE_BUCKET_SIZE,
  733. .procname = "cipso_cache_bucket_size",
  734. .data = &cipso_v4_cache_bucketsize,
  735. .maxlen = sizeof(int),
  736. .mode = 0644,
  737. .proc_handler = &proc_dointvec,
  738. },
  739. {
  740. .ctl_name = NET_CIPSOV4_RBM_OPTFMT,
  741. .procname = "cipso_rbm_optfmt",
  742. .data = &cipso_v4_rbm_optfmt,
  743. .maxlen = sizeof(int),
  744. .mode = 0644,
  745. .proc_handler = &proc_dointvec,
  746. },
  747. {
  748. .ctl_name = NET_CIPSOV4_RBM_STRICTVALID,
  749. .procname = "cipso_rbm_strictvalid",
  750. .data = &cipso_v4_rbm_strictvalid,
  751. .maxlen = sizeof(int),
  752. .mode = 0644,
  753. .proc_handler = &proc_dointvec,
  754. },
  755. #endif /* CONFIG_NETLABEL */
  756. {
  757. .ctl_name = NET_TCP_AVAIL_CONG_CONTROL,
  758. .procname = "tcp_available_congestion_control",
  759. .maxlen = TCP_CA_BUF_MAX,
  760. .mode = 0444,
  761. .proc_handler = &proc_tcp_available_congestion_control,
  762. },
  763. {
  764. .ctl_name = NET_TCP_ALLOWED_CONG_CONTROL,
  765. .procname = "tcp_allowed_congestion_control",
  766. .maxlen = TCP_CA_BUF_MAX,
  767. .mode = 0644,
  768. .proc_handler = &proc_allowed_congestion_control,
  769. .strategy = &strategy_allowed_congestion_control,
  770. },
  771. { .ctl_name = 0 }
  772. };
  773. #endif /* CONFIG_SYSCTL */
  774. EXPORT_SYMBOL(ipv4_config);