// Copyright 2018 Amazon.com, Inc. or its affiliates. All Rights Reserved. // SPDX-License-Identifier: Apache-2.0 // // Portions Copyright 2017 The Chromium OS Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the THIRD-PARTY file. use super::net_util::{ build_net_config_space, build_net_config_space_with_mq, CtrlVirtio, NetCtrlEpollHandler, VirtioNetConfig, }; use super::Error as DeviceError; use super::{ ActivateError, ActivateResult, EpollHelper, EpollHelperError, EpollHelperHandler, Queue, VirtioDevice, VirtioDeviceType, VirtioInterruptType, EPOLL_HELPER_EVENT_LAST, }; use crate::VirtioInterrupt; use anyhow::anyhow; use libc::EFD_NONBLOCK; use net_util::{ open_tap, MacAddr, NetCounters, NetQueuePair, OpenTapError, RxVirtio, Tap, TxVirtio, }; use std::collections::HashMap; use std::net::Ipv4Addr; use std::num::Wrapping; use std::os::unix::io::AsRawFd; use std::result; use std::sync::atomic::{AtomicBool, Ordering}; use std::sync::Arc; use std::thread; use std::vec::Vec; use virtio_bindings::bindings::virtio_net::*; use virtio_bindings::bindings::virtio_ring::VIRTIO_RING_F_EVENT_IDX; use vm_memory::{ByteValued, GuestAddressSpace, GuestMemoryAtomic, GuestMemoryMmap}; use vm_migration::{ Migratable, MigratableError, Pausable, Snapshot, SnapshotDataSection, Snapshottable, Transportable, }; use vmm_sys_util::eventfd::EventFd; // The guest has made a buffer available to receive a frame into. pub const RX_QUEUE_EVENT: u16 = EPOLL_HELPER_EVENT_LAST + 1; // The transmit queue has a frame that is ready to send from the guest. pub const TX_QUEUE_EVENT: u16 = EPOLL_HELPER_EVENT_LAST + 2; // A frame is available for reading from the tap device to receive in the guest. pub const RX_TAP_EVENT: u16 = EPOLL_HELPER_EVENT_LAST + 3; #[derive(Debug)] pub enum Error { /// Failed to open taps. OpenTap(OpenTapError), } pub type Result = result::Result; struct NetEpollHandler { net: NetQueuePair, interrupt_cb: Arc, kill_evt: EventFd, pause_evt: EventFd, queue_pair: Vec, queue_evt_pair: Vec, // Always generate interrupts until the driver has signalled to the device. // This mitigates a problem with interrupts from tap events being "lost" upon // a restore as the vCPU thread isn't ready to handle the interrupt. This causes // issues when combined with VIRTIO_RING_F_EVENT_IDX interrupt suppression. driver_awake: bool, } impl NetEpollHandler { fn signal_used_queue(&self, queue: &Queue) -> result::Result<(), DeviceError> { self.interrupt_cb .trigger(&VirtioInterruptType::Queue, Some(queue)) .map_err(|e| { error!("Failed to signal used queue: {:?}", e); DeviceError::FailedSignalingUsedQueue(e) }) } fn handle_rx_event(&mut self) -> result::Result<(), DeviceError> { let queue_evt = &self.queue_evt_pair[0]; if let Err(e) = queue_evt.read() { error!("Failed to get rx queue event: {:?}", e); } if self .net .resume_rx(&mut self.queue_pair[0]) .map_err(DeviceError::NetQueuePair)? || !self.driver_awake { self.signal_used_queue(&self.queue_pair[0])?; info!("Signalling RX queue"); } else { info!("Not signalling RX queue"); } Ok(()) } fn handle_tx_event(&mut self) -> result::Result<(), DeviceError> { let queue_evt = &self.queue_evt_pair[1]; if let Err(e) = queue_evt.read() { error!("Failed to get tx queue event: {:?}", e); } if self .net .process_tx(&mut self.queue_pair[1]) .map_err(DeviceError::NetQueuePair)? || !self.driver_awake { self.signal_used_queue(&self.queue_pair[1])?; info!("Signalling TX queue"); } else { info!("Not signalling TX queue"); } Ok(()) } fn handle_rx_tap_event(&mut self) -> result::Result<(), DeviceError> { if self .net .process_rx_tap(&mut self.queue_pair[0]) .map_err(DeviceError::NetQueuePair)? || !self.driver_awake { self.signal_used_queue(&self.queue_pair[0])?; info!("Signalling RX queue"); } else { info!("Not signalling RX queue"); } Ok(()) } fn run(&mut self, paused: Arc) -> result::Result<(), EpollHelperError> { let mut helper = EpollHelper::new(&self.kill_evt, &self.pause_evt)?; helper.add_event(self.queue_evt_pair[0].as_raw_fd(), RX_QUEUE_EVENT)?; helper.add_event(self.queue_evt_pair[1].as_raw_fd(), TX_QUEUE_EVENT)?; // If there are some already available descriptors on the RX queue, // then we can start the thread while listening onto the TAP. if self.queue_pair[0] .available_descriptors(&self.net.mem.as_ref().unwrap().memory()) .unwrap() { helper.add_event(self.net.tap.as_raw_fd(), RX_TAP_EVENT)?; self.net.rx_tap_listening = true; info!("Listener registered at start"); } // The NetQueuePair needs the epoll fd. self.net.epoll_fd = Some(helper.as_raw_fd()); helper.run(paused, self)?; Ok(()) } } impl EpollHelperHandler for NetEpollHandler { fn handle_event(&mut self, _helper: &mut EpollHelper, event: u16) -> bool { match event { RX_QUEUE_EVENT => { self.driver_awake = true; if let Err(e) = self.handle_rx_event() { error!("Error processing RX queue: {:?}", e); return true; } } TX_QUEUE_EVENT => { self.driver_awake = true; if let Err(e) = self.handle_tx_event() { error!("Error processing TX queue: {:?}", e); return true; } } RX_TAP_EVENT => { if let Err(e) = self.handle_rx_tap_event() { error!("Error processing tap queue: {:?}", e); return true; } } _ => { error!("Unknown event: {}", event); return true; } } false } } pub struct Net { id: String, kill_evt: Option, pause_evt: Option, taps: Option>, avail_features: u64, acked_features: u64, config: VirtioNetConfig, queue_evts: Option>, interrupt_cb: Option>, epoll_threads: Option>>>, ctrl_queue_epoll_thread: Option>>, paused: Arc, queue_size: Vec, counters: NetCounters, } #[derive(Serialize, Deserialize)] pub struct NetState { pub avail_features: u64, pub acked_features: u64, pub config: VirtioNetConfig, pub queue_size: Vec, } impl Net { /// Create a new virtio network device with the given TAP interface. pub fn new_with_tap( id: String, taps: Vec, guest_mac: Option, iommu: bool, num_queues: usize, queue_size: u16, ) -> Result { let mut avail_features = 1 << VIRTIO_NET_F_GUEST_CSUM | 1 << VIRTIO_NET_F_CSUM | 1 << VIRTIO_NET_F_GUEST_TSO4 | 1 << VIRTIO_NET_F_GUEST_UFO | 1 << VIRTIO_NET_F_HOST_TSO4 | 1 << VIRTIO_NET_F_HOST_UFO | 1 << VIRTIO_RING_F_EVENT_IDX | 1 << VIRTIO_F_VERSION_1; if iommu { avail_features |= 1u64 << VIRTIO_F_IOMMU_PLATFORM; } avail_features |= 1 << VIRTIO_NET_F_CTRL_VQ; let queue_num = num_queues + 1; let mut config = VirtioNetConfig::default(); if let Some(mac) = guest_mac { build_net_config_space(&mut config, mac, num_queues, &mut avail_features); } else { build_net_config_space_with_mq(&mut config, num_queues, &mut avail_features); } Ok(Net { id, kill_evt: None, pause_evt: None, taps: Some(taps), avail_features, acked_features: 0u64, config, queue_evts: None, interrupt_cb: None, epoll_threads: None, ctrl_queue_epoll_thread: None, paused: Arc::new(AtomicBool::new(false)), queue_size: vec![queue_size; queue_num], counters: NetCounters::default(), }) } /// Create a new virtio network device with the given IP address and /// netmask. #[allow(clippy::too_many_arguments)] pub fn new( id: String, if_name: Option<&str>, ip_addr: Option, netmask: Option, guest_mac: Option, host_mac: &mut Option, iommu: bool, num_queues: usize, queue_size: u16, ) -> Result { let taps = open_tap(if_name, ip_addr, netmask, host_mac, num_queues / 2) .map_err(Error::OpenTap)?; Self::new_with_tap(id, taps, guest_mac, iommu, num_queues, queue_size) } fn state(&self) -> NetState { NetState { avail_features: self.avail_features, acked_features: self.acked_features, config: self.config, queue_size: self.queue_size.clone(), } } fn set_state(&mut self, state: &NetState) -> Result<()> { self.avail_features = state.avail_features; self.acked_features = state.acked_features; self.config = state.config; self.queue_size = state.queue_size.clone(); Ok(()) } } impl Drop for Net { fn drop(&mut self) { if let Some(kill_evt) = self.kill_evt.take() { // Ignore the result because there is nothing we can do about it. let _ = kill_evt.write(1); } } } impl VirtioDevice for Net { fn device_type(&self) -> u32 { VirtioDeviceType::TYPE_NET as u32 } fn queue_max_sizes(&self) -> &[u16] { &self.queue_size.as_slice() } fn features(&self) -> u64 { self.avail_features } fn ack_features(&mut self, value: u64) { let mut v = value; // Check if the guest is ACK'ing a feature that we didn't claim to have. let unrequested_features = v & !self.avail_features; if unrequested_features != 0 { warn!("Received acknowledge request for unknown feature: {:x}", v); // Don't count these features as acked. v &= !unrequested_features; } self.acked_features |= v; } fn read_config(&self, offset: u64, data: &mut [u8]) { self.read_config_from_slice(self.config.as_slice(), offset, data); } fn activate( &mut self, mem: GuestMemoryAtomic, interrupt_cb: Arc, mut queues: Vec, mut queue_evts: Vec, ) -> ActivateResult { if queues.len() != self.queue_size.len() || queue_evts.len() != self.queue_size.len() { error!( "Cannot perform activate. Expected {} queue(s), got {}", self.queue_size.len(), queues.len() ); return Err(ActivateError::BadActivate); } let (self_kill_evt, kill_evt) = EventFd::new(EFD_NONBLOCK) .and_then(|e| Ok((e.try_clone()?, e))) .map_err(|e| { error!("failed creating kill EventFd pair: {}", e); ActivateError::BadActivate })?; self.kill_evt = Some(self_kill_evt); let (self_pause_evt, pause_evt) = EventFd::new(EFD_NONBLOCK) .and_then(|e| Ok((e.try_clone()?, e))) .map_err(|e| { error!("failed creating pause EventFd pair: {}", e); ActivateError::BadActivate })?; self.pause_evt = Some(self_pause_evt); if let Some(mut taps) = self.taps.clone() { // Save the interrupt EventFD as we need to return it on reset // but clone it to pass into the thread. self.interrupt_cb = Some(interrupt_cb.clone()); let mut tmp_queue_evts: Vec = Vec::new(); for queue_evt in queue_evts.iter() { // Save the queue EventFD as we need to return it on reset // but clone it to pass into the thread. tmp_queue_evts.push(queue_evt.try_clone().map_err(|e| { error!("failed to clone queue EventFd: {}", e); ActivateError::BadActivate })?); } self.queue_evts = Some(tmp_queue_evts); let queue_num = queues.len(); if (self.acked_features & 1 << VIRTIO_NET_F_CTRL_VQ) != 0 && queue_num % 2 != 0 { let cvq_queue = queues.remove(queue_num - 1); let cvq_queue_evt = queue_evts.remove(queue_num - 1); let mut ctrl_handler = NetCtrlEpollHandler { mem: mem.clone(), kill_evt: kill_evt.try_clone().unwrap(), pause_evt: pause_evt.try_clone().unwrap(), ctrl_q: CtrlVirtio::new(cvq_queue, cvq_queue_evt), epoll_fd: 0, }; let paused = self.paused.clone(); thread::Builder::new() .name("virtio_net".to_string()) .spawn(move || ctrl_handler.run_ctrl(paused)) .map(|thread| self.ctrl_queue_epoll_thread = Some(thread)) .map_err(|e| { error!("failed to clone queue EventFd: {}", e); ActivateError::BadActivate })?; } let event_idx = self.acked_features & 1 << VIRTIO_RING_F_EVENT_IDX != 0; let mut epoll_threads = Vec::new(); for _ in 0..taps.len() { let rx = RxVirtio::new(); let tx = TxVirtio::new(); let rx_tap_listening = false; let mut queue_pair = Vec::new(); queue_pair.push(queues.remove(0)); queue_pair.push(queues.remove(0)); queue_pair[0].set_event_idx(event_idx); queue_pair[1].set_event_idx(event_idx); let mut queue_evt_pair = Vec::new(); queue_evt_pair.push(queue_evts.remove(0)); queue_evt_pair.push(queue_evts.remove(0)); let mut handler = NetEpollHandler { net: NetQueuePair { mem: Some(mem.clone()), tap: taps.remove(0), rx, tx, epoll_fd: None, rx_tap_listening, counters: self.counters.clone(), tap_event_id: RX_TAP_EVENT, }, queue_pair, queue_evt_pair, interrupt_cb: interrupt_cb.clone(), kill_evt: kill_evt.try_clone().unwrap(), pause_evt: pause_evt.try_clone().unwrap(), driver_awake: false, }; let paused = self.paused.clone(); thread::Builder::new() .name("virtio_net".to_string()) .spawn(move || handler.run(paused)) .map(|thread| epoll_threads.push(thread)) .map_err(|e| { error!("failed to clone queue EventFd: {}", e); ActivateError::BadActivate })?; } self.epoll_threads = Some(epoll_threads); return Ok(()); } Err(ActivateError::BadActivate) } fn reset(&mut self) -> Option<(Arc, Vec)> { // We first must resume the virtio thread if it was paused. if self.pause_evt.take().is_some() { self.resume().ok()?; } if let Some(kill_evt) = self.kill_evt.take() { // Ignore the result because there is nothing we can do about it. let _ = kill_evt.write(1); } // Return the interrupt and queue EventFDs Some(( self.interrupt_cb.take().unwrap(), self.queue_evts.take().unwrap(), )) } fn counters(&self) -> Option>> { let mut counters = HashMap::new(); counters.insert( "rx_bytes", Wrapping(self.counters.rx_bytes.load(Ordering::Acquire)), ); counters.insert( "rx_frames", Wrapping(self.counters.rx_frames.load(Ordering::Acquire)), ); counters.insert( "tx_bytes", Wrapping(self.counters.tx_bytes.load(Ordering::Acquire)), ); counters.insert( "tx_frames", Wrapping(self.counters.tx_frames.load(Ordering::Acquire)), ); Some(counters) } } virtio_ctrl_q_pausable!(Net); impl Snapshottable for Net { fn id(&self) -> String { self.id.clone() } fn snapshot(&self) -> std::result::Result { let snapshot = serde_json::to_vec(&self.state()).map_err(|e| MigratableError::Snapshot(e.into()))?; let mut net_snapshot = Snapshot::new(self.id.as_str()); net_snapshot.add_data_section(SnapshotDataSection { id: format!("{}-section", self.id), snapshot, }); Ok(net_snapshot) } fn restore(&mut self, snapshot: Snapshot) -> std::result::Result<(), MigratableError> { if let Some(net_section) = snapshot.snapshot_data.get(&format!("{}-section", self.id)) { let net_state = match serde_json::from_slice(&net_section.snapshot) { Ok(state) => state, Err(error) => { return Err(MigratableError::Restore(anyhow!( "Could not deserialize NET {}", error ))) } }; return self.set_state(&net_state).map_err(|e| { MigratableError::Restore(anyhow!("Could not restore NET state {:?}", e)) }); } Err(MigratableError::Restore(anyhow!( "Could not find NET snapshot section" ))) } } impl Transportable for Net {} impl Migratable for Net {}