// Copyright (c) Microsoft Corporation // SPDX-License-Identifier: MIT #pragma once #include // This file contains APIs for hooks and helpers that are // exposed by netebpfext.sys for use by eBPF programs. // XDP hook. We use "struct xdp_md" for cross-platform compatibility. typedef struct xdp_md { void* data; /* 0 8 */ void* data_end; /* 8 8 */ uint64_t data_meta; /* 16 8 */ /* size: 12, cachelines: 1, members: 3 */ /* last cacheline: 12 bytes */ } xdp_md_t; typedef enum _xdp_action { XDP_PASS = 1, ///< Allow the packet to pass. XDP_DROP = 2 ///< Drop the packet. } xdp_action_t; /** * @brief Handle an incoming packet as early as possible. * * Program type: \ref EBPF_PROGRAM_TYPE_XDP * * @param[in] context Packet metadata. * @retval XDP_PASS Allow the packet to pass. * @retval XDP_DROP Drop the packet. */ typedef xdp_action_t xdp_hook_t(xdp_md_t* context); // BIND hook typedef struct _bind_md { uint8_t* app_id_start; // 0,8 uint8_t* app_id_end; // 8,8 uint64_t process_id; // 16,8 uint8_t socket_address[16]; // 24,16 uint8_t socket_address_length; // 40,1 uint8_t operation; // 41,1 uint8_t protocol; // 42,1 } bind_md_t; typedef enum _bind_operation { BIND_OPERATION_BIND, ///< Entry to bind. BIND_OPERATION_POST_BIND, ///< After port allocation. BIND_OPERATION_UNBIND, ///< Release port. } bind_operation_t; typedef enum _bind_action { BIND_PERMIT, ///< Permit the bind operation. BIND_DENY, ///< Deny the bind operation. BIND_REDIRECT, ///< Change the bind endpoint. } bind_action_t; /** * @brief Handle a socket bind() request. * * Program type: \ref EBPF_PROGRAM_TYPE_BIND * * @param[in] context Socket metadata. * @retval BIND_PERMIT Permit the bind operation. * @retval BIND_DENY Deny the bind operation. * @retval BIND_REDIRECT Change the bind endpoint. */ typedef bind_action_t bind_hook_t(bind_md_t* context);