bpf.h

Go to the documentation of this file.

// Copyright (c) eBPF for Windows contributors
// SPDX-License-Identifier: MIT
#pragma once
 
 
#include "ebpf_structs.h"
 
#include <stdint.h>
 
#ifdef _MSC_VER
// This file is being included by a user-mode Windows application.
#include "ebpf_api.h"
#include "ebpf_program_types.h"
#define LIBBPF_API
#include "libbpf/src/libbpf_common.h"
#undef LIBBPF_DEPRECATED
#define LIBBPF_DEPRECATED(x)
#else
// This file is being included by an eBPF program.
typedef int32_t s32;
typedef uint8_t u8;
typedef uint32_t u32;
typedef uint64_t u64;
#endif
 
#define __SIZEOF_SIZE_T__ 8    /* only x64 is supported */
#define __SIZEOF_LONG_LONG__ 8 /* only x64 is supported */
 
typedef int32_t __s32;
 
typedef uint8_t __u8;
typedef uint32_t __u32;
typedef uint64_t __u64;
typedef uint32_t pid_t;
 
enum bpf_func_id
{
    BPF_FUNC_ID_UNKNOWN
};
 
enum bpf_stats_type
{
    BPF_STATS_TYPE_UNKNOWN
};
 
// All types below must be ABI compatible with the Linux bpf() syscalls. This means
// that the order, size and alignment of the types must match uapi/linux/bpf.h in
// a tagged release of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/.
// Constants must also match.
//
// Names do not have to match, but try to keep them the same as much as possible.
// In case of conflicts prefix them with "sys_" or "SYS_".
 
enum bpf_cmd_id
{
    BPF_MAP_CREATE,
    BPF_MAP_LOOKUP_ELEM,
    BPF_MAP_UPDATE_ELEM,
    BPF_MAP_DELETE_ELEM,
    BPF_MAP_GET_NEXT_KEY,
    BPF_PROG_LOAD,
    BPF_OBJ_PIN,
    BPF_OBJ_GET,
    BPF_PROG_ATTACH,
    BPF_PROG_DETACH,
    BPF_PROG_TEST_RUN,
    BPF_PROG_GET_NEXT_ID,
    BPF_MAP_GET_NEXT_ID,
    BPF_PROG_GET_FD_BY_ID,
    BPF_MAP_GET_FD_BY_ID,
    BPF_OBJ_GET_INFO_BY_FD,
    BPF_MAP_LOOKUP_AND_DELETE_ELEM = 21,
    BPF_LINK_GET_FD_BY_ID = 30,
    BPF_LINK_GET_NEXT_ID,
    BPF_LINK_DETACH = 34,
    BPF_PROG_BIND_MAP = 35,
    BPF_PROG_RUN = BPF_PROG_TEST_RUN,
};
 
#ifdef _MSC_VER
#pragma warning(push)
#pragma warning(default : 4820) // reject implicit padding
#endif
 
typedef struct
{
    enum bpf_map_type map_type; 
    uint32_t key_size;          
    uint32_t value_size;        
    uint32_t max_entries;       
    uint32_t map_flags;         
    uint32_t inner_map_fd;      
} sys_bpf_map_create_attr_t;
 
typedef struct
{
    uint32_t map_fd; 
    uint32_t _pad0;
    uint64_t key;   
    uint64_t value; 
    uint64_t flags; 
} sys_bpf_map_lookup_attr_t;
 
typedef struct
{
    uint32_t map_fd; 
    uint32_t _pad0;
    uint64_t key; 
} sys_bpf_map_delete_attr_t;
 
typedef struct
{
    uint32_t map_fd; 
    uint32_t _pad0;
    uint64_t key;      
    uint64_t next_key; 
} sys_bpf_map_next_key_attr_t;
 
typedef struct
{
    uint32_t start_id; 
    uint32_t next_id;  
} sys_bpf_map_next_id_attr_t;
 
typedef struct
{
    enum bpf_prog_type prog_type; 
    uint32_t insn_cnt;            
    uint64_t insns;               
    uint64_t license;      
    uint32_t log_level;    
    uint32_t log_size;     
    uint64_t log_buf;      
    uint32_t kern_version; 
    uint32_t prog_flags;   
} sys_bpf_prog_load_attr_t;
 
typedef struct
{
    uint32_t target_fd;               
    uint32_t attach_bpf_fd;           
    enum bpf_attach_type attach_type; 
    uint32_t attach_flags;            
} sys_bpf_prog_attach_attr_t;
 
typedef struct
{
    uint32_t prog_fd;       
    uint32_t retval;        
    uint32_t data_size_in;  
    uint32_t data_size_out; 
    uint64_t data_in;       
    uint64_t data_out;      
    uint32_t repeat;        
    uint32_t duration;      
    uint32_t ctx_size_in;   
    uint32_t ctx_size_out;  
    uint64_t ctx_in;        
    uint64_t ctx_out;       
    uint32_t flags;         
    uint32_t cpu;           
    uint32_t batch_size;    
    uint32_t _pad0;
} sys_bpf_prog_run_attr_t;
 
typedef struct
{
    uint64_t pathname; 
    uint32_t bpf_fd;   
    uint32_t flags;    
} sys_bpf_obj_pin_attr_t;
 
typedef struct
{
    uint32_t bpf_fd; 
    uint32_t info_len;
    uint64_t info; 
} sys_bpf_obj_info_attr_t;
 
typedef struct
{
    uint32_t link_fd; 
} sys_bpf_link_detach_attr_t;
 
typedef struct
{
    uint32_t prog_fd; 
    uint32_t map_fd;  
    uint32_t flags;   
} sys_bpf_prog_bind_map_attr_t;
 
union bpf_attr
{
    // BPF_MAP_CREATE
    sys_bpf_map_create_attr_t map_create; 
 
    // BPF_MAP_LOOKUP_ELEM
    // BPF_MAP_UPDATE_ELEM
    sys_bpf_map_lookup_attr_t map_lookup,
        map_update; 
 
    // BPF_MAP_GET_NEXT_KEY
    sys_bpf_map_next_key_attr_t map_get_next_key; 
 
    // BPF_MAP_DELETE_ELEM
    sys_bpf_map_delete_attr_t map_delete; 
 
    // BPF_PROG_LOAD
    sys_bpf_prog_load_attr_t prog_load; 
 
    // BPF_PROG_ATTACH
    // BPF_PROG_DETACH
    sys_bpf_prog_attach_attr_t prog_attach, prog_detach; 
 
    // BPF_OBJ_PIN
    // BPF_OBJ_GET
    sys_bpf_obj_pin_attr_t obj_pin, obj_get; 
 
    // BPF_PROG_GET_NEXT_ID
    // BPF_MAP_GET_NEXT_ID
    // BPF_LINK_GET_NEXT_ID
    sys_bpf_map_next_id_attr_t map_get_next_id, prog_get_next_id,
        link_get_next_id; 
 
    // BPF_MAP_GET_FD_BY_ID
    uint32_t map_id; 
 
    // BPF_PROG_GET_FD_BY_ID
    uint32_t prog_id; 
 
    // BPF_LINK_GET_FD_BY_ID
    uint32_t link_id; 
 
    // BPF_OBJ_GET_INFO_BY_FD
    sys_bpf_obj_info_attr_t info; 
 
    // BPF_LINK_DETACH
    sys_bpf_link_detach_attr_t link_detach; 
 
    // BPF_PROG_BIND_MAP
    sys_bpf_prog_bind_map_attr_t prog_bind_map; 
 
    // BPF_PROG_TEST_RUN
    sys_bpf_prog_run_attr_t test; 
};
 
#ifdef _MSC_VER
#pragma warning(pop)
#endif
 
int
bpf(int cmd, union bpf_attr* attr, unsigned int size);