2 * INET An implementation of the TCP/IP protocol suite for the LINUX
3 * operating system. INET is implemented using the BSD Socket
4 * interface as the means of communication with the user level.
6 * Implementation of the Transmission Control Protocol(TCP).
8 * Version: $Id: tcp_output.c,v 1.146 2002/02/01 22:01:04 davem Exp $
11 * Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
12 * Mark Evans, <evansmp@uhura.aston.ac.uk>
13 * Corey Minyard <wf-rch!minyard@relay.EU.net>
14 * Florian La Roche, <flla@stud.uni-sb.de>
15 * Charles Hedrick, <hedrick@klinzhai.rutgers.edu>
16 * Linus Torvalds, <torvalds@cs.helsinki.fi>
17 * Alan Cox, <gw4pts@gw4pts.ampr.org>
18 * Matthew Dillon, <dillon@apollo.west.oic.com>
19 * Arnt Gulbrandsen, <agulbra@nvg.unit.no>
20 * Jorge Cwik, <jorge@laser.satlink.net>
24 * Changes: Pedro Roque : Retransmit queue handled by TCP.
25 * : Fragmentation on mtu decrease
26 * : Segment collapse on retransmit
29 * Linus Torvalds : send_delayed_ack
30 * David S. Miller : Charge memory using the right skb
31 * during syn/ack processing.
32 * David S. Miller : Output engine completely rewritten.
33 * Andrea Arcangeli: SYNACK carry ts_recent in tsecr.
34 * Cacophonix Gaul : draft-minshall-nagle-01
35 * J Hadi Salim : ECN support
41 #include <linux/compiler.h>
42 #include <linux/module.h>
43 #include <linux/smp_lock.h>
45 /* People can turn this off for buggy TCP's found in printers etc. */
46 int sysctl_tcp_retrans_collapse
= 1;
48 /* This limits the percentage of the congestion window which we
49 * will allow a single TSO frame to consume. Building TSO frames
50 * which are too large can cause TCP streams to be bursty.
52 int sysctl_tcp_tso_win_divisor
= 8;
54 static inline void update_send_head(struct sock
*sk
, struct tcp_sock
*tp
,
57 sk
->sk_send_head
= skb
->next
;
58 if (sk
->sk_send_head
== (struct sk_buff
*)&sk
->sk_write_queue
)
59 sk
->sk_send_head
= NULL
;
60 tp
->snd_nxt
= TCP_SKB_CB(skb
)->end_seq
;
61 tcp_packets_out_inc(sk
, tp
, skb
);
64 /* SND.NXT, if window was not shrunk.
65 * If window has been shrunk, what should we make? It is not clear at all.
66 * Using SND.UNA we will fail to open window, SND.NXT is out of window. :-(
67 * Anything in between SND.UNA...SND.UNA+SND.WND also can be already
68 * invalid. OK, let's make this for now:
70 static inline __u32
tcp_acceptable_seq(struct sock
*sk
, struct tcp_sock
*tp
)
72 if (!before(tp
->snd_una
+tp
->snd_wnd
, tp
->snd_nxt
))
75 return tp
->snd_una
+tp
->snd_wnd
;
78 /* Calculate mss to advertise in SYN segment.
79 * RFC1122, RFC1063, draft-ietf-tcpimpl-pmtud-01 state that:
81 * 1. It is independent of path mtu.
82 * 2. Ideally, it is maximal possible segment size i.e. 65535-40.
83 * 3. For IPv4 it is reasonable to calculate it from maximal MTU of
84 * attached devices, because some buggy hosts are confused by
86 * 4. We do not make 3, we advertise MSS, calculated from first
87 * hop device mtu, but allow to raise it to ip_rt_min_advmss.
88 * This may be overridden via information stored in routing table.
89 * 5. Value 65535 for MSS is valid in IPv6 and means "as large as possible,
90 * probably even Jumbo".
92 static __u16
tcp_advertise_mss(struct sock
*sk
)
94 struct tcp_sock
*tp
= tcp_sk(sk
);
95 struct dst_entry
*dst
= __sk_dst_get(sk
);
98 if (dst
&& dst_metric(dst
, RTAX_ADVMSS
) < mss
) {
99 mss
= dst_metric(dst
, RTAX_ADVMSS
);
106 /* RFC2861. Reset CWND after idle period longer RTO to "restart window".
107 * This is the first part of cwnd validation mechanism. */
108 static void tcp_cwnd_restart(struct tcp_sock
*tp
, struct dst_entry
*dst
)
110 s32 delta
= tcp_time_stamp
- tp
->lsndtime
;
111 u32 restart_cwnd
= tcp_init_cwnd(tp
, dst
);
112 u32 cwnd
= tp
->snd_cwnd
;
114 tcp_ca_event(tp
, CA_EVENT_CWND_RESTART
);
116 tp
->snd_ssthresh
= tcp_current_ssthresh(tp
);
117 restart_cwnd
= min(restart_cwnd
, cwnd
);
119 while ((delta
-= tp
->rto
) > 0 && cwnd
> restart_cwnd
)
121 tp
->snd_cwnd
= max(cwnd
, restart_cwnd
);
122 tp
->snd_cwnd_stamp
= tcp_time_stamp
;
123 tp
->snd_cwnd_used
= 0;
126 static inline void tcp_event_data_sent(struct tcp_sock
*tp
,
127 struct sk_buff
*skb
, struct sock
*sk
)
129 u32 now
= tcp_time_stamp
;
131 if (!tp
->packets_out
&& (s32
)(now
- tp
->lsndtime
) > tp
->rto
)
132 tcp_cwnd_restart(tp
, __sk_dst_get(sk
));
136 /* If it is a reply for ato after last received
137 * packet, enter pingpong mode.
139 if ((u32
)(now
- tp
->ack
.lrcvtime
) < tp
->ack
.ato
)
140 tp
->ack
.pingpong
= 1;
143 static __inline__
void tcp_event_ack_sent(struct sock
*sk
)
145 struct tcp_sock
*tp
= tcp_sk(sk
);
147 tcp_dec_quickack_mode(tp
);
148 tcp_clear_xmit_timer(sk
, TCP_TIME_DACK
);
151 /* Determine a window scaling and initial window to offer.
152 * Based on the assumption that the given amount of space
153 * will be offered. Store the results in the tp structure.
154 * NOTE: for smooth operation initial space offering should
155 * be a multiple of mss if possible. We assume here that mss >= 1.
156 * This MUST be enforced by all callers.
158 void tcp_select_initial_window(int __space
, __u32 mss
,
159 __u32
*rcv_wnd
, __u32
*window_clamp
,
160 int wscale_ok
, __u8
*rcv_wscale
)
162 unsigned int space
= (__space
< 0 ? 0 : __space
);
164 /* If no clamp set the clamp to the max possible scaled window */
165 if (*window_clamp
== 0)
166 (*window_clamp
) = (65535 << 14);
167 space
= min(*window_clamp
, space
);
169 /* Quantize space offering to a multiple of mss if possible. */
171 space
= (space
/ mss
) * mss
;
173 /* NOTE: offering an initial window larger than 32767
174 * will break some buggy TCP stacks. We try to be nice.
175 * If we are not window scaling, then this truncates
176 * our initial window offering to 32k. There should also
177 * be a sysctl option to stop being nice.
179 (*rcv_wnd
) = min(space
, MAX_TCP_WINDOW
);
182 /* Set window scaling on max possible window
183 * See RFC1323 for an explanation of the limit to 14
185 space
= max_t(u32
, sysctl_tcp_rmem
[2], sysctl_rmem_max
);
186 while (space
> 65535 && (*rcv_wscale
) < 14) {
192 /* Set initial window to value enough for senders,
193 * following RFC1414. Senders, not following this RFC,
194 * will be satisfied with 2.
196 if (mss
> (1<<*rcv_wscale
)) {
202 if (*rcv_wnd
> init_cwnd
*mss
)
203 *rcv_wnd
= init_cwnd
*mss
;
206 /* Set the clamp no higher than max representable value */
207 (*window_clamp
) = min(65535U << (*rcv_wscale
), *window_clamp
);
210 /* Chose a new window to advertise, update state in tcp_sock for the
211 * socket, and return result with RFC1323 scaling applied. The return
212 * value can be stuffed directly into th->window for an outgoing
215 static __inline__ u16
tcp_select_window(struct sock
*sk
)
217 struct tcp_sock
*tp
= tcp_sk(sk
);
218 u32 cur_win
= tcp_receive_window(tp
);
219 u32 new_win
= __tcp_select_window(sk
);
221 /* Never shrink the offered window */
222 if(new_win
< cur_win
) {
223 /* Danger Will Robinson!
224 * Don't update rcv_wup/rcv_wnd here or else
225 * we will not be able to advertise a zero
226 * window in time. --DaveM
228 * Relax Will Robinson.
232 tp
->rcv_wnd
= new_win
;
233 tp
->rcv_wup
= tp
->rcv_nxt
;
235 /* Make sure we do not exceed the maximum possible
238 if (!tp
->rx_opt
.rcv_wscale
)
239 new_win
= min(new_win
, MAX_TCP_WINDOW
);
241 new_win
= min(new_win
, (65535U << tp
->rx_opt
.rcv_wscale
));
243 /* RFC1323 scaling applied */
244 new_win
>>= tp
->rx_opt
.rcv_wscale
;
246 /* If we advertise zero window, disable fast path. */
254 /* This routine actually transmits TCP packets queued in by
255 * tcp_do_sendmsg(). This is used by both the initial
256 * transmission and possible later retransmissions.
257 * All SKB's seen here are completely headerless. It is our
258 * job to build the TCP header, and pass the packet down to
259 * IP so it can do the same plus pass the packet off to the
262 * We are working here with either a clone of the original
263 * SKB, or a fresh unique copy made by the retransmit engine.
265 static int tcp_transmit_skb(struct sock
*sk
, struct sk_buff
*skb
)
268 struct inet_sock
*inet
= inet_sk(sk
);
269 struct tcp_sock
*tp
= tcp_sk(sk
);
270 struct tcp_skb_cb
*tcb
= TCP_SKB_CB(skb
);
271 int tcp_header_size
= tp
->tcp_header_len
;
276 BUG_ON(!tcp_skb_pcount(skb
));
278 #define SYSCTL_FLAG_TSTAMPS 0x1
279 #define SYSCTL_FLAG_WSCALE 0x2
280 #define SYSCTL_FLAG_SACK 0x4
282 /* If congestion control is doing timestamping */
283 if (tp
->ca_ops
->rtt_sample
)
284 do_gettimeofday(&skb
->stamp
);
287 if (tcb
->flags
& TCPCB_FLAG_SYN
) {
288 tcp_header_size
= sizeof(struct tcphdr
) + TCPOLEN_MSS
;
289 if(sysctl_tcp_timestamps
) {
290 tcp_header_size
+= TCPOLEN_TSTAMP_ALIGNED
;
291 sysctl_flags
|= SYSCTL_FLAG_TSTAMPS
;
293 if(sysctl_tcp_window_scaling
) {
294 tcp_header_size
+= TCPOLEN_WSCALE_ALIGNED
;
295 sysctl_flags
|= SYSCTL_FLAG_WSCALE
;
297 if(sysctl_tcp_sack
) {
298 sysctl_flags
|= SYSCTL_FLAG_SACK
;
299 if(!(sysctl_flags
& SYSCTL_FLAG_TSTAMPS
))
300 tcp_header_size
+= TCPOLEN_SACKPERM_ALIGNED
;
302 } else if (tp
->rx_opt
.eff_sacks
) {
303 /* A SACK is 2 pad bytes, a 2 byte header, plus
304 * 2 32-bit sequence numbers for each SACK block.
306 tcp_header_size
+= (TCPOLEN_SACK_BASE_ALIGNED
+
307 (tp
->rx_opt
.eff_sacks
* TCPOLEN_SACK_PERBLOCK
));
310 if (tcp_packets_in_flight(tp
) == 0)
311 tcp_ca_event(tp
, CA_EVENT_TX_START
);
313 th
= (struct tcphdr
*) skb_push(skb
, tcp_header_size
);
315 skb_set_owner_w(skb
, sk
);
317 /* Build TCP header and checksum it. */
318 th
->source
= inet
->sport
;
319 th
->dest
= inet
->dport
;
320 th
->seq
= htonl(tcb
->seq
);
321 th
->ack_seq
= htonl(tp
->rcv_nxt
);
322 *(((__u16
*)th
) + 6) = htons(((tcp_header_size
>> 2) << 12) | tcb
->flags
);
323 if (tcb
->flags
& TCPCB_FLAG_SYN
) {
324 /* RFC1323: The window in SYN & SYN/ACK segments
327 th
->window
= htons(tp
->rcv_wnd
);
329 th
->window
= htons(tcp_select_window(sk
));
335 between(tp
->snd_up
, tcb
->seq
+1, tcb
->seq
+0xFFFF)) {
336 th
->urg_ptr
= htons(tp
->snd_up
-tcb
->seq
);
340 if (tcb
->flags
& TCPCB_FLAG_SYN
) {
341 tcp_syn_build_options((__u32
*)(th
+ 1),
342 tcp_advertise_mss(sk
),
343 (sysctl_flags
& SYSCTL_FLAG_TSTAMPS
),
344 (sysctl_flags
& SYSCTL_FLAG_SACK
),
345 (sysctl_flags
& SYSCTL_FLAG_WSCALE
),
346 tp
->rx_opt
.rcv_wscale
,
348 tp
->rx_opt
.ts_recent
);
350 tcp_build_and_update_options((__u32
*)(th
+ 1),
353 TCP_ECN_send(sk
, tp
, skb
, tcp_header_size
);
355 tp
->af_specific
->send_check(sk
, th
, skb
->len
, skb
);
357 if (tcb
->flags
& TCPCB_FLAG_ACK
)
358 tcp_event_ack_sent(sk
);
360 if (skb
->len
!= tcp_header_size
)
361 tcp_event_data_sent(tp
, skb
, sk
);
363 TCP_INC_STATS(TCP_MIB_OUTSEGS
);
365 err
= tp
->af_specific
->queue_xmit(skb
, 0);
371 /* NET_XMIT_CN is special. It does not guarantee,
372 * that this packet is lost. It tells that device
373 * is about to start to drop packets or already
374 * drops some packets of the same priority and
375 * invokes us to send less aggressively.
377 return err
== NET_XMIT_CN
? 0 : err
;
380 #undef SYSCTL_FLAG_TSTAMPS
381 #undef SYSCTL_FLAG_WSCALE
382 #undef SYSCTL_FLAG_SACK
386 /* This routine just queue's the buffer
388 * NOTE: probe0 timer is not checked, do not forget tcp_push_pending_frames,
389 * otherwise socket can stall.
391 static void tcp_queue_skb(struct sock
*sk
, struct sk_buff
*skb
)
393 struct tcp_sock
*tp
= tcp_sk(sk
);
395 /* Advance write_seq and place onto the write_queue. */
396 tp
->write_seq
= TCP_SKB_CB(skb
)->end_seq
;
397 skb_header_release(skb
);
398 __skb_queue_tail(&sk
->sk_write_queue
, skb
);
399 sk_charge_skb(sk
, skb
);
401 /* Queue it, remembering where we must start sending. */
402 if (sk
->sk_send_head
== NULL
)
403 sk
->sk_send_head
= skb
;
406 static inline void tcp_tso_set_push(struct sk_buff
*skb
)
408 /* Force push to be on for any TSO frames to workaround
409 * problems with busted implementations like Mac OS-X that
410 * hold off socket receive wakeups until push is seen.
412 if (tcp_skb_pcount(skb
) > 1)
413 TCP_SKB_CB(skb
)->flags
|= TCPCB_FLAG_PSH
;
416 /* Send _single_ skb sitting at the send head. This function requires
417 * true push pending frames to setup probe timer etc.
419 void tcp_push_one(struct sock
*sk
, unsigned cur_mss
)
421 struct tcp_sock
*tp
= tcp_sk(sk
);
422 struct sk_buff
*skb
= sk
->sk_send_head
;
424 if (tcp_snd_test(sk
, skb
, cur_mss
, TCP_NAGLE_PUSH
)) {
425 /* Send it out now. */
426 TCP_SKB_CB(skb
)->when
= tcp_time_stamp
;
427 tcp_tso_set_push(skb
);
428 if (!tcp_transmit_skb(sk
, skb_clone(skb
, sk
->sk_allocation
))) {
429 sk
->sk_send_head
= NULL
;
430 tp
->snd_nxt
= TCP_SKB_CB(skb
)->end_seq
;
431 tcp_packets_out_inc(sk
, tp
, skb
);
437 void tcp_set_skb_tso_segs(struct sock
*sk
, struct sk_buff
*skb
)
439 struct tcp_sock
*tp
= tcp_sk(sk
);
441 if (skb
->len
<= tp
->mss_cache_std
||
442 !(sk
->sk_route_caps
& NETIF_F_TSO
)) {
443 /* Avoid the costly divide in the normal
446 skb_shinfo(skb
)->tso_segs
= 1;
447 skb_shinfo(skb
)->tso_size
= 0;
451 factor
= skb
->len
+ (tp
->mss_cache_std
- 1);
452 factor
/= tp
->mss_cache_std
;
453 skb_shinfo(skb
)->tso_segs
= factor
;
454 skb_shinfo(skb
)->tso_size
= tp
->mss_cache_std
;
458 /* Function to create two new TCP segments. Shrinks the given segment
459 * to the specified size and appends a new segment with the rest of the
460 * packet to the list. This won't be called frequently, I hope.
461 * Remember, these are still headerless SKBs at this point.
463 static int tcp_fragment(struct sock
*sk
, struct sk_buff
*skb
, u32 len
)
465 struct tcp_sock
*tp
= tcp_sk(sk
);
466 struct sk_buff
*buff
;
470 nsize
= skb_headlen(skb
) - len
;
474 if (skb_cloned(skb
) &&
475 skb_is_nonlinear(skb
) &&
476 pskb_expand_head(skb
, 0, 0, GFP_ATOMIC
))
479 /* Get a new skb... force flag on. */
480 buff
= sk_stream_alloc_skb(sk
, nsize
, GFP_ATOMIC
);
482 return -ENOMEM
; /* We'll just try again later. */
483 sk_charge_skb(sk
, buff
);
485 /* Correct the sequence numbers. */
486 TCP_SKB_CB(buff
)->seq
= TCP_SKB_CB(skb
)->seq
+ len
;
487 TCP_SKB_CB(buff
)->end_seq
= TCP_SKB_CB(skb
)->end_seq
;
488 TCP_SKB_CB(skb
)->end_seq
= TCP_SKB_CB(buff
)->seq
;
490 /* PSH and FIN should only be set in the second packet. */
491 flags
= TCP_SKB_CB(skb
)->flags
;
492 TCP_SKB_CB(skb
)->flags
= flags
& ~(TCPCB_FLAG_FIN
|TCPCB_FLAG_PSH
);
493 TCP_SKB_CB(buff
)->flags
= flags
;
494 TCP_SKB_CB(buff
)->sacked
=
495 (TCP_SKB_CB(skb
)->sacked
&
496 (TCPCB_LOST
| TCPCB_EVER_RETRANS
| TCPCB_AT_TAIL
));
497 TCP_SKB_CB(skb
)->sacked
&= ~TCPCB_AT_TAIL
;
499 if (!skb_shinfo(skb
)->nr_frags
&& skb
->ip_summed
!= CHECKSUM_HW
) {
500 /* Copy and checksum data tail into the new buffer. */
501 buff
->csum
= csum_partial_copy_nocheck(skb
->data
+ len
, skb_put(buff
, nsize
),
506 skb
->csum
= csum_block_sub(skb
->csum
, buff
->csum
, len
);
508 skb
->ip_summed
= CHECKSUM_HW
;
509 skb_split(skb
, buff
, len
);
512 buff
->ip_summed
= skb
->ip_summed
;
514 /* Looks stupid, but our code really uses when of
515 * skbs, which it never sent before. --ANK
517 TCP_SKB_CB(buff
)->when
= TCP_SKB_CB(skb
)->when
;
518 buff
->stamp
= skb
->stamp
;
520 if (TCP_SKB_CB(skb
)->sacked
& TCPCB_LOST
) {
521 tp
->lost_out
-= tcp_skb_pcount(skb
);
522 tp
->left_out
-= tcp_skb_pcount(skb
);
525 /* Fix up tso_factor for both original and new SKB. */
526 tcp_set_skb_tso_segs(sk
, skb
);
527 tcp_set_skb_tso_segs(sk
, buff
);
529 if (TCP_SKB_CB(skb
)->sacked
& TCPCB_LOST
) {
530 tp
->lost_out
+= tcp_skb_pcount(skb
);
531 tp
->left_out
+= tcp_skb_pcount(skb
);
534 if (TCP_SKB_CB(buff
)->sacked
&TCPCB_LOST
) {
535 tp
->lost_out
+= tcp_skb_pcount(buff
);
536 tp
->left_out
+= tcp_skb_pcount(buff
);
539 /* Link BUFF into the send queue. */
540 __skb_append(skb
, buff
);
545 /* This is similar to __pskb_pull_head() (it will go to core/skbuff.c
546 * eventually). The difference is that pulled data not copied, but
547 * immediately discarded.
549 static unsigned char *__pskb_trim_head(struct sk_buff
*skb
, int len
)
555 for (i
=0; i
<skb_shinfo(skb
)->nr_frags
; i
++) {
556 if (skb_shinfo(skb
)->frags
[i
].size
<= eat
) {
557 put_page(skb_shinfo(skb
)->frags
[i
].page
);
558 eat
-= skb_shinfo(skb
)->frags
[i
].size
;
560 skb_shinfo(skb
)->frags
[k
] = skb_shinfo(skb
)->frags
[i
];
562 skb_shinfo(skb
)->frags
[k
].page_offset
+= eat
;
563 skb_shinfo(skb
)->frags
[k
].size
-= eat
;
569 skb_shinfo(skb
)->nr_frags
= k
;
571 skb
->tail
= skb
->data
;
572 skb
->data_len
-= len
;
573 skb
->len
= skb
->data_len
;
577 int tcp_trim_head(struct sock
*sk
, struct sk_buff
*skb
, u32 len
)
579 if (skb_cloned(skb
) &&
580 pskb_expand_head(skb
, 0, 0, GFP_ATOMIC
))
583 if (len
<= skb_headlen(skb
)) {
584 __skb_pull(skb
, len
);
586 if (__pskb_trim_head(skb
, len
-skb_headlen(skb
)) == NULL
)
590 TCP_SKB_CB(skb
)->seq
+= len
;
591 skb
->ip_summed
= CHECKSUM_HW
;
593 skb
->truesize
-= len
;
594 sk
->sk_wmem_queued
-= len
;
595 sk
->sk_forward_alloc
+= len
;
596 sock_set_flag(sk
, SOCK_QUEUE_SHRUNK
);
598 /* Any change of skb->len requires recalculation of tso
601 if (tcp_skb_pcount(skb
) > 1)
602 tcp_set_skb_tso_segs(sk
, skb
);
607 /* This function synchronize snd mss to current pmtu/exthdr set.
609 tp->rx_opt.user_mss is mss set by user by TCP_MAXSEG. It does NOT counts
610 for TCP options, but includes only bare TCP header.
612 tp->rx_opt.mss_clamp is mss negotiated at connection setup.
613 It is minumum of user_mss and mss received with SYN.
614 It also does not include TCP options.
616 tp->pmtu_cookie is last pmtu, seen by this function.
618 tp->mss_cache is current effective sending mss, including
619 all tcp options except for SACKs. It is evaluated,
620 taking into account current pmtu, but never exceeds
621 tp->rx_opt.mss_clamp.
623 NOTE1. rfc1122 clearly states that advertised MSS
624 DOES NOT include either tcp or ip options.
626 NOTE2. tp->pmtu_cookie and tp->mss_cache are READ ONLY outside
627 this function. --ANK (980731)
630 unsigned int tcp_sync_mss(struct sock
*sk
, u32 pmtu
)
632 struct tcp_sock
*tp
= tcp_sk(sk
);
635 /* Calculate base mss without TCP options:
636 It is MMS_S - sizeof(tcphdr) of rfc1122
638 mss_now
= pmtu
- tp
->af_specific
->net_header_len
- sizeof(struct tcphdr
);
640 /* Clamp it (mss_clamp does not include tcp options) */
641 if (mss_now
> tp
->rx_opt
.mss_clamp
)
642 mss_now
= tp
->rx_opt
.mss_clamp
;
644 /* Now subtract optional transport overhead */
645 mss_now
-= tp
->ext_header_len
;
647 /* Then reserve room for full set of TCP options and 8 bytes of data */
651 /* Now subtract TCP options size, not including SACKs */
652 mss_now
-= tp
->tcp_header_len
- sizeof(struct tcphdr
);
654 /* Bound mss with half of window */
655 if (tp
->max_window
&& mss_now
> (tp
->max_window
>>1))
656 mss_now
= max((tp
->max_window
>>1), 68U - tp
->tcp_header_len
);
658 /* And store cached results */
659 tp
->pmtu_cookie
= pmtu
;
660 tp
->mss_cache
= tp
->mss_cache_std
= mss_now
;
665 /* Compute the current effective MSS, taking SACKs and IP options,
666 * and even PMTU discovery events into account.
668 * LARGESEND note: !urg_mode is overkill, only frames up to snd_up
669 * cannot be large. However, taking into account rare use of URG, this
673 unsigned int tcp_current_mss(struct sock
*sk
, int large
)
675 struct tcp_sock
*tp
= tcp_sk(sk
);
676 struct dst_entry
*dst
= __sk_dst_get(sk
);
677 unsigned int do_large
, mss_now
;
679 mss_now
= tp
->mss_cache_std
;
681 u32 mtu
= dst_mtu(dst
);
682 if (mtu
!= tp
->pmtu_cookie
)
683 mss_now
= tcp_sync_mss(sk
, mtu
);
687 (sk
->sk_route_caps
& NETIF_F_TSO
) &&
691 unsigned int large_mss
, factor
, limit
;
693 large_mss
= 65535 - tp
->af_specific
->net_header_len
-
694 tp
->ext_header_len
- tp
->tcp_header_len
;
696 if (tp
->max_window
&& large_mss
> (tp
->max_window
>>1))
697 large_mss
= max((tp
->max_window
>>1),
698 68U - tp
->tcp_header_len
);
700 factor
= large_mss
/ mss_now
;
702 /* Always keep large mss multiple of real mss, but
703 * do not exceed 1/tso_win_divisor of the congestion window
704 * so we can keep the ACK clock ticking and minimize
707 limit
= tp
->snd_cwnd
;
708 if (sysctl_tcp_tso_win_divisor
)
709 limit
/= sysctl_tcp_tso_win_divisor
;
710 limit
= max(1U, limit
);
714 tp
->mss_cache
= mss_now
* factor
;
716 mss_now
= tp
->mss_cache
;
719 if (tp
->rx_opt
.eff_sacks
)
720 mss_now
-= (TCPOLEN_SACK_BASE_ALIGNED
+
721 (tp
->rx_opt
.eff_sacks
* TCPOLEN_SACK_PERBLOCK
));
725 /* This routine writes packets to the network. It advances the
726 * send_head. This happens as incoming acks open up the remote
729 * Returns 1, if no segments are in flight and we have queued segments, but
730 * cannot send anything now because of SWS or another problem.
732 int tcp_write_xmit(struct sock
*sk
, int nonagle
)
734 struct tcp_sock
*tp
= tcp_sk(sk
);
735 unsigned int mss_now
;
737 /* If we are closed, the bytes will have to remain here.
738 * In time closedown will finish, we empty the write queue and all
741 if (sk
->sk_state
!= TCP_CLOSE
) {
745 /* Account for SACKS, we may need to fragment due to this.
746 * It is just like the real MSS changing on us midstream.
747 * We also handle things correctly when the user adds some
748 * IP options mid-stream. Silly to do, but cover it.
750 mss_now
= tcp_current_mss(sk
, 1);
752 while ((skb
= sk
->sk_send_head
) &&
753 tcp_snd_test(sk
, skb
, mss_now
,
754 tcp_skb_is_last(sk
, skb
) ? nonagle
:
756 if (skb
->len
> mss_now
) {
757 if (tcp_fragment(sk
, skb
, mss_now
))
761 TCP_SKB_CB(skb
)->when
= tcp_time_stamp
;
762 tcp_tso_set_push(skb
);
763 if (tcp_transmit_skb(sk
, skb_clone(skb
, GFP_ATOMIC
)))
766 /* Advance the send_head. This one is sent out.
767 * This call will increment packets_out.
769 update_send_head(sk
, tp
, skb
);
771 tcp_minshall_update(tp
, mss_now
, skb
);
776 tcp_cwnd_validate(sk
, tp
);
780 return !tp
->packets_out
&& sk
->sk_send_head
;
785 /* This function returns the amount that we can raise the
786 * usable window based on the following constraints
788 * 1. The window can never be shrunk once it is offered (RFC 793)
789 * 2. We limit memory per socket
792 * "the suggested [SWS] avoidance algorithm for the receiver is to keep
793 * RECV.NEXT + RCV.WIN fixed until:
794 * RCV.BUFF - RCV.USER - RCV.WINDOW >= min(1/2 RCV.BUFF, MSS)"
796 * i.e. don't raise the right edge of the window until you can raise
797 * it at least MSS bytes.
799 * Unfortunately, the recommended algorithm breaks header prediction,
800 * since header prediction assumes th->window stays fixed.
802 * Strictly speaking, keeping th->window fixed violates the receiver
803 * side SWS prevention criteria. The problem is that under this rule
804 * a stream of single byte packets will cause the right side of the
805 * window to always advance by a single byte.
807 * Of course, if the sender implements sender side SWS prevention
808 * then this will not be a problem.
810 * BSD seems to make the following compromise:
812 * If the free space is less than the 1/4 of the maximum
813 * space available and the free space is less than 1/2 mss,
814 * then set the window to 0.
815 * [ Actually, bsd uses MSS and 1/4 of maximal _window_ ]
816 * Otherwise, just prevent the window from shrinking
817 * and from being larger than the largest representable value.
819 * This prevents incremental opening of the window in the regime
820 * where TCP is limited by the speed of the reader side taking
821 * data out of the TCP receive queue. It does nothing about
822 * those cases where the window is constrained on the sender side
823 * because the pipeline is full.
825 * BSD also seems to "accidentally" limit itself to windows that are a
826 * multiple of MSS, at least until the free space gets quite small.
827 * This would appear to be a side effect of the mbuf implementation.
828 * Combining these two algorithms results in the observed behavior
829 * of having a fixed window size at almost all times.
831 * Below we obtain similar behavior by forcing the offered window to
832 * a multiple of the mss when it is feasible to do so.
834 * Note, we don't "adjust" for TIMESTAMP or SACK option bytes.
835 * Regular options like TIMESTAMP are taken into account.
837 u32
__tcp_select_window(struct sock
*sk
)
839 struct tcp_sock
*tp
= tcp_sk(sk
);
840 /* MSS for the peer's data. Previous verions used mss_clamp
841 * here. I don't know if the value based on our guesses
842 * of peer's MSS is better for the performance. It's more correct
843 * but may be worse for the performance because of rcv_mss
844 * fluctuations. --SAW 1998/11/1
846 int mss
= tp
->ack
.rcv_mss
;
847 int free_space
= tcp_space(sk
);
848 int full_space
= min_t(int, tp
->window_clamp
, tcp_full_space(sk
));
851 if (mss
> full_space
)
854 if (free_space
< full_space
/2) {
857 if (tcp_memory_pressure
)
858 tp
->rcv_ssthresh
= min(tp
->rcv_ssthresh
, 4U*tp
->advmss
);
860 if (free_space
< mss
)
864 if (free_space
> tp
->rcv_ssthresh
)
865 free_space
= tp
->rcv_ssthresh
;
867 /* Don't do rounding if we are using window scaling, since the
868 * scaled window will not line up with the MSS boundary anyway.
870 window
= tp
->rcv_wnd
;
871 if (tp
->rx_opt
.rcv_wscale
) {
874 /* Advertise enough space so that it won't get scaled away.
875 * Import case: prevent zero window announcement if
876 * 1<<rcv_wscale > mss.
878 if (((window
>> tp
->rx_opt
.rcv_wscale
) << tp
->rx_opt
.rcv_wscale
) != window
)
879 window
= (((window
>> tp
->rx_opt
.rcv_wscale
) + 1)
880 << tp
->rx_opt
.rcv_wscale
);
882 /* Get the largest window that is a nice multiple of mss.
883 * Window clamp already applied above.
884 * If our current window offering is within 1 mss of the
885 * free space we just keep it. This prevents the divide
886 * and multiply from happening most of the time.
887 * We also don't do any window rounding when the free space
890 if (window
<= free_space
- mss
|| window
> free_space
)
891 window
= (free_space
/mss
)*mss
;
897 /* Attempt to collapse two adjacent SKB's during retransmission. */
898 static void tcp_retrans_try_collapse(struct sock
*sk
, struct sk_buff
*skb
, int mss_now
)
900 struct tcp_sock
*tp
= tcp_sk(sk
);
901 struct sk_buff
*next_skb
= skb
->next
;
903 /* The first test we must make is that neither of these two
904 * SKB's are still referenced by someone else.
906 if (!skb_cloned(skb
) && !skb_cloned(next_skb
)) {
907 int skb_size
= skb
->len
, next_skb_size
= next_skb
->len
;
908 u16 flags
= TCP_SKB_CB(skb
)->flags
;
910 /* Also punt if next skb has been SACK'd. */
911 if(TCP_SKB_CB(next_skb
)->sacked
& TCPCB_SACKED_ACKED
)
914 /* Next skb is out of window. */
915 if (after(TCP_SKB_CB(next_skb
)->end_seq
, tp
->snd_una
+tp
->snd_wnd
))
918 /* Punt if not enough space exists in the first SKB for
919 * the data in the second, or the total combined payload
920 * would exceed the MSS.
922 if ((next_skb_size
> skb_tailroom(skb
)) ||
923 ((skb_size
+ next_skb_size
) > mss_now
))
926 BUG_ON(tcp_skb_pcount(skb
) != 1 ||
927 tcp_skb_pcount(next_skb
) != 1);
929 /* Ok. We will be able to collapse the packet. */
930 __skb_unlink(next_skb
, next_skb
->list
);
932 memcpy(skb_put(skb
, next_skb_size
), next_skb
->data
, next_skb_size
);
934 if (next_skb
->ip_summed
== CHECKSUM_HW
)
935 skb
->ip_summed
= CHECKSUM_HW
;
937 if (skb
->ip_summed
!= CHECKSUM_HW
)
938 skb
->csum
= csum_block_add(skb
->csum
, next_skb
->csum
, skb_size
);
940 /* Update sequence range on original skb. */
941 TCP_SKB_CB(skb
)->end_seq
= TCP_SKB_CB(next_skb
)->end_seq
;
943 /* Merge over control information. */
944 flags
|= TCP_SKB_CB(next_skb
)->flags
; /* This moves PSH/FIN etc. over */
945 TCP_SKB_CB(skb
)->flags
= flags
;
947 /* All done, get rid of second SKB and account for it so
948 * packet counting does not break.
950 TCP_SKB_CB(skb
)->sacked
|= TCP_SKB_CB(next_skb
)->sacked
&(TCPCB_EVER_RETRANS
|TCPCB_AT_TAIL
);
951 if (TCP_SKB_CB(next_skb
)->sacked
&TCPCB_SACKED_RETRANS
)
952 tp
->retrans_out
-= tcp_skb_pcount(next_skb
);
953 if (TCP_SKB_CB(next_skb
)->sacked
&TCPCB_LOST
) {
954 tp
->lost_out
-= tcp_skb_pcount(next_skb
);
955 tp
->left_out
-= tcp_skb_pcount(next_skb
);
957 /* Reno case is special. Sigh... */
958 if (!tp
->rx_opt
.sack_ok
&& tp
->sacked_out
) {
959 tcp_dec_pcount_approx(&tp
->sacked_out
, next_skb
);
960 tp
->left_out
-= tcp_skb_pcount(next_skb
);
963 /* Not quite right: it can be > snd.fack, but
964 * it is better to underestimate fackets.
966 tcp_dec_pcount_approx(&tp
->fackets_out
, next_skb
);
967 tcp_packets_out_dec(tp
, next_skb
);
968 sk_stream_free_skb(sk
, next_skb
);
972 /* Do a simple retransmit without using the backoff mechanisms in
973 * tcp_timer. This is used for path mtu discovery.
974 * The socket is already locked here.
976 void tcp_simple_retransmit(struct sock
*sk
)
978 struct tcp_sock
*tp
= tcp_sk(sk
);
980 unsigned int mss
= tcp_current_mss(sk
, 0);
983 sk_stream_for_retrans_queue(skb
, sk
) {
984 if (skb
->len
> mss
&&
985 !(TCP_SKB_CB(skb
)->sacked
&TCPCB_SACKED_ACKED
)) {
986 if (TCP_SKB_CB(skb
)->sacked
&TCPCB_SACKED_RETRANS
) {
987 TCP_SKB_CB(skb
)->sacked
&= ~TCPCB_SACKED_RETRANS
;
988 tp
->retrans_out
-= tcp_skb_pcount(skb
);
990 if (!(TCP_SKB_CB(skb
)->sacked
&TCPCB_LOST
)) {
991 TCP_SKB_CB(skb
)->sacked
|= TCPCB_LOST
;
992 tp
->lost_out
+= tcp_skb_pcount(skb
);
1001 tcp_sync_left_out(tp
);
1003 /* Don't muck with the congestion window here.
1004 * Reason is that we do not increase amount of _data_
1005 * in network, but units changed and effective
1006 * cwnd/ssthresh really reduced now.
1008 if (tp
->ca_state
!= TCP_CA_Loss
) {
1009 tp
->high_seq
= tp
->snd_nxt
;
1010 tp
->snd_ssthresh
= tcp_current_ssthresh(tp
);
1011 tp
->prior_ssthresh
= 0;
1012 tp
->undo_marker
= 0;
1013 tcp_set_ca_state(tp
, TCP_CA_Loss
);
1015 tcp_xmit_retransmit_queue(sk
);
1018 /* This retransmits one SKB. Policy decisions and retransmit queue
1019 * state updates are done by the caller. Returns non-zero if an
1020 * error occurred which prevented the send.
1022 int tcp_retransmit_skb(struct sock
*sk
, struct sk_buff
*skb
)
1024 struct tcp_sock
*tp
= tcp_sk(sk
);
1025 unsigned int cur_mss
= tcp_current_mss(sk
, 0);
1028 /* Do not sent more than we queued. 1/4 is reserved for possible
1029 * copying overhead: frgagmentation, tunneling, mangling etc.
1031 if (atomic_read(&sk
->sk_wmem_alloc
) >
1032 min(sk
->sk_wmem_queued
+ (sk
->sk_wmem_queued
>> 2), sk
->sk_sndbuf
))
1035 if (before(TCP_SKB_CB(skb
)->seq
, tp
->snd_una
)) {
1036 if (before(TCP_SKB_CB(skb
)->end_seq
, tp
->snd_una
))
1039 if (sk
->sk_route_caps
& NETIF_F_TSO
) {
1040 sk
->sk_route_caps
&= ~NETIF_F_TSO
;
1041 sock_set_flag(sk
, SOCK_NO_LARGESEND
);
1042 tp
->mss_cache
= tp
->mss_cache_std
;
1045 if (tcp_trim_head(sk
, skb
, tp
->snd_una
- TCP_SKB_CB(skb
)->seq
))
1049 /* If receiver has shrunk his window, and skb is out of
1050 * new window, do not retransmit it. The exception is the
1051 * case, when window is shrunk to zero. In this case
1052 * our retransmit serves as a zero window probe.
1054 if (!before(TCP_SKB_CB(skb
)->seq
, tp
->snd_una
+tp
->snd_wnd
)
1055 && TCP_SKB_CB(skb
)->seq
!= tp
->snd_una
)
1058 if (skb
->len
> cur_mss
) {
1059 int old_factor
= tcp_skb_pcount(skb
);
1062 if (tcp_fragment(sk
, skb
, cur_mss
))
1063 return -ENOMEM
; /* We'll try again later. */
1065 /* New SKB created, account for it. */
1066 new_factor
= tcp_skb_pcount(skb
);
1067 tp
->packets_out
-= old_factor
- new_factor
;
1068 tp
->packets_out
+= tcp_skb_pcount(skb
->next
);
1071 /* Collapse two adjacent packets if worthwhile and we can. */
1072 if(!(TCP_SKB_CB(skb
)->flags
& TCPCB_FLAG_SYN
) &&
1073 (skb
->len
< (cur_mss
>> 1)) &&
1074 (skb
->next
!= sk
->sk_send_head
) &&
1075 (skb
->next
!= (struct sk_buff
*)&sk
->sk_write_queue
) &&
1076 (skb_shinfo(skb
)->nr_frags
== 0 && skb_shinfo(skb
->next
)->nr_frags
== 0) &&
1077 (tcp_skb_pcount(skb
) == 1 && tcp_skb_pcount(skb
->next
) == 1) &&
1078 (sysctl_tcp_retrans_collapse
!= 0))
1079 tcp_retrans_try_collapse(sk
, skb
, cur_mss
);
1081 if(tp
->af_specific
->rebuild_header(sk
))
1082 return -EHOSTUNREACH
; /* Routing failure or similar. */
1084 /* Some Solaris stacks overoptimize and ignore the FIN on a
1085 * retransmit when old data is attached. So strip it off
1086 * since it is cheap to do so and saves bytes on the network.
1089 (TCP_SKB_CB(skb
)->flags
& TCPCB_FLAG_FIN
) &&
1090 tp
->snd_una
== (TCP_SKB_CB(skb
)->end_seq
- 1)) {
1091 if (!pskb_trim(skb
, 0)) {
1092 TCP_SKB_CB(skb
)->seq
= TCP_SKB_CB(skb
)->end_seq
- 1;
1093 skb_shinfo(skb
)->tso_segs
= 1;
1094 skb_shinfo(skb
)->tso_size
= 0;
1095 skb
->ip_summed
= CHECKSUM_NONE
;
1100 /* Make a copy, if the first transmission SKB clone we made
1101 * is still in somebody's hands, else make a clone.
1103 TCP_SKB_CB(skb
)->when
= tcp_time_stamp
;
1104 tcp_tso_set_push(skb
);
1106 err
= tcp_transmit_skb(sk
, (skb_cloned(skb
) ?
1107 pskb_copy(skb
, GFP_ATOMIC
):
1108 skb_clone(skb
, GFP_ATOMIC
)));
1111 /* Update global TCP statistics. */
1112 TCP_INC_STATS(TCP_MIB_RETRANSSEGS
);
1114 tp
->total_retrans
++;
1116 #if FASTRETRANS_DEBUG > 0
1117 if (TCP_SKB_CB(skb
)->sacked
&TCPCB_SACKED_RETRANS
) {
1118 if (net_ratelimit())
1119 printk(KERN_DEBUG
"retrans_out leaked.\n");
1122 TCP_SKB_CB(skb
)->sacked
|= TCPCB_RETRANS
;
1123 tp
->retrans_out
+= tcp_skb_pcount(skb
);
1125 /* Save stamp of the first retransmit. */
1126 if (!tp
->retrans_stamp
)
1127 tp
->retrans_stamp
= TCP_SKB_CB(skb
)->when
;
1131 /* snd_nxt is stored to detect loss of retransmitted segment,
1132 * see tcp_input.c tcp_sacktag_write_queue().
1134 TCP_SKB_CB(skb
)->ack_seq
= tp
->snd_nxt
;
1139 /* This gets called after a retransmit timeout, and the initially
1140 * retransmitted data is acknowledged. It tries to continue
1141 * resending the rest of the retransmit queue, until either
1142 * we've sent it all or the congestion window limit is reached.
1143 * If doing SACK, the first ACK which comes back for a timeout
1144 * based retransmit packet might feed us FACK information again.
1145 * If so, we use it to avoid unnecessarily retransmissions.
1147 void tcp_xmit_retransmit_queue(struct sock
*sk
)
1149 struct tcp_sock
*tp
= tcp_sk(sk
);
1150 struct sk_buff
*skb
;
1151 int packet_cnt
= tp
->lost_out
;
1153 /* First pass: retransmit lost packets. */
1155 sk_stream_for_retrans_queue(skb
, sk
) {
1156 __u8 sacked
= TCP_SKB_CB(skb
)->sacked
;
1158 /* Assume this retransmit will generate
1159 * only one packet for congestion window
1160 * calculation purposes. This works because
1161 * tcp_retransmit_skb() will chop up the
1162 * packet to be MSS sized and all the
1163 * packet counting works out.
1165 if (tcp_packets_in_flight(tp
) >= tp
->snd_cwnd
)
1168 if (sacked
&TCPCB_LOST
) {
1169 if (!(sacked
&(TCPCB_SACKED_ACKED
|TCPCB_SACKED_RETRANS
))) {
1170 if (tcp_retransmit_skb(sk
, skb
))
1172 if (tp
->ca_state
!= TCP_CA_Loss
)
1173 NET_INC_STATS_BH(LINUX_MIB_TCPFASTRETRANS
);
1175 NET_INC_STATS_BH(LINUX_MIB_TCPSLOWSTARTRETRANS
);
1178 skb_peek(&sk
->sk_write_queue
))
1179 tcp_reset_xmit_timer(sk
, TCP_TIME_RETRANS
, tp
->rto
);
1182 packet_cnt
-= tcp_skb_pcount(skb
);
1183 if (packet_cnt
<= 0)
1189 /* OK, demanded retransmission is finished. */
1191 /* Forward retransmissions are possible only during Recovery. */
1192 if (tp
->ca_state
!= TCP_CA_Recovery
)
1195 /* No forward retransmissions in Reno are possible. */
1196 if (!tp
->rx_opt
.sack_ok
)
1199 /* Yeah, we have to make difficult choice between forward transmission
1200 * and retransmission... Both ways have their merits...
1202 * For now we do not retransmit anything, while we have some new
1206 if (tcp_may_send_now(sk
, tp
))
1211 sk_stream_for_retrans_queue(skb
, sk
) {
1212 /* Similar to the retransmit loop above we
1213 * can pretend that the retransmitted SKB
1214 * we send out here will be composed of one
1215 * real MSS sized packet because tcp_retransmit_skb()
1216 * will fragment it if necessary.
1218 if (++packet_cnt
> tp
->fackets_out
)
1221 if (tcp_packets_in_flight(tp
) >= tp
->snd_cwnd
)
1224 if (TCP_SKB_CB(skb
)->sacked
& TCPCB_TAGBITS
)
1227 /* Ok, retransmit it. */
1228 if (tcp_retransmit_skb(sk
, skb
))
1231 if (skb
== skb_peek(&sk
->sk_write_queue
))
1232 tcp_reset_xmit_timer(sk
, TCP_TIME_RETRANS
, tp
->rto
);
1234 NET_INC_STATS_BH(LINUX_MIB_TCPFORWARDRETRANS
);
1239 /* Send a fin. The caller locks the socket for us. This cannot be
1240 * allowed to fail queueing a FIN frame under any circumstances.
1242 void tcp_send_fin(struct sock
*sk
)
1244 struct tcp_sock
*tp
= tcp_sk(sk
);
1245 struct sk_buff
*skb
= skb_peek_tail(&sk
->sk_write_queue
);
1248 /* Optimization, tack on the FIN if we have a queue of
1249 * unsent frames. But be careful about outgoing SACKS
1252 mss_now
= tcp_current_mss(sk
, 1);
1254 if (sk
->sk_send_head
!= NULL
) {
1255 TCP_SKB_CB(skb
)->flags
|= TCPCB_FLAG_FIN
;
1256 TCP_SKB_CB(skb
)->end_seq
++;
1259 /* Socket is locked, keep trying until memory is available. */
1261 skb
= alloc_skb(MAX_TCP_HEADER
, GFP_KERNEL
);
1267 /* Reserve space for headers and prepare control bits. */
1268 skb_reserve(skb
, MAX_TCP_HEADER
);
1270 TCP_SKB_CB(skb
)->flags
= (TCPCB_FLAG_ACK
| TCPCB_FLAG_FIN
);
1271 TCP_SKB_CB(skb
)->sacked
= 0;
1272 skb_shinfo(skb
)->tso_segs
= 1;
1273 skb_shinfo(skb
)->tso_size
= 0;
1275 /* FIN eats a sequence byte, write_seq advanced by tcp_queue_skb(). */
1276 TCP_SKB_CB(skb
)->seq
= tp
->write_seq
;
1277 TCP_SKB_CB(skb
)->end_seq
= TCP_SKB_CB(skb
)->seq
+ 1;
1278 tcp_queue_skb(sk
, skb
);
1280 __tcp_push_pending_frames(sk
, tp
, mss_now
, TCP_NAGLE_OFF
);
1283 /* We get here when a process closes a file descriptor (either due to
1284 * an explicit close() or as a byproduct of exit()'ing) and there
1285 * was unread data in the receive queue. This behavior is recommended
1286 * by draft-ietf-tcpimpl-prob-03.txt section 3.10. -DaveM
1288 void tcp_send_active_reset(struct sock
*sk
, int priority
)
1290 struct tcp_sock
*tp
= tcp_sk(sk
);
1291 struct sk_buff
*skb
;
1293 /* NOTE: No TCP options attached and we never retransmit this. */
1294 skb
= alloc_skb(MAX_TCP_HEADER
, priority
);
1296 NET_INC_STATS(LINUX_MIB_TCPABORTFAILED
);
1300 /* Reserve space for headers and prepare control bits. */
1301 skb_reserve(skb
, MAX_TCP_HEADER
);
1303 TCP_SKB_CB(skb
)->flags
= (TCPCB_FLAG_ACK
| TCPCB_FLAG_RST
);
1304 TCP_SKB_CB(skb
)->sacked
= 0;
1305 skb_shinfo(skb
)->tso_segs
= 1;
1306 skb_shinfo(skb
)->tso_size
= 0;
1309 TCP_SKB_CB(skb
)->seq
= tcp_acceptable_seq(sk
, tp
);
1310 TCP_SKB_CB(skb
)->end_seq
= TCP_SKB_CB(skb
)->seq
;
1311 TCP_SKB_CB(skb
)->when
= tcp_time_stamp
;
1312 if (tcp_transmit_skb(sk
, skb
))
1313 NET_INC_STATS(LINUX_MIB_TCPABORTFAILED
);
1316 /* WARNING: This routine must only be called when we have already sent
1317 * a SYN packet that crossed the incoming SYN that caused this routine
1318 * to get called. If this assumption fails then the initial rcv_wnd
1319 * and rcv_wscale values will not be correct.
1321 int tcp_send_synack(struct sock
*sk
)
1323 struct sk_buff
* skb
;
1325 skb
= skb_peek(&sk
->sk_write_queue
);
1326 if (skb
== NULL
|| !(TCP_SKB_CB(skb
)->flags
&TCPCB_FLAG_SYN
)) {
1327 printk(KERN_DEBUG
"tcp_send_synack: wrong queue state\n");
1330 if (!(TCP_SKB_CB(skb
)->flags
&TCPCB_FLAG_ACK
)) {
1331 if (skb_cloned(skb
)) {
1332 struct sk_buff
*nskb
= skb_copy(skb
, GFP_ATOMIC
);
1335 __skb_unlink(skb
, &sk
->sk_write_queue
);
1336 skb_header_release(nskb
);
1337 __skb_queue_head(&sk
->sk_write_queue
, nskb
);
1338 sk_stream_free_skb(sk
, skb
);
1339 sk_charge_skb(sk
, nskb
);
1343 TCP_SKB_CB(skb
)->flags
|= TCPCB_FLAG_ACK
;
1344 TCP_ECN_send_synack(tcp_sk(sk
), skb
);
1346 TCP_SKB_CB(skb
)->when
= tcp_time_stamp
;
1347 return tcp_transmit_skb(sk
, skb_clone(skb
, GFP_ATOMIC
));
1351 * Prepare a SYN-ACK.
1353 struct sk_buff
* tcp_make_synack(struct sock
*sk
, struct dst_entry
*dst
,
1354 struct request_sock
*req
)
1356 struct inet_request_sock
*ireq
= inet_rsk(req
);
1357 struct tcp_sock
*tp
= tcp_sk(sk
);
1359 int tcp_header_size
;
1360 struct sk_buff
*skb
;
1362 skb
= sock_wmalloc(sk
, MAX_TCP_HEADER
+ 15, 1, GFP_ATOMIC
);
1366 /* Reserve space for headers. */
1367 skb_reserve(skb
, MAX_TCP_HEADER
);
1369 skb
->dst
= dst_clone(dst
);
1371 tcp_header_size
= (sizeof(struct tcphdr
) + TCPOLEN_MSS
+
1372 (ireq
->tstamp_ok
? TCPOLEN_TSTAMP_ALIGNED
: 0) +
1373 (ireq
->wscale_ok
? TCPOLEN_WSCALE_ALIGNED
: 0) +
1374 /* SACK_PERM is in the place of NOP NOP of TS */
1375 ((ireq
->sack_ok
&& !ireq
->tstamp_ok
) ? TCPOLEN_SACKPERM_ALIGNED
: 0));
1376 skb
->h
.th
= th
= (struct tcphdr
*) skb_push(skb
, tcp_header_size
);
1378 memset(th
, 0, sizeof(struct tcphdr
));
1381 if (dst
->dev
->features
&NETIF_F_TSO
)
1383 TCP_ECN_make_synack(req
, th
);
1384 th
->source
= inet_sk(sk
)->sport
;
1385 th
->dest
= ireq
->rmt_port
;
1386 TCP_SKB_CB(skb
)->seq
= tcp_rsk(req
)->snt_isn
;
1387 TCP_SKB_CB(skb
)->end_seq
= TCP_SKB_CB(skb
)->seq
+ 1;
1388 TCP_SKB_CB(skb
)->sacked
= 0;
1389 skb_shinfo(skb
)->tso_segs
= 1;
1390 skb_shinfo(skb
)->tso_size
= 0;
1391 th
->seq
= htonl(TCP_SKB_CB(skb
)->seq
);
1392 th
->ack_seq
= htonl(tcp_rsk(req
)->rcv_isn
+ 1);
1393 if (req
->rcv_wnd
== 0) { /* ignored for retransmitted syns */
1395 /* Set this up on the first call only */
1396 req
->window_clamp
= tp
->window_clamp
? : dst_metric(dst
, RTAX_WINDOW
);
1397 /* tcp_full_space because it is guaranteed to be the first packet */
1398 tcp_select_initial_window(tcp_full_space(sk
),
1399 dst_metric(dst
, RTAX_ADVMSS
) - (ireq
->tstamp_ok
? TCPOLEN_TSTAMP_ALIGNED
: 0),
1404 ireq
->rcv_wscale
= rcv_wscale
;
1407 /* RFC1323: The window in SYN & SYN/ACK segments is never scaled. */
1408 th
->window
= htons(req
->rcv_wnd
);
1410 TCP_SKB_CB(skb
)->when
= tcp_time_stamp
;
1411 tcp_syn_build_options((__u32
*)(th
+ 1), dst_metric(dst
, RTAX_ADVMSS
), ireq
->tstamp_ok
,
1412 ireq
->sack_ok
, ireq
->wscale_ok
, ireq
->rcv_wscale
,
1413 TCP_SKB_CB(skb
)->when
,
1417 th
->doff
= (tcp_header_size
>> 2);
1418 TCP_INC_STATS(TCP_MIB_OUTSEGS
);
1423 * Do all connect socket setups that can be done AF independent.
1425 static inline void tcp_connect_init(struct sock
*sk
)
1427 struct dst_entry
*dst
= __sk_dst_get(sk
);
1428 struct tcp_sock
*tp
= tcp_sk(sk
);
1431 /* We'll fix this up when we get a response from the other end.
1432 * See tcp_input.c:tcp_rcv_state_process case TCP_SYN_SENT.
1434 tp
->tcp_header_len
= sizeof(struct tcphdr
) +
1435 (sysctl_tcp_timestamps
? TCPOLEN_TSTAMP_ALIGNED
: 0);
1437 /* If user gave his TCP_MAXSEG, record it to clamp */
1438 if (tp
->rx_opt
.user_mss
)
1439 tp
->rx_opt
.mss_clamp
= tp
->rx_opt
.user_mss
;
1441 tcp_sync_mss(sk
, dst_mtu(dst
));
1443 if (!tp
->window_clamp
)
1444 tp
->window_clamp
= dst_metric(dst
, RTAX_WINDOW
);
1445 tp
->advmss
= dst_metric(dst
, RTAX_ADVMSS
);
1446 tcp_initialize_rcv_mss(sk
);
1448 tcp_select_initial_window(tcp_full_space(sk
),
1449 tp
->advmss
- (tp
->rx_opt
.ts_recent_stamp
? tp
->tcp_header_len
- sizeof(struct tcphdr
) : 0),
1452 sysctl_tcp_window_scaling
,
1455 tp
->rx_opt
.rcv_wscale
= rcv_wscale
;
1456 tp
->rcv_ssthresh
= tp
->rcv_wnd
;
1459 sock_reset_flag(sk
, SOCK_DONE
);
1461 tcp_init_wl(tp
, tp
->write_seq
, 0);
1462 tp
->snd_una
= tp
->write_seq
;
1463 tp
->snd_sml
= tp
->write_seq
;
1468 tp
->rto
= TCP_TIMEOUT_INIT
;
1469 tp
->retransmits
= 0;
1470 tcp_clear_retrans(tp
);
1474 * Build a SYN and send it off.
1476 int tcp_connect(struct sock
*sk
)
1478 struct tcp_sock
*tp
= tcp_sk(sk
);
1479 struct sk_buff
*buff
;
1481 tcp_connect_init(sk
);
1483 buff
= alloc_skb(MAX_TCP_HEADER
+ 15, sk
->sk_allocation
);
1484 if (unlikely(buff
== NULL
))
1487 /* Reserve space for headers. */
1488 skb_reserve(buff
, MAX_TCP_HEADER
);
1490 TCP_SKB_CB(buff
)->flags
= TCPCB_FLAG_SYN
;
1491 TCP_ECN_send_syn(sk
, tp
, buff
);
1492 TCP_SKB_CB(buff
)->sacked
= 0;
1493 skb_shinfo(buff
)->tso_segs
= 1;
1494 skb_shinfo(buff
)->tso_size
= 0;
1496 TCP_SKB_CB(buff
)->seq
= tp
->write_seq
++;
1497 TCP_SKB_CB(buff
)->end_seq
= tp
->write_seq
;
1498 tp
->snd_nxt
= tp
->write_seq
;
1499 tp
->pushed_seq
= tp
->write_seq
;
1502 TCP_SKB_CB(buff
)->when
= tcp_time_stamp
;
1503 tp
->retrans_stamp
= TCP_SKB_CB(buff
)->when
;
1504 skb_header_release(buff
);
1505 __skb_queue_tail(&sk
->sk_write_queue
, buff
);
1506 sk_charge_skb(sk
, buff
);
1507 tp
->packets_out
+= tcp_skb_pcount(buff
);
1508 tcp_transmit_skb(sk
, skb_clone(buff
, GFP_KERNEL
));
1509 TCP_INC_STATS(TCP_MIB_ACTIVEOPENS
);
1511 /* Timer for repeating the SYN until an answer. */
1512 tcp_reset_xmit_timer(sk
, TCP_TIME_RETRANS
, tp
->rto
);
1516 /* Send out a delayed ack, the caller does the policy checking
1517 * to see if we should even be here. See tcp_input.c:tcp_ack_snd_check()
1520 void tcp_send_delayed_ack(struct sock
*sk
)
1522 struct tcp_sock
*tp
= tcp_sk(sk
);
1523 int ato
= tp
->ack
.ato
;
1524 unsigned long timeout
;
1526 if (ato
> TCP_DELACK_MIN
) {
1529 if (tp
->ack
.pingpong
|| (tp
->ack
.pending
&TCP_ACK_PUSHED
))
1530 max_ato
= TCP_DELACK_MAX
;
1532 /* Slow path, intersegment interval is "high". */
1534 /* If some rtt estimate is known, use it to bound delayed ack.
1535 * Do not use tp->rto here, use results of rtt measurements
1539 int rtt
= max(tp
->srtt
>>3, TCP_DELACK_MIN
);
1545 ato
= min(ato
, max_ato
);
1548 /* Stay within the limit we were given */
1549 timeout
= jiffies
+ ato
;
1551 /* Use new timeout only if there wasn't a older one earlier. */
1552 if (tp
->ack
.pending
&TCP_ACK_TIMER
) {
1553 /* If delack timer was blocked or is about to expire,
1556 if (tp
->ack
.blocked
|| time_before_eq(tp
->ack
.timeout
, jiffies
+(ato
>>2))) {
1561 if (!time_before(timeout
, tp
->ack
.timeout
))
1562 timeout
= tp
->ack
.timeout
;
1564 tp
->ack
.pending
|= TCP_ACK_SCHED
|TCP_ACK_TIMER
;
1565 tp
->ack
.timeout
= timeout
;
1566 sk_reset_timer(sk
, &tp
->delack_timer
, timeout
);
1569 /* This routine sends an ack and also updates the window. */
1570 void tcp_send_ack(struct sock
*sk
)
1572 /* If we have been reset, we may not send again. */
1573 if (sk
->sk_state
!= TCP_CLOSE
) {
1574 struct tcp_sock
*tp
= tcp_sk(sk
);
1575 struct sk_buff
*buff
;
1577 /* We are not putting this on the write queue, so
1578 * tcp_transmit_skb() will set the ownership to this
1581 buff
= alloc_skb(MAX_TCP_HEADER
, GFP_ATOMIC
);
1583 tcp_schedule_ack(tp
);
1584 tp
->ack
.ato
= TCP_ATO_MIN
;
1585 tcp_reset_xmit_timer(sk
, TCP_TIME_DACK
, TCP_DELACK_MAX
);
1589 /* Reserve space for headers and prepare control bits. */
1590 skb_reserve(buff
, MAX_TCP_HEADER
);
1592 TCP_SKB_CB(buff
)->flags
= TCPCB_FLAG_ACK
;
1593 TCP_SKB_CB(buff
)->sacked
= 0;
1594 skb_shinfo(buff
)->tso_segs
= 1;
1595 skb_shinfo(buff
)->tso_size
= 0;
1597 /* Send it off, this clears delayed acks for us. */
1598 TCP_SKB_CB(buff
)->seq
= TCP_SKB_CB(buff
)->end_seq
= tcp_acceptable_seq(sk
, tp
);
1599 TCP_SKB_CB(buff
)->when
= tcp_time_stamp
;
1600 tcp_transmit_skb(sk
, buff
);
1604 /* This routine sends a packet with an out of date sequence
1605 * number. It assumes the other end will try to ack it.
1607 * Question: what should we make while urgent mode?
1608 * 4.4BSD forces sending single byte of data. We cannot send
1609 * out of window data, because we have SND.NXT==SND.MAX...
1611 * Current solution: to send TWO zero-length segments in urgent mode:
1612 * one is with SEG.SEQ=SND.UNA to deliver urgent pointer, another is
1613 * out-of-date with SND.UNA-1 to probe window.
1615 static int tcp_xmit_probe_skb(struct sock
*sk
, int urgent
)
1617 struct tcp_sock
*tp
= tcp_sk(sk
);
1618 struct sk_buff
*skb
;
1620 /* We don't queue it, tcp_transmit_skb() sets ownership. */
1621 skb
= alloc_skb(MAX_TCP_HEADER
, GFP_ATOMIC
);
1625 /* Reserve space for headers and set control bits. */
1626 skb_reserve(skb
, MAX_TCP_HEADER
);
1628 TCP_SKB_CB(skb
)->flags
= TCPCB_FLAG_ACK
;
1629 TCP_SKB_CB(skb
)->sacked
= urgent
;
1630 skb_shinfo(skb
)->tso_segs
= 1;
1631 skb_shinfo(skb
)->tso_size
= 0;
1633 /* Use a previous sequence. This should cause the other
1634 * end to send an ack. Don't queue or clone SKB, just
1637 TCP_SKB_CB(skb
)->seq
= urgent
? tp
->snd_una
: tp
->snd_una
- 1;
1638 TCP_SKB_CB(skb
)->end_seq
= TCP_SKB_CB(skb
)->seq
;
1639 TCP_SKB_CB(skb
)->when
= tcp_time_stamp
;
1640 return tcp_transmit_skb(sk
, skb
);
1643 int tcp_write_wakeup(struct sock
*sk
)
1645 if (sk
->sk_state
!= TCP_CLOSE
) {
1646 struct tcp_sock
*tp
= tcp_sk(sk
);
1647 struct sk_buff
*skb
;
1649 if ((skb
= sk
->sk_send_head
) != NULL
&&
1650 before(TCP_SKB_CB(skb
)->seq
, tp
->snd_una
+tp
->snd_wnd
)) {
1652 unsigned int mss
= tcp_current_mss(sk
, 0);
1653 unsigned int seg_size
= tp
->snd_una
+tp
->snd_wnd
-TCP_SKB_CB(skb
)->seq
;
1655 if (before(tp
->pushed_seq
, TCP_SKB_CB(skb
)->end_seq
))
1656 tp
->pushed_seq
= TCP_SKB_CB(skb
)->end_seq
;
1658 /* We are probing the opening of a window
1659 * but the window size is != 0
1660 * must have been a result SWS avoidance ( sender )
1662 if (seg_size
< TCP_SKB_CB(skb
)->end_seq
- TCP_SKB_CB(skb
)->seq
||
1664 seg_size
= min(seg_size
, mss
);
1665 TCP_SKB_CB(skb
)->flags
|= TCPCB_FLAG_PSH
;
1666 if (tcp_fragment(sk
, skb
, seg_size
))
1668 /* SWS override triggered forced fragmentation.
1669 * Disable TSO, the connection is too sick. */
1670 if (sk
->sk_route_caps
& NETIF_F_TSO
) {
1671 sock_set_flag(sk
, SOCK_NO_LARGESEND
);
1672 sk
->sk_route_caps
&= ~NETIF_F_TSO
;
1673 tp
->mss_cache
= tp
->mss_cache_std
;
1675 } else if (!tcp_skb_pcount(skb
))
1676 tcp_set_skb_tso_segs(sk
, skb
);
1678 TCP_SKB_CB(skb
)->flags
|= TCPCB_FLAG_PSH
;
1679 TCP_SKB_CB(skb
)->when
= tcp_time_stamp
;
1680 tcp_tso_set_push(skb
);
1681 err
= tcp_transmit_skb(sk
, skb_clone(skb
, GFP_ATOMIC
));
1683 update_send_head(sk
, tp
, skb
);
1688 between(tp
->snd_up
, tp
->snd_una
+1, tp
->snd_una
+0xFFFF))
1689 tcp_xmit_probe_skb(sk
, TCPCB_URG
);
1690 return tcp_xmit_probe_skb(sk
, 0);
1696 /* A window probe timeout has occurred. If window is not closed send
1697 * a partial packet else a zero probe.
1699 void tcp_send_probe0(struct sock
*sk
)
1701 struct tcp_sock
*tp
= tcp_sk(sk
);
1704 err
= tcp_write_wakeup(sk
);
1706 if (tp
->packets_out
|| !sk
->sk_send_head
) {
1707 /* Cancel probe timer, if it is not required. */
1714 if (tp
->backoff
< sysctl_tcp_retries2
)
1717 tcp_reset_xmit_timer (sk
, TCP_TIME_PROBE0
,
1718 min(tp
->rto
<< tp
->backoff
, TCP_RTO_MAX
));
1720 /* If packet was not sent due to local congestion,
1721 * do not backoff and do not remember probes_out.
1722 * Let local senders to fight for local resources.
1724 * Use accumulated backoff yet.
1726 if (!tp
->probes_out
)
1728 tcp_reset_xmit_timer (sk
, TCP_TIME_PROBE0
,
1729 min(tp
->rto
<< tp
->backoff
, TCP_RESOURCE_PROBE_INTERVAL
));
1733 EXPORT_SYMBOL(tcp_connect
);
1734 EXPORT_SYMBOL(tcp_make_synack
);
1735 EXPORT_SYMBOL(tcp_simple_retransmit
);
1736 EXPORT_SYMBOL(tcp_sync_mss
);