net/tap.c

   1 /*
   2  * QEMU System Emulator
   3  *
   4  * Copyright (c) 2003-2008 Fabrice Bellard
   5  * Copyright (c) 2009 Red Hat, Inc.
   6  *
   7  * Permission is hereby granted, free of charge, to any person obtaining a copy
   8  * of this software and associated documentation files (the "Software"), to deal
   9  * in the Software without restriction, including without limitation the rights
  10  * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  11  * copies of the Software, and to permit persons to whom the Software is
  12  * furnished to do so, subject to the following conditions:
  13  *
  14  * The above copyright notice and this permission notice shall be included in
  15  * all copies or substantial portions of the Software.
  16  *
  17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  18  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  19  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
  20  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  21  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  22  * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
  23  * THE SOFTWARE.
  24  */
  25
  26 #include "qemu/osdep.h"
  27 #include "tap_int.h"
  28
  29
  30 #include <sys/ioctl.h>
  31 #include <sys/wait.h>
  32 #include <sys/socket.h>
  33 #include <net/if.h>
  34
  35 #include "net/eth.h"
  36 #include "net/net.h"
  37 #include "clients.h"
  38 #include "monitor/monitor.h"
  39 #include "sysemu/sysemu.h"
  40 #include "qapi/error.h"
  41 #include "qemu/cutils.h"
  42 #include "qemu/error-report.h"
  43 #include "qemu/main-loop.h"
  44 #include "qemu/sockets.h"
  45
  46 #include "net/tap.h"
  47
  48 #include "net/vhost_net.h"
  49
  50 typedef struct TAPState {
  51     NetClientState nc;
  52     int fd;
  53     char down_script[1024];
  54     char down_script_arg[128];
  55     uint8_t buf[NET_BUFSIZE];
  56     bool read_poll;
  57     bool write_poll;
  58     bool using_vnet_hdr;
  59     bool has_ufo;
  60     bool has_uso;
  61     bool enabled;
  62     VHostNetState *vhost_net;
  63     unsigned host_vnet_hdr_len;
  64     Notifier exit;
  65 } TAPState;
  66
  67 static void launch_script(const char *setup_script, const char *ifname,
  68                           int fd, Error **errp);
  69
  70 static void tap_send(void *opaque);
  71 static void tap_writable(void *opaque);
  72
  73 static void tap_update_fd_handler(TAPState *s)
  74 {
  75     qemu_set_fd_handler(s->fd,
  76                         s->read_poll && s->enabled ? tap_send : NULL,
  77                         s->write_poll && s->enabled ? tap_writable : NULL,
  78                         s);
  79 }
  80
  81 static void tap_read_poll(TAPState *s, bool enable)
  82 {
  83     s->read_poll = enable;
  84     tap_update_fd_handler(s);
  85 }
  86
  87 static void tap_write_poll(TAPState *s, bool enable)
  88 {
  89     s->write_poll = enable;
  90     tap_update_fd_handler(s);
  91 }
  92
  93 static void tap_writable(void *opaque)
  94 {
  95     TAPState *s = opaque;
  96
  97     tap_write_poll(s, false);
  98
  99     qemu_flush_queued_packets(&s->nc);
 100 }
 101
 102 static ssize_t tap_write_packet(TAPState *s, const struct iovec *iov, int iovcnt)
 103 {
 104     ssize_t len;
 105
 106     len = RETRY_ON_EINTR(writev(s->fd, iov, iovcnt));
 107
 108     if (len == -1 && errno == EAGAIN) {
 109         tap_write_poll(s, true);
 110         return 0;
 111     }
 112
 113     return len;
 114 }
 115
 116 static ssize_t tap_receive_iov(NetClientState *nc, const struct iovec *iov,
 117                                int iovcnt)
 118 {
 119     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 120     const struct iovec *iovp = iov;
 121     g_autofree struct iovec *iov_copy = NULL;
 122     struct virtio_net_hdr_mrg_rxbuf hdr = { };
 123
 124     if (s->host_vnet_hdr_len && !s->using_vnet_hdr) {
 125         iov_copy = g_new(struct iovec, iovcnt + 1);
 126         iov_copy[0].iov_base = &hdr;
 127         iov_copy[0].iov_len =  s->host_vnet_hdr_len;
 128         memcpy(&iov_copy[1], iov, iovcnt * sizeof(*iov));
 129         iovp = iov_copy;
 130         iovcnt++;
 131     }
 132
 133     return tap_write_packet(s, iovp, iovcnt);
 134 }
 135
 136 static ssize_t tap_receive_raw(NetClientState *nc, const uint8_t *buf, size_t size)
 137 {
 138     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 139     struct iovec iov[2];
 140     int iovcnt = 0;
 141     struct virtio_net_hdr_mrg_rxbuf hdr = { };
 142
 143     if (s->host_vnet_hdr_len) {
 144         iov[iovcnt].iov_base = &hdr;
 145         iov[iovcnt].iov_len  = s->host_vnet_hdr_len;
 146         iovcnt++;
 147     }
 148
 149     iov[iovcnt].iov_base = (char *)buf;
 150     iov[iovcnt].iov_len  = size;
 151     iovcnt++;
 152
 153     return tap_write_packet(s, iov, iovcnt);
 154 }
 155
 156 static ssize_t tap_receive(NetClientState *nc, const uint8_t *buf, size_t size)
 157 {
 158     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 159     struct iovec iov[1];
 160
 161     if (s->host_vnet_hdr_len && !s->using_vnet_hdr) {
 162         return tap_receive_raw(nc, buf, size);
 163     }
 164
 165     iov[0].iov_base = (char *)buf;
 166     iov[0].iov_len  = size;
 167
 168     return tap_write_packet(s, iov, 1);
 169 }
 170
 171 #ifndef __sun__
 172 ssize_t tap_read_packet(int tapfd, uint8_t *buf, int maxlen)
 173 {
 174     return read(tapfd, buf, maxlen);
 175 }
 176 #endif
 177
 178 static void tap_send_completed(NetClientState *nc, ssize_t len)
 179 {
 180     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 181     tap_read_poll(s, true);
 182 }
 183
 184 static void tap_send(void *opaque)
 185 {
 186     TAPState *s = opaque;
 187     int size;
 188     int packets = 0;
 189
 190     while (true) {
 191         uint8_t *buf = s->buf;
 192         uint8_t min_pkt[ETH_ZLEN];
 193         size_t min_pktsz = sizeof(min_pkt);
 194
 195         size = tap_read_packet(s->fd, s->buf, sizeof(s->buf));
 196         if (size <= 0) {
 197             break;
 198         }
 199
 200         if (s->host_vnet_hdr_len && !s->using_vnet_hdr) {
 201             buf  += s->host_vnet_hdr_len;
 202             size -= s->host_vnet_hdr_len;
 203         }
 204
 205         if (net_peer_needs_padding(&s->nc)) {
 206             if (eth_pad_short_frame(min_pkt, &min_pktsz, buf, size)) {
 207                 buf = min_pkt;
 208                 size = min_pktsz;
 209             }
 210         }
 211
 212         size = qemu_send_packet_async(&s->nc, buf, size, tap_send_completed);
 213         if (size == 0) {
 214             tap_read_poll(s, false);
 215             break;
 216         } else if (size < 0) {
 217             break;
 218         }
 219
 220         /*
 221          * When the host keeps receiving more packets while tap_send() is
 222          * running we can hog the QEMU global mutex.  Limit the number of
 223          * packets that are processed per tap_send() callback to prevent
 224          * stalling the guest.
 225          */
 226         packets++;
 227         if (packets >= 50) {
 228             break;
 229         }
 230     }
 231 }
 232
 233 static bool tap_has_ufo(NetClientState *nc)
 234 {
 235     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 236
 237     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
 238
 239     return s->has_ufo;
 240 }
 241
 242 static bool tap_has_uso(NetClientState *nc)
 243 {
 244     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 245
 246     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
 247
 248     return s->has_uso;
 249 }
 250
 251 static bool tap_has_vnet_hdr(NetClientState *nc)
 252 {
 253     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 254
 255     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
 256
 257     return !!s->host_vnet_hdr_len;
 258 }
 259
 260 static bool tap_has_vnet_hdr_len(NetClientState *nc, int len)
 261 {
 262     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 263
 264     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
 265
 266     return !!tap_probe_vnet_hdr_len(s->fd, len);
 267 }
 268
 269 static int tap_get_vnet_hdr_len(NetClientState *nc)
 270 {
 271     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 272
 273     return s->host_vnet_hdr_len;
 274 }
 275
 276 static void tap_set_vnet_hdr_len(NetClientState *nc, int len)
 277 {
 278     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 279
 280     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
 281     assert(len == sizeof(struct virtio_net_hdr_mrg_rxbuf) ||
 282            len == sizeof(struct virtio_net_hdr) ||
 283            len == sizeof(struct virtio_net_hdr_v1_hash));
 284
 285     tap_fd_set_vnet_hdr_len(s->fd, len);
 286     s->host_vnet_hdr_len = len;
 287 }
 288
 289 static bool tap_get_using_vnet_hdr(NetClientState *nc)
 290 {
 291     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 292
 293     return s->using_vnet_hdr;
 294 }
 295
 296 static void tap_using_vnet_hdr(NetClientState *nc, bool using_vnet_hdr)
 297 {
 298     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 299
 300     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
 301     assert(!!s->host_vnet_hdr_len == using_vnet_hdr);
 302
 303     s->using_vnet_hdr = using_vnet_hdr;
 304 }
 305
 306 static int tap_set_vnet_le(NetClientState *nc, bool is_le)
 307 {
 308     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 309
 310     return tap_fd_set_vnet_le(s->fd, is_le);
 311 }
 312
 313 static int tap_set_vnet_be(NetClientState *nc, bool is_be)
 314 {
 315     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 316
 317     return tap_fd_set_vnet_be(s->fd, is_be);
 318 }
 319
 320 static void tap_set_offload(NetClientState *nc, int csum, int tso4,
 321                      int tso6, int ecn, int ufo, int uso4, int uso6)
 322 {
 323     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 324     if (s->fd < 0) {
 325         return;
 326     }
 327
 328     tap_fd_set_offload(s->fd, csum, tso4, tso6, ecn, ufo, uso4, uso6);
 329 }
 330
 331 static void tap_exit_notify(Notifier *notifier, void *data)
 332 {
 333     TAPState *s = container_of(notifier, TAPState, exit);
 334     Error *err = NULL;
 335
 336     if (s->down_script[0]) {
 337         launch_script(s->down_script, s->down_script_arg, s->fd, &err);
 338         if (err) {
 339             error_report_err(err);
 340         }
 341     }
 342 }
 343
 344 static void tap_cleanup(NetClientState *nc)
 345 {
 346     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 347
 348     if (s->vhost_net) {
 349         vhost_net_cleanup(s->vhost_net);
 350         g_free(s->vhost_net);
 351         s->vhost_net = NULL;
 352     }
 353
 354     qemu_purge_queued_packets(nc);
 355
 356     tap_exit_notify(&s->exit, NULL);
 357     qemu_remove_exit_notifier(&s->exit);
 358
 359     tap_read_poll(s, false);
 360     tap_write_poll(s, false);
 361     close(s->fd);
 362     s->fd = -1;
 363 }
 364
 365 static void tap_poll(NetClientState *nc, bool enable)
 366 {
 367     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 368     tap_read_poll(s, enable);
 369     tap_write_poll(s, enable);
 370 }
 371
 372 static bool tap_set_steering_ebpf(NetClientState *nc, int prog_fd)
 373 {
 374     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 375     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
 376
 377     return tap_fd_set_steering_ebpf(s->fd, prog_fd) == 0;
 378 }
 379
 380 int tap_get_fd(NetClientState *nc)
 381 {
 382     TAPState *s = DO_UPCAST(TAPState, nc, nc);
 383     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
 384     return s->fd;
 385 }
 386
 387 /* fd support */
 388
 389 static NetClientInfo net_tap_info = {
 390     .type = NET_CLIENT_DRIVER_TAP,
 391     .size = sizeof(TAPState),
 392     .receive = tap_receive,
 393     .receive_raw = tap_receive_raw,
 394     .receive_iov = tap_receive_iov,
 395     .poll = tap_poll,
 396     .cleanup = tap_cleanup,
 397     .has_ufo = tap_has_ufo,
 398     .has_uso = tap_has_uso,
 399     .has_vnet_hdr = tap_has_vnet_hdr,
 400     .has_vnet_hdr_len = tap_has_vnet_hdr_len,
 401     .get_using_vnet_hdr = tap_get_using_vnet_hdr,
 402     .using_vnet_hdr = tap_using_vnet_hdr,
 403     .set_offload = tap_set_offload,
 404     .get_vnet_hdr_len = tap_get_vnet_hdr_len,
 405     .set_vnet_hdr_len = tap_set_vnet_hdr_len,
 406     .set_vnet_le = tap_set_vnet_le,
 407     .set_vnet_be = tap_set_vnet_be,
 408     .set_steering_ebpf = tap_set_steering_ebpf,
 409 };
 410
 411 static TAPState *net_tap_fd_init(NetClientState *peer,
 412                                  const char *model,
 413                                  const char *name,
 414                                  int fd,
 415                                  int vnet_hdr)
 416 {
 417     NetClientState *nc;
 418     TAPState *s;
 419
 420     nc = qemu_new_net_client(&net_tap_info, peer, model, name);
 421
 422     s = DO_UPCAST(TAPState, nc, nc);
 423
 424     s->fd = fd;
 425     s->host_vnet_hdr_len = vnet_hdr ? sizeof(struct virtio_net_hdr) : 0;
 426     s->using_vnet_hdr = false;
 427     s->has_ufo = tap_probe_has_ufo(s->fd);
 428     s->has_uso = tap_probe_has_uso(s->fd);
 429     s->enabled = true;
 430     tap_set_offload(&s->nc, 0, 0, 0, 0, 0, 0, 0);
 431     /*
 432      * Make sure host header length is set correctly in tap:
 433      * it might have been modified by another instance of qemu.
 434      */
 435     if (tap_probe_vnet_hdr_len(s->fd, s->host_vnet_hdr_len)) {
 436         tap_fd_set_vnet_hdr_len(s->fd, s->host_vnet_hdr_len);
 437     }
 438     tap_read_poll(s, true);
 439     s->vhost_net = NULL;
 440
 441     s->exit.notify = tap_exit_notify;
 442     qemu_add_exit_notifier(&s->exit);
 443
 444     return s;
 445 }
 446
 447 static void launch_script(const char *setup_script, const char *ifname,
 448                           int fd, Error **errp)
 449 {
 450     int pid, status;
 451     char *args[3];
 452     char **parg;
 453
 454     /* try to launch network script */
 455     pid = fork();
 456     if (pid < 0) {
 457         error_setg_errno(errp, errno, "could not launch network script %s",
 458                          setup_script);
 459         return;
 460     }
 461     if (pid == 0) {
 462         int open_max = sysconf(_SC_OPEN_MAX), i;
 463
 464         for (i = 3; i < open_max; i++) {
 465             if (i != fd) {
 466                 close(i);
 467             }
 468         }
 469         parg = args;
 470         *parg++ = (char *)setup_script;
 471         *parg++ = (char *)ifname;
 472         *parg = NULL;
 473         execv(setup_script, args);
 474         _exit(1);
 475     } else {
 476         while (waitpid(pid, &status, 0) != pid) {
 477             /* loop */
 478         }
 479
 480         if (WIFEXITED(status) && WEXITSTATUS(status) == 0) {
 481             return;
 482         }
 483         error_setg(errp, "network script %s failed with status %d",
 484                    setup_script, status);
 485     }
 486 }
 487
 488 static int recv_fd(int c)
 489 {
 490     int fd;
 491     uint8_t msgbuf[CMSG_SPACE(sizeof(fd))];
 492     struct msghdr msg = {
 493         .msg_control = msgbuf,
 494         .msg_controllen = sizeof(msgbuf),
 495     };
 496     struct cmsghdr *cmsg;
 497     struct iovec iov;
 498     uint8_t req[1];
 499     ssize_t len;
 500
 501     cmsg = CMSG_FIRSTHDR(&msg);
 502     cmsg->cmsg_level = SOL_SOCKET;
 503     cmsg->cmsg_type = SCM_RIGHTS;
 504     cmsg->cmsg_len = CMSG_LEN(sizeof(fd));
 505     msg.msg_controllen = cmsg->cmsg_len;
 506
 507     iov.iov_base = req;
 508     iov.iov_len = sizeof(req);
 509
 510     msg.msg_iov = &iov;
 511     msg.msg_iovlen = 1;
 512
 513     len = recvmsg(c, &msg, 0);
 514     if (len > 0) {
 515         memcpy(&fd, CMSG_DATA(cmsg), sizeof(fd));
 516         return fd;
 517     }
 518
 519     return len;
 520 }
 521
 522 static int net_bridge_run_helper(const char *helper, const char *bridge,
 523                                  Error **errp)
 524 {
 525     sigset_t oldmask, mask;
 526     g_autofree char *default_helper = NULL;
 527     int pid, status;
 528     char *args[5];
 529     char **parg;
 530     int sv[2];
 531
 532     sigemptyset(&mask);
 533     sigaddset(&mask, SIGCHLD);
 534     sigprocmask(SIG_BLOCK, &mask, &oldmask);
 535
 536     if (!helper) {
 537         helper = default_helper = get_relocated_path(DEFAULT_BRIDGE_HELPER);
 538     }
 539
 540     if (socketpair(PF_UNIX, SOCK_STREAM, 0, sv) == -1) {
 541         error_setg_errno(errp, errno, "socketpair() failed");
 542         return -1;
 543     }
 544
 545     /* try to launch bridge helper */
 546     pid = fork();
 547     if (pid < 0) {
 548         error_setg_errno(errp, errno, "Can't fork bridge helper");
 549         return -1;
 550     }
 551     if (pid == 0) {
 552         int open_max = sysconf(_SC_OPEN_MAX), i;
 553         char *fd_buf = NULL;
 554         char *br_buf = NULL;
 555         char *helper_cmd = NULL;
 556
 557         for (i = 3; i < open_max; i++) {
 558             if (i != sv[1]) {
 559                 close(i);
 560             }
 561         }
 562
 563         fd_buf = g_strdup_printf("%s%d", "--fd=", sv[1]);
 564
 565         if (strrchr(helper, ' ') || strrchr(helper, '\t')) {
 566             /* assume helper is a command */
 567
 568             if (strstr(helper, "--br=") == NULL) {
 569                 br_buf = g_strdup_printf("%s%s", "--br=", bridge);
 570             }
 571
 572             helper_cmd = g_strdup_printf("%s %s %s %s", helper,
 573                             "--use-vnet", fd_buf, br_buf ? br_buf : "");
 574
 575             parg = args;
 576             *parg++ = (char *)"sh";
 577             *parg++ = (char *)"-c";
 578             *parg++ = helper_cmd;
 579             *parg++ = NULL;
 580
 581             execv("/bin/sh", args);
 582             g_free(helper_cmd);
 583         } else {
 584             /* assume helper is just the executable path name */
 585
 586             br_buf = g_strdup_printf("%s%s", "--br=", bridge);
 587
 588             parg = args;
 589             *parg++ = (char *)helper;
 590             *parg++ = (char *)"--use-vnet";
 591             *parg++ = fd_buf;
 592             *parg++ = br_buf;
 593             *parg++ = NULL;
 594
 595             execv(helper, args);
 596         }
 597         g_free(fd_buf);
 598         g_free(br_buf);
 599         _exit(1);
 600
 601     } else {
 602         int fd;
 603         int saved_errno;
 604
 605         close(sv[1]);
 606
 607         fd = RETRY_ON_EINTR(recv_fd(sv[0]));
 608         saved_errno = errno;
 609
 610         close(sv[0]);
 611
 612         while (waitpid(pid, &status, 0) != pid) {
 613             /* loop */
 614         }
 615         sigprocmask(SIG_SETMASK, &oldmask, NULL);
 616         if (fd < 0) {
 617             error_setg_errno(errp, saved_errno,
 618                              "failed to recv file descriptor");
 619             return -1;
 620         }
 621         if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) {
 622             error_setg(errp, "bridge helper failed");
 623             return -1;
 624         }
 625         return fd;
 626     }
 627 }
 628
 629 int net_init_bridge(const Netdev *netdev, const char *name,
 630                     NetClientState *peer, Error **errp)
 631 {
 632     const NetdevBridgeOptions *bridge;
 633     const char *helper, *br;
 634     TAPState *s;
 635     int fd, vnet_hdr;
 636
 637     assert(netdev->type == NET_CLIENT_DRIVER_BRIDGE);
 638     bridge = &netdev->u.bridge;
 639     helper = bridge->helper;
 640     br     = bridge->br ?: DEFAULT_BRIDGE_INTERFACE;
 641
 642     fd = net_bridge_run_helper(helper, br, errp);
 643     if (fd == -1) {
 644         return -1;
 645     }
 646
 647     if (!g_unix_set_fd_nonblocking(fd, true, NULL)) {
 648         error_setg_errno(errp, errno, "Failed to set FD nonblocking");
 649         return -1;
 650     }
 651     vnet_hdr = tap_probe_vnet_hdr(fd, errp);
 652     if (vnet_hdr < 0) {
 653         close(fd);
 654         return -1;
 655     }
 656     s = net_tap_fd_init(peer, "bridge", name, fd, vnet_hdr);
 657
 658     qemu_set_info_str(&s->nc, "helper=%s,br=%s", helper, br);
 659
 660     return 0;
 661 }
 662
 663 static int net_tap_init(const NetdevTapOptions *tap, int *vnet_hdr,
 664                         const char *setup_script, char *ifname,
 665                         size_t ifname_sz, int mq_required, Error **errp)
 666 {
 667     Error *err = NULL;
 668     int fd, vnet_hdr_required;
 669
 670     if (tap->has_vnet_hdr) {
 671         *vnet_hdr = tap->vnet_hdr;
 672         vnet_hdr_required = *vnet_hdr;
 673     } else {
 674         *vnet_hdr = 1;
 675         vnet_hdr_required = 0;
 676     }
 677
 678     fd = RETRY_ON_EINTR(tap_open(ifname, ifname_sz, vnet_hdr, vnet_hdr_required,
 679                       mq_required, errp));
 680     if (fd < 0) {
 681         return -1;
 682     }
 683
 684     if (setup_script &&
 685         setup_script[0] != '\0' &&
 686         strcmp(setup_script, "no") != 0) {
 687         launch_script(setup_script, ifname, fd, &err);
 688         if (err) {
 689             error_propagate(errp, err);
 690             close(fd);
 691             return -1;
 692         }
 693     }
 694
 695     return fd;
 696 }
 697
 698 #define MAX_TAP_QUEUES 1024
 699
 700 static void net_init_tap_one(const NetdevTapOptions *tap, NetClientState *peer,
 701                              const char *model, const char *name,
 702                              const char *ifname, const char *script,
 703                              const char *downscript, const char *vhostfdname,
 704                              int vnet_hdr, int fd, Error **errp)
 705 {
 706     Error *err = NULL;
 707     TAPState *s = net_tap_fd_init(peer, model, name, fd, vnet_hdr);
 708     int vhostfd;
 709
 710     tap_set_sndbuf(s->fd, tap, &err);
 711     if (err) {
 712         error_propagate(errp, err);
 713         goto failed;
 714     }
 715
 716     if (tap->fd || tap->fds) {
 717         qemu_set_info_str(&s->nc, "fd=%d", fd);
 718     } else if (tap->helper) {
 719         qemu_set_info_str(&s->nc, "helper=%s", tap->helper);
 720     } else {
 721         qemu_set_info_str(&s->nc, "ifname=%s,script=%s,downscript=%s", ifname,
 722                           script, downscript);
 723
 724         if (strcmp(downscript, "no") != 0) {
 725             snprintf(s->down_script, sizeof(s->down_script), "%s", downscript);
 726             snprintf(s->down_script_arg, sizeof(s->down_script_arg),
 727                      "%s", ifname);
 728         }
 729     }
 730
 731     if (tap->has_vhost ? tap->vhost :
 732         vhostfdname || (tap->has_vhostforce && tap->vhostforce)) {
 733         VhostNetOptions options;
 734
 735         options.backend_type = VHOST_BACKEND_TYPE_KERNEL;
 736         options.net_backend = &s->nc;
 737         if (tap->has_poll_us) {
 738             options.busyloop_timeout = tap->poll_us;
 739         } else {
 740             options.busyloop_timeout = 0;
 741         }
 742
 743         if (vhostfdname) {
 744             vhostfd = monitor_fd_param(monitor_cur(), vhostfdname, &err);
 745             if (vhostfd == -1) {
 746                 if (tap->has_vhostforce && tap->vhostforce) {
 747                     error_propagate(errp, err);
 748                 } else {
 749                     warn_report_err(err);
 750                 }
 751                 goto failed;
 752             }
 753             if (!g_unix_set_fd_nonblocking(vhostfd, true, NULL)) {
 754                 error_setg_errno(errp, errno, "%s: Can't use file descriptor %d",
 755                                  name, fd);
 756                 goto failed;
 757             }
 758         } else {
 759             vhostfd = open("/dev/vhost-net", O_RDWR);
 760             if (vhostfd < 0) {
 761                 if (tap->has_vhostforce && tap->vhostforce) {
 762                     error_setg_errno(errp, errno,
 763                                      "tap: open vhost char device failed");
 764                 } else {
 765                     warn_report("tap: open vhost char device failed: %s",
 766                                 strerror(errno));
 767                 }
 768                 goto failed;
 769             }
 770             if (!g_unix_set_fd_nonblocking(vhostfd, true, NULL)) {
 771                 error_setg_errno(errp, errno, "Failed to set FD nonblocking");
 772                 goto failed;
 773             }
 774         }
 775         options.opaque = (void *)(uintptr_t)vhostfd;
 776         options.nvqs = 2;
 777
 778         s->vhost_net = vhost_net_init(&options);
 779         if (!s->vhost_net) {
 780             if (tap->has_vhostforce && tap->vhostforce) {
 781                 error_setg(errp, VHOST_NET_INIT_FAILED);
 782             } else {
 783                 warn_report(VHOST_NET_INIT_FAILED);
 784             }
 785             goto failed;
 786         }
 787     } else if (vhostfdname) {
 788         error_setg(errp, "vhostfd(s)= is not valid without vhost");
 789         goto failed;
 790     }
 791
 792     return;
 793
 794 failed:
 795     qemu_del_net_client(&s->nc);
 796 }
 797
 798 static int get_fds(char *str, char *fds[], int max)
 799 {
 800     char *ptr = str, *this;
 801     size_t len = strlen(str);
 802     int i = 0;
 803
 804     while (i < max && ptr < str + len) {
 805         this = strchr(ptr, ':');
 806
 807         if (this == NULL) {
 808             fds[i] = g_strdup(ptr);
 809         } else {
 810             fds[i] = g_strndup(ptr, this - ptr);
 811         }
 812
 813         i++;
 814         if (this == NULL) {
 815             break;
 816         } else {
 817             ptr = this + 1;
 818         }
 819     }
 820
 821     return i;
 822 }
 823
 824 int net_init_tap(const Netdev *netdev, const char *name,
 825                  NetClientState *peer, Error **errp)
 826 {
 827     const NetdevTapOptions *tap;
 828     int fd, vnet_hdr = 0, i = 0, queues;
 829     /* for the no-fd, no-helper case */
 830     const char *script;
 831     const char *downscript;
 832     Error *err = NULL;
 833     const char *vhostfdname;
 834     char ifname[128];
 835     int ret = 0;
 836
 837     assert(netdev->type == NET_CLIENT_DRIVER_TAP);
 838     tap = &netdev->u.tap;
 839     queues = tap->has_queues ? tap->queues : 1;
 840     vhostfdname = tap->vhostfd;
 841     script = tap->script;
 842     downscript = tap->downscript;
 843
 844     /* QEMU hubs do not support multiqueue tap, in this case peer is set.
 845      * For -netdev, peer is always NULL. */
 846     if (peer && (tap->has_queues || tap->fds || tap->vhostfds)) {
 847         error_setg(errp, "Multiqueue tap cannot be used with hubs");
 848         return -1;
 849     }
 850
 851     if (tap->fd) {
 852         if (tap->ifname || tap->script || tap->downscript ||
 853             tap->has_vnet_hdr || tap->helper || tap->has_queues ||
 854             tap->fds || tap->vhostfds) {
 855             error_setg(errp, "ifname=, script=, downscript=, vnet_hdr=, "
 856                        "helper=, queues=, fds=, and vhostfds= "
 857                        "are invalid with fd=");
 858             return -1;
 859         }
 860
 861         fd = monitor_fd_param(monitor_cur(), tap->fd, errp);
 862         if (fd == -1) {
 863             return -1;
 864         }
 865
 866         if (!g_unix_set_fd_nonblocking(fd, true, NULL)) {
 867             error_setg_errno(errp, errno, "%s: Can't use file descriptor %d",
 868                              name, fd);
 869             close(fd);
 870             return -1;
 871         }
 872
 873         vnet_hdr = tap_probe_vnet_hdr(fd, errp);
 874         if (vnet_hdr < 0) {
 875             close(fd);
 876             return -1;
 877         }
 878
 879         net_init_tap_one(tap, peer, "tap", name, NULL,
 880                          script, downscript,
 881                          vhostfdname, vnet_hdr, fd, &err);
 882         if (err) {
 883             error_propagate(errp, err);
 884             close(fd);
 885             return -1;
 886         }
 887     } else if (tap->fds) {
 888         char **fds;
 889         char **vhost_fds;
 890         int nfds = 0, nvhosts = 0;
 891
 892         if (tap->ifname || tap->script || tap->downscript ||
 893             tap->has_vnet_hdr || tap->helper || tap->has_queues ||
 894             tap->vhostfd) {
 895             error_setg(errp, "ifname=, script=, downscript=, vnet_hdr=, "
 896                        "helper=, queues=, and vhostfd= "
 897                        "are invalid with fds=");
 898             return -1;
 899         }
 900
 901         fds = g_new0(char *, MAX_TAP_QUEUES);
 902         vhost_fds = g_new0(char *, MAX_TAP_QUEUES);
 903
 904         nfds = get_fds(tap->fds, fds, MAX_TAP_QUEUES);
 905         if (tap->vhostfds) {
 906             nvhosts = get_fds(tap->vhostfds, vhost_fds, MAX_TAP_QUEUES);
 907             if (nfds != nvhosts) {
 908                 error_setg(errp, "The number of fds passed does not match "
 909                            "the number of vhostfds passed");
 910                 ret = -1;
 911                 goto free_fail;
 912             }
 913         }
 914
 915         for (i = 0; i < nfds; i++) {
 916             fd = monitor_fd_param(monitor_cur(), fds[i], errp);
 917             if (fd == -1) {
 918                 ret = -1;
 919                 goto free_fail;
 920             }
 921
 922             ret = g_unix_set_fd_nonblocking(fd, true, NULL);
 923             if (!ret) {
 924                 error_setg_errno(errp, errno, "%s: Can't use file descriptor %d",
 925                                  name, fd);
 926                 goto free_fail;
 927             }
 928
 929             if (i == 0) {
 930                 vnet_hdr = tap_probe_vnet_hdr(fd, errp);
 931                 if (vnet_hdr < 0) {
 932                     ret = -1;
 933                     goto free_fail;
 934                 }
 935             } else if (vnet_hdr != tap_probe_vnet_hdr(fd, NULL)) {
 936                 error_setg(errp,
 937                            "vnet_hdr not consistent across given tap fds");
 938                 ret = -1;
 939                 goto free_fail;
 940             }
 941
 942             net_init_tap_one(tap, peer, "tap", name, ifname,
 943                              script, downscript,
 944                              tap->vhostfds ? vhost_fds[i] : NULL,
 945                              vnet_hdr, fd, &err);
 946             if (err) {
 947                 error_propagate(errp, err);
 948                 ret = -1;
 949                 goto free_fail;
 950             }
 951         }
 952
 953 free_fail:
 954         for (i = 0; i < nvhosts; i++) {
 955             g_free(vhost_fds[i]);
 956         }
 957         for (i = 0; i < nfds; i++) {
 958             g_free(fds[i]);
 959         }
 960         g_free(fds);
 961         g_free(vhost_fds);
 962         return ret;
 963     } else if (tap->helper) {
 964         if (tap->ifname || tap->script || tap->downscript ||
 965             tap->has_vnet_hdr || tap->has_queues || tap->vhostfds) {
 966             error_setg(errp, "ifname=, script=, downscript=, vnet_hdr=, "
 967                        "queues=, and vhostfds= are invalid with helper=");
 968             return -1;
 969         }
 970
 971         fd = net_bridge_run_helper(tap->helper,
 972                                    tap->br ?: DEFAULT_BRIDGE_INTERFACE,
 973                                    errp);
 974         if (fd == -1) {
 975             return -1;
 976         }
 977
 978         if (!g_unix_set_fd_nonblocking(fd, true, NULL)) {
 979             error_setg_errno(errp, errno, "Failed to set FD nonblocking");
 980             return -1;
 981         }
 982         vnet_hdr = tap_probe_vnet_hdr(fd, errp);
 983         if (vnet_hdr < 0) {
 984             close(fd);
 985             return -1;
 986         }
 987
 988         net_init_tap_one(tap, peer, "bridge", name, ifname,
 989                          script, downscript, vhostfdname,
 990                          vnet_hdr, fd, &err);
 991         if (err) {
 992             error_propagate(errp, err);
 993             close(fd);
 994             return -1;
 995         }
 996     } else {
 997         g_autofree char *default_script = NULL;
 998         g_autofree char *default_downscript = NULL;
 999         if (tap->vhostfds) {
1000             error_setg(errp, "vhostfds= is invalid if fds= wasn't specified");
1001             return -1;
1002         }
1003
1004         if (!script) {
1005             script = default_script = get_relocated_path(DEFAULT_NETWORK_SCRIPT);
1006         }
1007         if (!downscript) {
1008             downscript = default_downscript =
1009                                  get_relocated_path(DEFAULT_NETWORK_DOWN_SCRIPT);
1010         }
1011
1012         if (tap->ifname) {
1013             pstrcpy(ifname, sizeof ifname, tap->ifname);
1014         } else {
1015             ifname[0] = '\0';
1016         }
1017
1018         for (i = 0; i < queues; i++) {
1019             fd = net_tap_init(tap, &vnet_hdr, i >= 1 ? "no" : script,
1020                               ifname, sizeof ifname, queues > 1, errp);
1021             if (fd == -1) {
1022                 return -1;
1023             }
1024
1025             if (queues > 1 && i == 0 && !tap->ifname) {
1026                 if (tap_fd_get_ifname(fd, ifname)) {
1027                     error_setg(errp, "Fail to get ifname");
1028                     close(fd);
1029                     return -1;
1030                 }
1031             }
1032
1033             net_init_tap_one(tap, peer, "tap", name, ifname,
1034                              i >= 1 ? "no" : script,
1035                              i >= 1 ? "no" : downscript,
1036                              vhostfdname, vnet_hdr, fd, &err);
1037             if (err) {
1038                 error_propagate(errp, err);
1039                 close(fd);
1040                 return -1;
1041             }
1042         }
1043     }
1044
1045     return 0;
1046 }
1047
1048 VHostNetState *tap_get_vhost_net(NetClientState *nc)
1049 {
1050     TAPState *s = DO_UPCAST(TAPState, nc, nc);
1051     assert(nc->info->type == NET_CLIENT_DRIVER_TAP);
1052     return s->vhost_net;
1053 }
1054
1055 int tap_enable(NetClientState *nc)
1056 {
1057     TAPState *s = DO_UPCAST(TAPState, nc, nc);
1058     int ret;
1059
1060     if (s->enabled) {
1061         return 0;
1062     } else {
1063         ret = tap_fd_enable(s->fd);
1064         if (ret == 0) {
1065             s->enabled = true;
1066             tap_update_fd_handler(s);
1067         }
1068         return ret;
1069     }
1070 }
1071
1072 int tap_disable(NetClientState *nc)
1073 {
1074     TAPState *s = DO_UPCAST(TAPState, nc, nc);
1075     int ret;
1076
1077     if (s->enabled == 0) {
1078         return 0;
1079     } else {
1080         ret = tap_fd_disable(s->fd);
1081         if (ret == 0) {
1082             qemu_purge_queued_packets(nc);
1083             s->enabled = false;
1084             tap_update_fd_handler(s);
1085         }
1086         return ret;
1087     }
1088 }