lb.programs.common — org.clojars.pgdad/clj-ebpf-lb 0.10.5

Common eBPF program fragments and DSL utilities shared between XDP and TC programs.

add-imm clj

(add-imm dst imm)

Add immediate to register.

add-reg clj

(add-reg dst src)

Add register to register.

AF-INET clj

AF-INET6 clj

assemble-program clj

(assemble-program & fragments)

Assemble a program from instruction fragments. Returns BPF bytecode ready for loading.

BPF-ANY clj

BPF-EXIST clj

BPF-F-PSEUDO-HDR clj

BPF-F-RECOMPUTE-CSUM clj

BPF-FUNC-csum-diff clj

BPF-FUNC-get-prandom-u32 clj

BPF-FUNC-ktime-get-ns clj

BPF-FUNC-l3-csum-replace clj

BPF-FUNC-l4-csum-replace clj

BPF-FUNC-map-delete-elem clj

BPF-FUNC-map-lookup-elem clj

BPF-FUNC-map-update-elem clj

BPF-FUNC-redirect clj

BPF-FUNC-redirect-map clj

BPF-FUNC-ringbuf-discard clj

BPF-FUNC-ringbuf-reserve clj

BPF-FUNC-ringbuf-submit clj

BPF-FUNC-xdp-adjust-head clj

BPF-NOEXIST clj

build-bounds-check clj

(build-bounds-check offset size fail-offset)

Generate instructions to check if accessing [data + offset, data + offset + size) is within packet bounds. Jumps forward by fail-offset if out of bounds.

Assumes: r6 = data start, r7 = data end Uses: r8 as scratch

Delegates to clj-ebpf.net.bounds/build-bounds-check with r6/r7 convention.

build-copy-ipv6-address clj

Generate instructions to copy a 16-byte IPv6 address from one stack location to another. Delegates to clj-ebpf.net.ipv6/build-copy-ipv6-address.

build-get-prandom-u32 clj

Get a pseudo-random 32-bit number. Delegates to clj-ebpf.time/build-get-prandom-u32.

build-ktime-get-ns clj

Get current time in nanoseconds. Delegates to clj-ebpf.time/build-ktime-get-ns.

build-l3-csum-replace clj

(build-l3-csum-replace skb-reg csum-off old-reg new-reg)

Generate incremental IP checksum update. Delegates to clj-ebpf.net.checksum/l3-csum-replace-4.

skb-reg: Register containing skb/xdp_md pointer csum-off: Offset of checksum field in packet old-reg: Old value (in register) new-reg: New value (in register)

build-l4-csum-replace clj

(build-l4-csum-replace skb-reg csum-off old-reg new-reg flags)

Generate incremental L4 (TCP/UDP) checksum update. Delegates to clj-ebpf.net.checksum/l4-csum-replace-4.

skb-reg: Register containing skb/xdp_md pointer csum-off: Offset of checksum field in packet old-reg: Old value (in register) new-reg: New value (in register) flags: BPF_F flags (use BPF-F-PSEUDO-HDR for IP address changes)

build-load-ipv4-unified clj

Generate instructions to load a 4-byte IPv4 address into unified 16-byte format. Delegates to clj-ebpf.net.ipv6/build-load-ipv4-unified.

build-load-ipv6-address clj

Generate instructions to load a 16-byte IPv6 address from packet to stack. Delegates to clj-ebpf.net.ipv6/build-load-ipv6-address.

build-load-ipv6-address-adjusted clj

Generate instructions to load a 16-byte IPv6 address with offset adjustment. Delegates to clj-ebpf.net.ipv6/build-load-ipv6-address-adjusted.

build-load-ipv6-dst clj

Generate instructions to load IPv6 destination address from packet to stack. Delegates to clj-ebpf.net.ipv6/build-load-ipv6-dst.

build-load-ipv6-src clj

Generate instructions to load IPv6 source address from packet to stack. Delegates to clj-ebpf.net.ipv6/build-load-ipv6-src.

build-map-delete clj

Generate instructions for bpf_map_delete_elem. Delegates to clj-ebpf.maps.helpers/build-map-delete.

build-map-lookup clj

Generate instructions for bpf_map_lookup_elem. Delegates to clj-ebpf.maps.helpers/build-map-lookup.

build-map-lookup-or-init clj

Generate instructions for map lookup with initialization if not found. Delegates to clj-ebpf.maps.helpers/build-map-lookup-or-init.

build-map-update clj

Generate instructions for bpf_map_update_elem. Delegates to clj-ebpf.maps.helpers/build-map-update.

build-parse-eth clj

(build-parse-eth pass-offset)

Parse Ethernet header and check for IPv4.

Assumes: r6 = data, r7 = data_end After: jumps forward by pass-offset if not IPv4 Uses: r8 as scratch

build-parse-ip clj

(build-parse-ip pass-offset)

Parse IPv4 header, extract protocol and addresses.

Assumes: r6 = data, r7 = data_end, Ethernet header already validated Stores on stack: stack[-4] = protocol (1 byte as word) stack[-8] = src IP stack[-12] = dst IP stack[-16] = IP header length (bytes) Uses: r8, r9 as scratch

build-parse-ipv6 clj

(build-parse-ipv6 pass-offset)

Parse IPv6 header, extract next header (protocol) and addresses.

IPv6 has a fixed 40-byte header (no options in base header).

Assumes: r6 = data, r7 = data_end, Ethernet header already validated Stores on stack (unified format with 16-byte addresses): stack[-4] = next header (protocol, 1 byte as word) stack[-20] = src IP (16 bytes, at stack[-20..-5]) stack[-36] = dst IP (16 bytes, at stack[-36..-21]) stack[-40] = header length (always 40 for base IPv6) Uses: r8, r9 as scratch

build-parse-l4 clj

(build-parse-l4 pass-offset)

Parse TCP/UDP header to extract ports.

Assumes: stack[-16] = IP header length, r6 = data, r7 = data_end Stores on stack: stack[-20] = src port stack[-24] = dst port Uses: r8, r9

build-parse-l4-ipv6 clj

(build-parse-l4-ipv6 pass-offset)

Parse TCP/UDP header to extract ports for IPv6.

IPv6 has fixed 40-byte header, so L4 is always at ETH_HLEN + 40.

Assumes: r6 = data, r7 = data_end, IPv6 header validated Stores on stack: stack[-44] = src port stack[-48] = dst port Uses: r8, r9

build-random-mod-100 clj

(build-random-mod-100)

Generate random number in range [0, 99]. Delegates to clj-ebpf.time/build-random-mod.

build-rate-limit-check clj

(build-rate-limit-check config-map-fd
                        config-index
                        bucket-map-fd
                        key-stack-off
                        scratch-stack-off
                        skip-label
                        drop-label)

Generate BPF instructions for token bucket rate limit check.

This implements a token bucket algorithm:

1. Load config from config-map at config-index
2. If rate == 0, skip (rate limiting disabled)
3. Load/create bucket from bucket-map using key at key-stack-off
4. Calculate elapsed time since last update
5. Add tokens: new_tokens = old_tokens + elapsed_ns * rate / 1e9
6. Cap at burst
7. If tokens >= 1 (1000 scaled), consume and continue
8. Else jump to drop-label

Stack usage (relative to current-stack-off): offset 0-15: rate limit config (rate, burst) offset 16-31: bucket state (tokens, last_update)

Parameters: config-map-fd: FD for rate_limit_config array map config-index: 0 for source, 1 for backend bucket-map-fd: FD for rate_limit_src or rate_limit_backend LRU map key-stack-off: Stack offset where lookup key is stored scratch-stack-off: Stack offset for scratch space (needs 32 bytes) skip-label: Label to jump to if rate limiting disabled/passed drop-label: Label to jump to if rate limited

build-ringbuf-discard clj

Discard ring buffer reservation. Delegates to clj-ebpf.ringbuf/build-ringbuf-discard.

build-ringbuf-reserve clj

Reserve space in ring buffer. Delegates to clj-ebpf.ringbuf/build-ringbuf-reserve.

build-ringbuf-submit clj

Submit ring buffer entry. Delegates to clj-ebpf.ringbuf/build-ringbuf-submit.

build-store-ipv6-address clj

Generate instructions to store a 16-byte IPv6 address from stack to packet. Delegates to clj-ebpf.net.ipv6/build-store-ipv6-address.

build-zero-bytes clj

Generate instructions to zero a contiguous range of bytes on the stack. Delegates to clj-ebpf.memory/build-zero-bytes.

ETH-HLEN clj

eth-is-ipv4 clj

Check if packet is IPv4 and jump to label if true. Delegates to clj-ebpf.net.ethernet/is-ipv4.

eth-is-ipv6 clj

Check if packet is IPv6 and jump to label if true. Delegates to clj-ebpf.net.ethernet/is-ipv6.

eth-is-not-ipv4 clj

Check if packet is NOT IPv4 and jump to label if true. Delegates to clj-ebpf.net.ethernet/is-not-ipv4.

eth-load-ethertype clj

Load ethertype from Ethernet header (network byte order). Delegates to clj-ebpf.net.ethernet/load-ethertype.

ETH-P-IP clj

ETH-P-IP-BE clj

ETH-P-IPV6 clj

ETH-P-IPV6-BE clj

eth-parse-ethernet clj

Parse Ethernet header with bounds check and load ethertype. Delegates to clj-ebpf.net.ethernet/parse-ethernet.

eth-swap-macs clj

Swap source and destination MAC addresses. Delegates to clj-ebpf.net.ethernet/swap-macs.

flatten-instructions clj

(flatten-instructions & instruction-groups)

Flatten nested instruction vectors. Returns a flat vector of instructions.

FNV1A-64-OFFSET-BASIS-HI clj

FNV1A-64-OFFSET-BASIS-LO clj

FNV1A-64-PRIME-HI clj

FNV1A-64-PRIME-LO clj

HTTPS-PORT-BE clj

IP-HLEN-MIN clj

IPPROTO-ICMP clj

IPPROTO-ICMPV6 clj

IPPROTO-TCP clj

IPPROTO-UDP clj

ipv4-store-daddr clj

Store IPv4 destination address from register to packet. Delegates to clj-ebpf.net.ipv4/store-daddr.

ipv4-store-saddr clj

Store IPv4 source address from register to packet. Delegates to clj-ebpf.net.ipv4/store-saddr.

IPV6-HLEN clj

IPV6-OFF-DST clj

IPV6-OFF-HOP-LIMIT clj

IPV6-OFF-NEXT-HEADER clj

IPV6-OFF-SRC clj

ldx-b clj

(ldx-b dst src off)

Load byte from memory.

ldx-dw clj

(ldx-dw dst src off)

Load double-word (8 bytes) from memory.

ldx-h clj

(ldx-h dst src off)

Load half-word (2 bytes) from memory.

ldx-w clj

(ldx-w dst src off)

Load word (4 bytes) from memory.

map-fd clj

(map-fd m)

Get the raw file descriptor for a map. This is needed when building eBPF programs that reference maps.

MAX-SNI-LENGTH clj

MAX-TLS-EXTENSIONS clj

mov-imm clj

(mov-imm dst imm)

Move immediate value to register.

mov-reg clj

(mov-reg dst src)

Move register to register.

RATE-LIMIT-CONFIG-BACKEND clj

RATE-LIMIT-CONFIG-SRC clj

SKB-OFF-DATA clj

SKB-OFF-DATA-END clj

SKB-OFF-LEN clj

STACK-OFF-ADDR-FAMILY clj

STACK-OFF-CONNTRACK-KEY clj

STACK-OFF-DST-IP clj

STACK-OFF-DST-PORT clj

STACK-OFF-L4-OFFSET clj

STACK-OFF-PROTOCOL clj

STACK-OFF-SRC-IP clj

STACK-OFF-SRC-PORT clj

stx-b clj

(stx-b dst src off)

Store byte to memory. Signature: *(dst + off) = src

stx-dw clj

(stx-dw dst src off)

Store double-word to memory. Signature: *(dst + off) = src

stx-h clj

(stx-h dst src off)

Store half-word to memory. Signature: *(dst + off) = src

stx-w clj

(stx-w dst src off)

Store word to memory. Signature: *(dst + off) = src

sub-imm clj

(sub-imm dst imm)

Subtract immediate from register.

sub-reg clj

(sub-reg dst src)

Subtract register from register.

TC-ACT-OK clj

TC-ACT-REDIRECT clj

TC-ACT-SHOT clj

tc-drop-all clj

(tc-drop-all)

Simple TC program that drops all packets.

tc-pass-all clj

(tc-pass-all)

Simple TC program that passes all packets.

TCP-HLEN-MIN clj

tcp-store-dport clj

Store TCP destination port from register to packet (network byte order). Delegates to clj-ebpf.net.tcp/store-dport.

tcp-store-sport clj

Store TCP source port from register to packet (network byte order). Delegates to clj-ebpf.net.tcp/store-sport.

TLS-CONTENT-TYPE-HANDSHAKE clj

TLS-EXT-SNI clj

TLS-HANDSHAKE-CLIENT-HELLO clj

TLS-HANDSHAKE-HEADER-SIZE clj

TLS-HANDSHAKE-LENGTH-OFF clj

TLS-HANDSHAKE-TYPE-OFF clj

TLS-RECORD-CONTENT-TYPE-OFF clj

TLS-RECORD-HEADER-SIZE clj

TLS-RECORD-LENGTH-OFF clj

TLS-RECORD-VERSION-OFF clj

TLS-SNI-NAME-TYPE-HOSTNAME clj

TOKEN-SCALE clj

UDP-HLEN clj

udp-store-dport clj

Store UDP destination port from register to packet (network byte order). Delegates to clj-ebpf.net.udp/store-dport.

udp-store-sport clj

Store UDP source port from register to packet (network byte order). Delegates to clj-ebpf.net.udp/store-sport.

XDP-ABORTED clj

XDP-DROP clj

xdp-drop-all clj

(xdp-drop-all)

Simple XDP program that drops all packets.

XDP-PASS clj

xdp-pass-all clj

(xdp-pass-all)

Simple XDP program that passes all packets. Useful for testing XDP attachment.

XDP-REDIRECT clj

XDP-TX clj