904d6f5880
This adds parameters to virtio-rng-pci to allow rate limiting the entropy a guest receives. An example command line: $ qemu -device virtio-rng-pci,max-bytes=1024,period=1000 Would limit entropy collection to 1Kb/s. Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
259 lines
6.3 KiB
C
259 lines
6.3 KiB
C
/*
|
|
* A virtio device implementing a hardware random number generator.
|
|
*
|
|
* Copyright 2012 Red Hat, Inc.
|
|
* Copyright 2012 Amit Shah <amit.shah@redhat.com>
|
|
*
|
|
* This work is licensed under the terms of the GNU GPL, version 2 or
|
|
* (at your option) any later version. See the COPYING file in the
|
|
* top-level directory.
|
|
*/
|
|
|
|
#include "iov.h"
|
|
#include "qdev.h"
|
|
#include "virtio.h"
|
|
#include "virtio-rng.h"
|
|
#include "qemu/rng.h"
|
|
|
|
typedef struct VirtIORNG {
|
|
VirtIODevice vdev;
|
|
|
|
DeviceState *qdev;
|
|
|
|
/* Only one vq - guest puts buffer(s) on it when it needs entropy */
|
|
VirtQueue *vq;
|
|
VirtQueueElement elem;
|
|
|
|
/* Config data for the device -- currently only chardev */
|
|
VirtIORNGConf *conf;
|
|
|
|
/* Whether we've popped a vq element into 'elem' above */
|
|
bool popped;
|
|
|
|
RngBackend *rng;
|
|
|
|
/* We purposefully don't migrate this state. The quota will reset on the
|
|
* destination as a result. Rate limiting is host state, not guest state.
|
|
*/
|
|
QEMUTimer *rate_limit_timer;
|
|
int64_t quota_remaining;
|
|
} VirtIORNG;
|
|
|
|
static bool is_guest_ready(VirtIORNG *vrng)
|
|
{
|
|
if (virtio_queue_ready(vrng->vq)
|
|
&& (vrng->vdev.status & VIRTIO_CONFIG_S_DRIVER_OK)) {
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
static size_t pop_an_elem(VirtIORNG *vrng)
|
|
{
|
|
size_t size;
|
|
|
|
if (!vrng->popped && !virtqueue_pop(vrng->vq, &vrng->elem)) {
|
|
return 0;
|
|
}
|
|
vrng->popped = true;
|
|
|
|
size = iov_size(vrng->elem.in_sg, vrng->elem.in_num);
|
|
return size;
|
|
}
|
|
|
|
static void virtio_rng_process(VirtIORNG *vrng);
|
|
|
|
/* Send data from a char device over to the guest */
|
|
static void chr_read(void *opaque, const void *buf, size_t size)
|
|
{
|
|
VirtIORNG *vrng = opaque;
|
|
size_t len;
|
|
int offset;
|
|
|
|
if (!is_guest_ready(vrng)) {
|
|
return;
|
|
}
|
|
|
|
vrng->quota_remaining -= size;
|
|
|
|
offset = 0;
|
|
while (offset < size) {
|
|
if (!pop_an_elem(vrng)) {
|
|
break;
|
|
}
|
|
len = iov_from_buf(vrng->elem.in_sg, vrng->elem.in_num,
|
|
0, buf + offset, size - offset);
|
|
offset += len;
|
|
|
|
virtqueue_push(vrng->vq, &vrng->elem, len);
|
|
vrng->popped = false;
|
|
}
|
|
virtio_notify(&vrng->vdev, vrng->vq);
|
|
|
|
/*
|
|
* Lastly, if we had multiple elems queued by the guest, and we
|
|
* didn't have enough data to fill them all, indicate we want more
|
|
* data.
|
|
*/
|
|
virtio_rng_process(vrng);
|
|
}
|
|
|
|
static void virtio_rng_process(VirtIORNG *vrng)
|
|
{
|
|
ssize_t size;
|
|
|
|
if (!is_guest_ready(vrng)) {
|
|
return;
|
|
}
|
|
|
|
size = pop_an_elem(vrng);
|
|
size = MIN(vrng->quota_remaining, size);
|
|
|
|
if (size > 0) {
|
|
rng_backend_request_entropy(vrng->rng, size, chr_read, vrng);
|
|
}
|
|
}
|
|
|
|
|
|
static void handle_input(VirtIODevice *vdev, VirtQueue *vq)
|
|
{
|
|
VirtIORNG *vrng = DO_UPCAST(VirtIORNG, vdev, vdev);
|
|
virtio_rng_process(vrng);
|
|
}
|
|
|
|
static uint32_t get_features(VirtIODevice *vdev, uint32_t f)
|
|
{
|
|
return f;
|
|
}
|
|
|
|
static void virtio_rng_save(QEMUFile *f, void *opaque)
|
|
{
|
|
VirtIORNG *vrng = opaque;
|
|
|
|
virtio_save(&vrng->vdev, f);
|
|
|
|
qemu_put_byte(f, vrng->popped);
|
|
if (vrng->popped) {
|
|
int i;
|
|
|
|
qemu_put_be32(f, vrng->elem.index);
|
|
|
|
qemu_put_be32(f, vrng->elem.in_num);
|
|
for (i = 0; i < vrng->elem.in_num; i++) {
|
|
qemu_put_be64(f, vrng->elem.in_addr[i]);
|
|
}
|
|
|
|
qemu_put_be32(f, vrng->elem.out_num);
|
|
for (i = 0; i < vrng->elem.out_num; i++) {
|
|
qemu_put_be64(f, vrng->elem.out_addr[i]);
|
|
}
|
|
}
|
|
}
|
|
|
|
static int virtio_rng_load(QEMUFile *f, void *opaque, int version_id)
|
|
{
|
|
VirtIORNG *vrng = opaque;
|
|
|
|
if (version_id != 1) {
|
|
return -EINVAL;
|
|
}
|
|
virtio_load(&vrng->vdev, f);
|
|
|
|
vrng->popped = qemu_get_byte(f);
|
|
if (vrng->popped) {
|
|
int i;
|
|
|
|
vrng->elem.index = qemu_get_be32(f);
|
|
|
|
vrng->elem.in_num = qemu_get_be32(f);
|
|
g_assert(vrng->elem.in_num < VIRTQUEUE_MAX_SIZE);
|
|
for (i = 0; i < vrng->elem.in_num; i++) {
|
|
vrng->elem.in_addr[i] = qemu_get_be64(f);
|
|
}
|
|
|
|
vrng->elem.out_num = qemu_get_be32(f);
|
|
g_assert(vrng->elem.out_num < VIRTQUEUE_MAX_SIZE);
|
|
for (i = 0; i < vrng->elem.out_num; i++) {
|
|
vrng->elem.out_addr[i] = qemu_get_be64(f);
|
|
}
|
|
|
|
virtqueue_map_sg(vrng->elem.in_sg, vrng->elem.in_addr,
|
|
vrng->elem.in_num, 1);
|
|
virtqueue_map_sg(vrng->elem.out_sg, vrng->elem.out_addr,
|
|
vrng->elem.out_num, 0);
|
|
}
|
|
|
|
/* We may have an element ready but couldn't process it due to a quota
|
|
limit. Make sure to try again after live migration when the quota may
|
|
have been reset.
|
|
*/
|
|
virtio_rng_process(vrng);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void check_rate_limit(void *opaque)
|
|
{
|
|
VirtIORNG *s = opaque;
|
|
|
|
s->quota_remaining = s->conf->max_bytes;
|
|
virtio_rng_process(s);
|
|
qemu_mod_timer(s->rate_limit_timer,
|
|
qemu_get_clock_ms(vm_clock) + s->conf->period_ms);
|
|
}
|
|
|
|
|
|
VirtIODevice *virtio_rng_init(DeviceState *dev, VirtIORNGConf *conf)
|
|
{
|
|
VirtIORNG *vrng;
|
|
VirtIODevice *vdev;
|
|
Error *local_err = NULL;
|
|
|
|
vdev = virtio_common_init("virtio-rng", VIRTIO_ID_RNG, 0,
|
|
sizeof(VirtIORNG));
|
|
|
|
vrng = DO_UPCAST(VirtIORNG, vdev, vdev);
|
|
|
|
vrng->rng = conf->rng;
|
|
if (vrng->rng == NULL) {
|
|
qerror_report(QERR_INVALID_PARAMETER_VALUE, "rng", "a valid object");
|
|
return NULL;
|
|
}
|
|
|
|
rng_backend_open(vrng->rng, &local_err);
|
|
if (local_err) {
|
|
qerror_report_err(local_err);
|
|
error_free(local_err);
|
|
return NULL;
|
|
}
|
|
|
|
vrng->vq = virtio_add_queue(vdev, 8, handle_input);
|
|
vrng->vdev.get_features = get_features;
|
|
|
|
vrng->qdev = dev;
|
|
vrng->conf = conf;
|
|
vrng->popped = false;
|
|
vrng->quota_remaining = vrng->conf->max_bytes;
|
|
|
|
g_assert_cmpint(vrng->conf->max_bytes, <=, INT64_MAX);
|
|
|
|
vrng->rate_limit_timer = qemu_new_timer_ms(vm_clock,
|
|
check_rate_limit, vrng);
|
|
|
|
qemu_mod_timer(vrng->rate_limit_timer,
|
|
qemu_get_clock_ms(vm_clock) + vrng->conf->period_ms);
|
|
|
|
register_savevm(dev, "virtio-rng", -1, 1, virtio_rng_save,
|
|
virtio_rng_load, vrng);
|
|
|
|
return vdev;
|
|
}
|
|
|
|
void virtio_rng_exit(VirtIODevice *vdev)
|
|
{
|
|
VirtIORNG *vrng = DO_UPCAST(VirtIORNG, vdev, vdev);
|
|
|
|
unregister_savevm(vrng->qdev, "virtio-rng", vrng);
|
|
virtio_cleanup(vdev);
|
|
}
|