Changes in ipv6_stubs.h

87d973e8 - ipv6: udp: constify 'struct net' parameter of socket lookups

Fri, 02 Aug 2024 13:40:29 +0000

ipv6: udp: constify 'struct net' parameter of socket lookupsFollowing helpers do not touch their 'struct net' argument.- udp6_lib_lookup()- __udp6_lib_lookup()Signed-off-by: Eric Dumazet Reviewed-by: Simon Horman Link: https://patch.msgid.link/20240802134029.3748005-6-edumazet@google.comSigned-off-by: Jakub Kicinski List of files: /linux-6.15/include/net/ipv6_stubs.h

f531d13b - xfrm: support sending NAT keepalives in ESP in UDP states

Tue, 28 May 2024 03:29:14 +0000

xfrm: support sending NAT keepalives in ESP in UDP statesAdd the ability to send out RFC-3948 NAT keepalives from the xfrm stack.To use, Userspace sets an XFRM_NAT_KEEPALIVE_INTERVAL integer property whencreating XFRM outbound states which denotes the number of seconds betweenkeepalive messages.Keepalive messages are sent from a per net delayed work which iterates overthe xfrm states. The logic is guarded by the xfrm state spinlock due to thexfrm state walk iterator.Possible future enhancements:- Adding counters to keep track of sent keepalives.- deduplicate NAT keepalives between states sharing the same nat keepalive parameters.- provisioning hardware offloads for devices capable of implementing this.- revise xfrm state list to use an rcu list in order to avoid running this under spinlock.Suggested-by: Paul Wouters Tested-by: Paul Wouters Tested-by: Antony Antony Signed-off-by: Eyal Birger Signed-off-by: Steffen Klassert List of files: /linux-6.15/include/net/ipv6_stubs.h

dab4e1f0 - bpf: Derive source IP addr via bpf_*_fib_lookup()

Sat, 07 Oct 2023 08:14:14 +0000

bpf: Derive source IP addr via bpf_*_fib_lookup()Extend the bpf_fib_lookup() helper by making it to return the sourceIPv4/IPv6 address if the BPF_FIB_LOOKUP_SRC flag is set.For example, the following snippet can be used to derive the desiredsource IP address: struct bpf_fib_lookup p = { .ipv4_dst = ip4->daddr }; ret = bpf_skb_fib_lookup(skb, p, sizeof(p), BPF_FIB_LOOKUP_SRC | BPF_FIB_LOOKUP_SKIP_NEIGH); if (ret != BPF_FIB_LKUP_RET_SUCCESS) return TC_ACT_SHOT; /* the p.ipv4_src now contains the source address */The inability to derive the proper source address may cause malfunctionsin BPF-based dataplanes for hosts containing netdevs with more than oneroutable IP address or for multi-homed hosts.For example, Cilium implements packet masquerading in BPF. If anegressing netdev to which the Cilium's BPF prog is attached hasmultiple IP addresses, then only one [hardcoded] IP address can be used formasquerading. This breaks connectivity if any other IP address should havebeen selected instead, for example, when a public and private addressesare attached to the same egress interface.The change was tested with Cilium [1].Nikolay Aleksandrov helped to figure out the IPv6 addr selection.[1]: https://github.com/cilium/cilium/pull/28283Signed-off-by: Martynas Pumputis Link: https://lore.kernel.org/r/20231007081415.33502-2-m@lambda.ltSigned-off-by: Martin KaFai Lau List of files: /linux-6.15/include/net/ipv6_stubs.h

221ddb72 - xfrm: Support GRO for IPv6 ESP in UDP encapsulation

Wed, 04 Oct 2023 13:05:44 +0000

xfrm: Support GRO for IPv6 ESP in UDP encapsulationThis patch enables the GRO codepath for IPv6 ESP in UDP encapsulatedpackets. Decapsulation happens at L2 and saves a full round throughthe stack for each packet. This is also needed to support HW offloadfor ESP in UDP encapsulation.Signed-off-by: Steffen Klassert Co-developed-by: Antony Antony Signed-off-by: Antony Antony Reviewed-by: Eyal Birger List of files: /linux-6.15/include/net/ipv6_stubs.h

38566ec0 - bpf: Change bpf_getsockopt(SOL_IPV6) to reuse do_ipv6_getsockopt()

Fri, 02 Sep 2022 00:29:31 +0000

bpf: Change bpf_getsockopt(SOL_IPV6) to reuse do_ipv6_getsockopt()This patch changes bpf_getsockopt(SOL_IPV6) to reusedo_ipv6_getsockopt(). It removes the duplicated code frombpf_getsockopt(SOL_IPV6).This also makes bpf_getsockopt(SOL_IPV6) supporting the sameset of optnames as in bpf_setsockopt(SOL_IPV6). In particular,this adds IPV6_AUTOFLOWLABEL support to bpf_getsockopt(SOL_IPV6).ipv6 could be compiled as a module. Like how other code solved itwith stubs in ipv6_stubs.h, this patch adds the do_ipv6_getsockoptto the ipv6_bpf_stub.Signed-off-by: Martin KaFai Lau Link: https://lore.kernel.org/r/20220902002931.2896218-1-kafai@fb.comSigned-off-by: Alexei Starovoitov List of files: /linux-6.15/include/net/ipv6_stubs.h

75b64b68 - bpf: Change bpf_setsockopt(SOL_IPV6) to reuse do_ipv6_setsockopt()

Wed, 17 Aug 2022 06:18:34 +0000

bpf: Change bpf_setsockopt(SOL_IPV6) to reuse do_ipv6_setsockopt()After the prep work in the previous patches,this patch removes the dup code from bpf_setsockopt(SOL_IPV6)and reuses the implementation in do_ipv6_setsockopt().ipv6 could be compiled as a module. Like how other code solved itwith stubs in ipv6_stubs.h, this patch adds the do_ipv6_setsockoptto the ipv6_bpf_stub.The current bpf_setsockopt(IPV6_TCLASS) does not take theINET_ECN_MASK into the account for tcp. Thedo_ipv6_setsockopt(IPV6_TCLASS) will handle it correctly.The existing optname white-list is refactored into a newfunction sol_ipv6_setsockopt().After this last SOL_IPV6 dup code removal, the __bpf_setsockopt()is simplified enough that the extra "{ }" around the if statementcan be removed.Reviewed-by: Stanislav Fomichev Signed-off-by: Martin KaFai Lau Link: https://lore.kernel.org/r/20220817061834.4181198-1-kafai@fb.comSigned-off-by: Alexei Starovoitov List of files: /linux-6.15/include/net/ipv6_stubs.h

8837cbbf - net: ipv6: add fib6_nh_release_dsts stub

Mon, 22 Nov 2021 15:15:12 +0000

net: ipv6: add fib6_nh_release_dsts stubWe need a way to release a fib6_nh's per-cpu dsts when replacingnexthops otherwise we can end up with stale per-cpu dsts which hold netdevice references, so add a new IPv6 stub called fib6_nh_release_dsts.It must be used after an RCU grace period, so no new dsts can be createdthrough a group's nexthop entry.Similar to fib6_nh_release it shouldn't be used if fib6_nh_init has failedso it doesn't need a dummy stub when IPv6 is not enabled.Fixes: 7bf4796dd099 ("nexthops: add support for replace")Signed-off-by: Nikolay Aleksandrov Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

504a4011 - ipv6: add ipv6_dev_find to stubs

Tue, 30 Mar 2021 01:45:43 +0000

ipv6: add ipv6_dev_find to stubsAdd ipv6_dev_find to ipv6_stub to allow lookup of net_devices by IPV6address in net/ipv4/icmp.c.Signed-off-by: Andreas Roeseler Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

1d97898b - ipv6: add ipv6_fragment hook in ipv6_stub

Fri, 28 Aug 2020 15:14:31 +0000

ipv6: add ipv6_fragment hook in ipv6_stubAdd ipv6_fragment to ipv6_stub to avoid calling netfilter whenaccess ip6_fragment.Signed-off-by: wenxu Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

cb0721c7 - net: Refactor arguments of inet{,6}_bind

Fri, 08 May 2020 17:46:10 +0000

net: Refactor arguments of inet{,6}_bindThe intent is to add an additional bind parameter in the next commit.Instead of adding another argument, let's convert all existingflag arguments into an extendable bit field.No functional changes.Signed-off-by: Stanislav Fomichev Signed-off-by: Daniel Borkmann Acked-by: Andrey Ignatov Acked-by: Martin KaFai Lau Link: https://lore.kernel.org/bpf/20200508174611.228805-4-sdf@google.com List of files: /linux-6.15/include/net/ipv6_stubs.h

3e50ddd8 - xfrm: expose local_rxpmtu via ipv6_stubs

Mon, 04 May 2020 08:06:06 +0000

xfrm: expose local_rxpmtu via ipv6_stubsWe cannot call this function from the core kernel unless we would forceCONFIG_IPV6=y.Therefore expose this via ipv6_stubs so we can call it from net/xfrmin the followup patch.Since the call is expected to be unlikely, no extra code for the IPV6=ycase is added and we will always eat the indirection cost.Signed-off-by: Florian Westphal Signed-off-by: Steffen Klassert List of files: /linux-6.15/include/net/ipv6_stubs.h

11dd74b3 - net: ipv6: new arg skip_notify to ip6_rt_del

Mon, 27 Apr 2020 20:56:45 +0000

net: ipv6: new arg skip_notify to ip6_rt_delUsed in subsequent work to skip route deletenotifications on nexthop deletes.Suggested-by: David Ahern Signed-off-by: Roopa Prabhu Reviewed-by: David Ahern Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

26333c37 - xfrm: add IPv6 support for espintcp

Mon, 27 Apr 2020 15:59:35 +0000

xfrm: add IPv6 support for espintcpThis extends espintcp to support IPv6, building on the existing codeand the new UDPv6 encapsulation support. Most of the code is eitherreused directly (stream parser, ULP) or very similar to the IPv4variant (net/ipv6/esp6.c changes).The separation of config options for IPv4 and IPv6 espintcp requires abit of Kconfig gymnastics to enable the core code.Signed-off-by: Sabrina Dubroca Signed-off-by: Steffen Klassert List of files: /linux-6.15/include/net/ipv6_stubs.h

0146dca7 - xfrm: add support for UDPv6 encapsulation of ESP

Mon, 27 Apr 2020 15:59:34 +0000

xfrm: add support for UDPv6 encapsulation of ESPThis patch adds support for encapsulation of ESP over UDPv6. The codeis very similar to the IPv4 encapsulation implementation, and allowsto easily add espintcp on IPv6 as a follow-up.Signed-off-by: Sabrina Dubroca Signed-off-by: Steffen Klassert List of files: /linux-6.15/include/net/ipv6_stubs.h

6c8991f4 - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup

Wed, 04 Dec 2019 14:35:53 +0000

net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookupipv6_stub uses the ip6_dst_lookup function to allow other modules toperform IPv6 lookups. However, this function skips the XFRM layerentirely.All users of ipv6_stub->ip6_dst_lookup use ip_route_output_flow (via theip_route_output_key and ip_route_output helpers) for their IPv4 lookups,which calls xfrm_lookup_route(). This patch fixes this inconsistentbehavior by switching the stub to ip6_dst_lookup_flow, which also callsxfrm_lookup_route().This requires some changes in all the callers, as these two functionstake different arguments and have different return types.Fixes: 5f81bd2e5d80 ("ipv6: export a stub for IPv6 symbols used by vxlan")Reported-by: Xiumei Mu Signed-off-by: Sabrina Dubroca Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

19a3b7ee - ipv6: export function to send route updates

Wed, 22 May 2019 19:04:41 +0000

ipv6: export function to send route updatesAdd fib6_rt_update to send RTM_NEWROUTE with NLM_F_REPLACE set. Thishelper will be used by the nexthop code to notify userspace of routesthat are impacted when a nexthop config is updated via replace.This notification is needed for legacy apps that do not understandthe new nexthop object. Apps that are nexthop aware can use theRTA_NH_ID attribute in the route notification to just ignore it.In the future this should be wrapped in a sysctl to allow OS'es thatare fully updated to avoid the notificaton storm.Signed-off-by: David Ahern Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

cdaa16a4 - ipv6: Add hook to bump sernum for a route to stubs

Wed, 22 May 2019 19:04:40 +0000

ipv6: Add hook to bump sernum for a route to stubsAdd hook to ipv6 stub to bump the sernum up to the root node for aroute. This is needed by the nexthop code when a nexthop config changes.Signed-off-by: David Ahern Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

68a9b13d - ipv6: Add delete route hook to stubs

Wed, 22 May 2019 19:04:39 +0000

ipv6: Add delete route hook to stubsAdd ip6_del_rt to the IPv6 stub. The hook is needed by the nexthopcode to remove entries linked to a nexthop that is getting deleted.Signed-off-by: David Ahern Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

effda4dd - ipv6: Pass fib6_result to fib lookups

Tue, 16 Apr 2019 21:36:10 +0000

ipv6: Pass fib6_result to fib lookupsChange fib6_lookup and fib6_table_lookup to take a fib6_result and setf6i and nh rather than returning a fib6_info. For now both alwaysreturn 0.A later patch set can make these more like the IPv4 counterparts andreturn EINVAL, EACCESS, etc based on fib6_type.Signed-off-by: David Ahern Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h

b748f260 - ipv6: Pass fib6_result to ip6_mtu_from_fib6 and fib6_mtu

Tue, 16 Apr 2019 21:36:06 +0000

ipv6: Pass fib6_result to ip6_mtu_from_fib6 and fib6_mtuChange ip6_mtu_from_fib6 and fib6_mtu to take a fib6_result over afib6_info. Update both to use the fib6_nh from fib6_result.Since the signature of ip6_mtu_from_fib6 is already changing, add constto daddr and saddr.Signed-off-by: David Ahern Signed-off-by: David S. Miller List of files: /linux-6.15/include/net/ipv6_stubs.h