Changes in flow_netlink.h

c9422999 - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269

Wed, 29 May 2019 14:12:43 +0000

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269Based on 1 normalized pattern(s): this program is free software you can redistribute it and or modify it under the terms of version 2 of the gnu general public license as published by the free software foundation this program is distributed in the hope that it will be useful but without any warranty without even the implied warranty of merchantability or fitness for a particular purpose see the gnu general public license for more details you should have received a copy of the gnu general public license along with this program if not write to the free software foundation inc 51 franklin street fifth floor boston ma 02110 1301 usaextracted by the scancode license scanner the SPDX license identifier GPL-2.0-onlyhas been chosen to replace the boilerplate/reference in 21 file(s).Signed-off-by: Thomas Gleixner Reviewed-by: Alexios Zavras Reviewed-by: Allison Randal Reviewed-by: Richard Fontana Cc: linux-spdx@vger.kernel.orgLink: https://lkml.kernel.org/r/20190529141334.228102212@linutronix.deSigned-off-by: Greg Kroah-Hartman List of files: /linux-6.15/net/openvswitch/flow_netlink.h

ee9c5e67 - openvswitch: convert to kvmalloc

Tue, 12 Mar 2019 06:31:02 +0000

openvswitch: convert to kvmallocPatch series "generic radix trees; drop flex arrays".This patch (of 7):There was no real need for this code to be using flexarrays, it's justimplementing a hash table - ideally it would be using rhashtables, butthat conversion would be significantly more complicated.Link: http://lkml.kernel.org/r/20181217131929.11727-2-kent.overstreet@gmail.comSigned-off-by: Kent Overstreet Reviewed-by: Matthew Wilcox Cc: Pravin B Shelar Cc: Alexey Dobriyan Cc: Al Viro Cc: Dave Hansen Cc: Eric Paris Cc: Marcelo Ricardo Leitner Cc: Neil Horman Cc: Paul Moore Cc: Shaohua Li Cc: Stephen Smalley Cc: Vlad Yasevich Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds List of files: /linux-6.15/net/openvswitch/flow_netlink.h

b2d0f5d5 - openvswitch: enable NSH support

Tue, 07 Nov 2017 13:07:02 +0000

openvswitch: enable NSH supportv16->17 - Fixed disputed check code: keep them in nsh_push and nsh_pop but also add them in __ovs_nla_copy_actionsv15->v16 - Add csum recalculation for nsh_push, nsh_pop and set_nsh pointed out by Pravin - Move nsh key into the union with ipv4 and ipv6 and add check for nsh key in match_validate pointed out by Pravin - Add nsh check in validate_set and __ovs_nla_copy_actionsv14->v15 - Check size in nsh_hdr_from_nlattr - Fixed four small issues pointed out By Jiri and Ericv13->v14 - Rename skb_push_nsh to nsh_push per Dave's comment - Rename skb_pop_nsh to nsh_pop per Dave's commentv12->v13 - Fix NSH header length check in set_nshv11->v12 - Fix missing changes old comments pointed out - Fix new comments for v11v10->v11 - Fix the left three disputable comments for v9 but not fixed in v10.v9->v10 - Change struct ovs_key_nsh to struct ovs_nsh_key_base base; __be32 context[NSH_MD1_CONTEXT_SIZE]; - Fix new comments for v9v8->v9 - Fix build error reported by daily intel build because nsh module isn't selected by openvswitchv7->v8 - Rework nested value and mask for OVS_KEY_ATTR_NSH - Change pop_nsh to adapt to nsh kernel module - Fix many issues per comments from Jiri Bencv6->v7 - Remove NSH GSO patches in v6 because Jiri Benc reworked it as another patch series and they have been merged. - Change it to adapt to nsh kernel module added by NSH GSO patch seriesv5->v6 - Fix the rest comments for v4. - Add NSH GSO support for VxLAN-gpe + NSH and Eth + NSH.v4->v5 - Fix many comments by Jiri Benc and Eric Garver for v4.v3->v4 - Add new NSH match field ttl - Update NSH header to the latest format which will be final format and won't change per its author's confirmation. - Fix comments for v3.v2->v3 - Change OVS_KEY_ATTR_NSH to nested key to handle length-fixed attributes and length-variable attriubte more flexibly. - Remove struct ovs_action_push_nsh completely - Add code to handle nested attribute for SET_MASKED - Change PUSH_NSH to use the nested OVS_KEY_ATTR_NSH to transfer NSH header data. - Fix comments and coding style issues by Jiri and Ericv1->v2 - Change encap_nsh and decap_nsh to push_nsh and pop_nsh - Dynamically allocate struct ovs_action_push_nsh for length-variable metadata.OVS master and 2.8 branch has merged NSH userspacepatch series, this patch is to enable NSH supportin kernel data path in order that OVS can supportNSH in compat mode by porting this.Signed-off-by: Yi Yang Acked-by: Jiri Benc Acked-by: Eric Garver Acked-by: Pravin Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

9dd7f890 - openvswitch: Add original direction conntrack tuple to sw_flow_key.

Thu, 09 Feb 2017 19:21:59 +0000

openvswitch: Add original direction conntrack tuple to sw_flow_key.Add the fields of the conntrack original direction 5-tuple to structsw_flow_key. The new fields are initially marked as non-existent, andare populated whenever a conntrack action is executed and either findsor generates a conntrack entry. This means that these fields existfor all packets that were not rejected by conntrack as untrackable.The original tuple fields in the sw_flow_key are filled from theoriginal direction tuple of the conntrack entry relating to thecurrent packet, or from the original direction tuple of the masterconntrack entry, if the current conntrack entry has a master.Generally, expected connections of connections having an assignedhelper (e.g., FTP), have a master conntrack entry.The main purpose of the new conntrack original tuple fields is toallow matching on them for policy decision purposes, with the premisethat the admissibility of tracked connections reply packets (as wellas original direction packets), and both direction packets of anyrelated connections may be based on ACL rules applying to the masterconnection's original direction 5-tuple. This also makes it easier tomake policy decisions when the actual packet headers might have beentransformed by NAT, as the original direction 5-tuple represents thepacket headers before any such transformation.When using the original direction 5-tuple the admissibility of returnand/or related packets need not be based on the mere existence of aconntrack entry, allowing separation of admission policy from theestablished conntrack state. While existence of a conntrack entry isrequired for admission of the return or related packets, policychanges can render connections that were initially admitted to berejected or dropped afterwards. If the admission of the return andrelated packets was based on mere conntrack state (e.g., connectionbeing in an established state), a policy change that would make theconnection rejected or dropped would need to find and delete allconntrack entries affected by such a change. When using the originaldirection 5-tuple matching the affected conntrack entries can beallowed to time out instead, as the established state of theconnection would not need to be the basis for packet admission anymore.It should be noted that the directionality of related connections maybe the same or different than that of the master connection, andneither the original direction 5-tuple nor the conntrack state bitscarry this information. If needed, the directionality of the masterconnection can be stored in master's conntrack mark or labels, whichare automatically inherited by the expected related connections.The fact that neither ARP nor ND packets are trackable by conntrackallows mutual exclusion between ARP/ND and the new conntrack originaltuple fields. Hence, the IP addresses are overlaid in union with ARPand ND fields. This allows the sw_flow_key to not grow much due tothis patch, but it also means that we must be careful to never use thenew key fields with ARP or ND packets. ARP is easy to distinguish andkeep mutually exclusive based on the ethernet type, but ND being anICMPv6 protocol requires a bit more attention.Signed-off-by: Jarno Rajahalme Acked-by: Joe Stringer Acked-by: Pravin B Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

2279994d - openvswitch: avoid resetting flow key while installing new flow.

Mon, 19 Sep 2016 20:51:00 +0000

openvswitch: avoid resetting flow key while installing new flow.since commit commit db74a3335e0f6 ("openvswitch: use percpuflow stats") flow alloc resets flow-key. So there is no needto reset the flow-key again if OVS is using newly allocatedflow-key.Signed-off-by: Pravin B Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

fc4099f1 - openvswitch: Fix egress tunnel info.

Fri, 23 Oct 2015 01:17:16 +0000

openvswitch: Fix egress tunnel info.While transitioning to netdev based vport we broke OVSfeature which allows user to retrieve tunnel packet egressinformation for lwtunnel devices. Following patch fixes itby introducing ndo operation to get the tunnel egress info.Same ndo operation can be used for lwtunnel devices and compatovs-tnl-vport devices. So after adding such device operationwe can remove similar operation from ovs-vport.Fixes: 614732eaa12d ("openvswitch: Use regular VXLAN net_device device").Signed-off-by: Pravin B Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

4c222798 - ip-tunnel: Use API to access tunnel metadata options.

Mon, 31 Aug 2015 01:09:38 +0000

ip-tunnel: Use API to access tunnel metadata options.Currently tun-info options pointer is used in few cases topass options around. But tunnel options can be accessed usingip_tunnel_info_opts() API without using the pointer. Followingpatch removes the redundant pointer and consistently make useof API.Signed-off-by: Pravin B Shelar Acked-by: Thomas Graf Reviewed-by: Jesse Gross Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

c2ac6673 - openvswitch: Allow matching on conntrack label

Wed, 26 Aug 2015 18:31:52 +0000

openvswitch: Allow matching on conntrack labelAllow matching and setting the ct_label field. As with ct_mark, this ispopulated by executing the CT action. The label field may be modified byspecifying a label and mask nested under the CT action. It is stored asmetadata attached to the connection. Label modification occurs afterlookup, and will only persist when the conntrack entry is committed byproviding the COMMIT flag to the CT action. Labels are currently fixedto 128 bits in size.Signed-off-by: Joe Stringer Acked-by: Thomas Graf Acked-by: Pravin B Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

7f8a436e - openvswitch: Add conntrack action

Wed, 26 Aug 2015 18:31:48 +0000

openvswitch: Add conntrack actionExpose the kernel connection tracker via OVS. Userspace components canmake use of the CT action to populate the connection state (ct_state)field for a flow. This state can be subsequently matched.Exposed connection states are OVS_CS_F_*:- NEW (0x01) - Beginning of a new connection.- ESTABLISHED (0x02) - Part of an existing connection.- RELATED (0x04) - Related to an established connection.- INVALID (0x20) - Could not track the connection for this packet.- REPLY_DIR (0x40) - This packet is in the reply direction for the flow.- TRACKED (0x80) - This packet has been sent through conntrack.When the CT action is executed by itself, it will send the packetthrough the connection tracker and populate the ct_state field with oneor more of the connection state flags above. The CT action will alwaysset the TRACKED bit.When the COMMIT flag is passed to the conntrack action, this specifiesthat information about the connection should be stored. This allowssubsequent packets for the same (or related) connections to becorrelated with this connection. Sending subsequent packets for theconnection through conntrack allows the connection tracker to considerthe packets as ESTABLISHED, RELATED, and/or REPLY_DIR.The CT action may optionally take a zone to track the flow within. Thisallows connections with the same 5-tuple to be kept logically separatefrom connections in other zones. If the zone is specified, then the"ct_zone" match field will be subsequently populated with the zone id.IP fragments are handled by transparently assembling them as part of theCT action. The maximum received unit (MRU) size is tracked so thatrefragmentation can occur during output.IP frag handling contributed by Andy Zhou.Based on original design by Justin Pettit.Signed-off-by: Joe Stringer Signed-off-by: Justin Pettit Signed-off-by: Andy Zhou Acked-by: Thomas Graf Acked-by: Pravin B Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

34ae932a - openvswitch: Make tunnel set action attach a metadata dst

Tue, 21 Jul 2015 08:44:03 +0000

openvswitch: Make tunnel set action attach a metadata dstUtilize the new metadata dst to attach encapsulation instructions tothe skb. The existing egress_tun_info via the OVS_CB() is left inplace until all tunnel vports have been converted to the new method.Signed-off-by: Thomas Graf Signed-off-by: Pravin B Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

1d8fff90 - ip_tunnel: Make ovs_tunnel_info and ovs_key_ipv4_tunnel generic

Tue, 21 Jul 2015 08:43:54 +0000

ip_tunnel: Make ovs_tunnel_info and ovs_key_ipv4_tunnel genericRename the tunnel metadata data structures currently internal toOVS and make them generic for use by all IP tunnels.Both structures are kernel internal and will stay that way. Theirmembers are exposed to user space through individual Netlinkattributes by OVS. It will therefore be possible to extend/modifythese structures without affecting user ABI.Signed-off-by: Thomas Graf Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

74ed7ab9 - openvswitch: Add support for unique flow IDs.

Thu, 22 Jan 2015 00:42:52 +0000

openvswitch: Add support for unique flow IDs.Previously, flows were manipulated by userspace specifying a full,unmasked flow key. This adds significant burden onto flowserialization/deserialization, particularly when dumping flows.This patch adds an alternative way to refer to flows using avariable-length "unique flow identifier" (UFID). At flow setup time,userspace may specify a UFID for a flow, which is stored with the flowand inserted into a separate table for lookup, in addition to thestandard flow table. Flows created using a UFID must be fetched ordeleted using the UFID.All flow dump operations may now be made more terse with OVS_UFID_F_*flags. For example, the OVS_UFID_F_OMIT_KEY flag allows responses toomit the flow key from a datapath operation if the flow has acorresponding UFID. This significantly reduces the time spent assemblingand transacting netlink messages. With all OVS_UFID_F_OMIT_* flagsenabled, the datapath only returns the UFID and statistics for each flowduring flow dump, increasing ovs-vswitchd revalidator performance by 40%or more.Signed-off-by: Joe Stringer Acked-by: Pravin B Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

5b4237bb - openvswitch: Refactor ovs_nla_fill_match().

Thu, 22 Jan 2015 00:42:48 +0000

openvswitch: Refactor ovs_nla_fill_match().Refactor the ovs_nla_fill_match() function into separate netlinkserialization functions ovs_nla_put_{unmasked_key,mask}(). Modifyovs_nla_put_flow() to handle attribute nesting and expose the 'is_mask'parameter - all callers need to nest the flow, and callers have betterknowledge about whether it is serializing a mask or not.Signed-off-by: Joe Stringer Acked-by: Pravin B Shelar Signed-off-by: David S. Miller List of files: /linux-6.15/net/openvswitch/flow_netlink.h

05da5898 - openvswitch: Add support for OVS_FLOW_ATTR_PROBE.

Thu, 06 Nov 2014 15:03:05 +0000

openvswitch: Add support for OVS_FLOW_ATTR_PROBE.This new flag is useful for suppressing error logging while probingfor datapath features using flow commands. For backwardscompatibility reasons the commands are executed normally, but errorlogging is suppressed.Signed-off-by: Jarno Rajahalme Signed-off-by: Pravin B Shelar List of files: /linux-6.15/net/openvswitch/flow_netlink.h

8f0aad6f - openvswitch: Extend packet attribute for egress tunnel info

Thu, 06 Nov 2014 14:51:24 +0000

openvswitch: Extend packet attribute for egress tunnel infoOVS vswitch has extended IPFIX exporter to export tunnel headersto improve network visibility.To export this information userspace needs to know egress tunnelfor given packet. By extending packet attributes datapath canexport egress tunnel info for given packet. So that userspacecan ask for egress tunnel info in userspace action. Thisinformation is used to build IPFIX data for given flow.Signed-off-by: Wenyu Zhang Acked-by: Romain Lenglet Acked-by: Ben Pfaff Signed-off-by: Pravin B Shelar List of files: /linux-6.15/net/openvswitch/flow_netlink.h

2fdb957d - openvswitch: Refactor action alloc and copy api.

Sun, 19 Oct 2014 18:19:51 +0000

openvswitch: Refactor action alloc and copy api.There are two separate API to allocate and copy actions list. AnytimeOVS needs to copy action list, it needs to call both functions.Following patch moves action allocation to copy function to avoidcode duplication.Signed-off-by: Pravin B Shelar Acked-by: Jarno Rajahalme List of files: /linux-6.15/net/openvswitch/flow_netlink.h

41af73e9 - openvswitch: Move key_attr_size() to flow_netlink.h.

Sat, 18 Oct 2014 23:14:14 +0000

openvswitch: Move key_attr_size() to flow_netlink.h.flow-netlink has netlink related code.Signed-off-by: Joe Stringer Signed-off-by: Pravin B Shelar List of files: /linux-6.15/net/openvswitch/flow_netlink.h

25cd9ba0 - openvswitch: Add basic MPLS support to kernel

Mon, 06 Oct 2014 12:05:13 +0000

openvswitch: Add basic MPLS support to kernelAllow datapath to recognize and extract MPLS labels into flow keysand execute actions which push, pop, and set labels on packets.Based heavily on work by Leo Alterman, Ravi K, Isaku Yamahata and Joe Stringer.Cc: Ravi K Cc: Leo Alterman Cc: Isaku Yamahata Cc: Joe Stringer Signed-off-by: Simon Horman Signed-off-by: Jesse Gross Signed-off-by: Pravin B Shelar List of files: /linux-6.15/net/openvswitch/flow_netlink.h

83c8df26 - openvswitch: refactor ovs flow extract API.

Tue, 16 Sep 2014 02:20:31 +0000

openvswitch: refactor ovs flow extract API.OVS flow extract is called on packet receive or packetexecute code path. Following patch defines separate APIfor extracting flow-key in packet execute code path.Signed-off-by: Pravin B Shelar Acked-by: Andy Zhou List of files: /linux-6.15/net/openvswitch/flow_netlink.h

23dabf88 - openvswitch: Remove 5-tuple optimization.

Thu, 27 Mar 2014 19:35:23 +0000

openvswitch: Remove 5-tuple optimization.The 5-tuple optimization becomes unnecessary with a later per-NUMAnode stats patch. Remove it first to make the changes easier tograsp.Signed-off-by: Jarno Rajahalme Signed-off-by: Jesse Gross List of files: /linux-6.15/net/openvswitch/flow_netlink.h