netdev - [PATCH 0/2] bonding: Doesn't support IPv6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Fri, 28 Oct 2011 18:08:00 -0700
From:	John <linux@...2.net>
To:	netdev@...r.kernel.org
CC:	andy@...yhouse.net
Subject: [PATCH 0/2] bonding: Doesn't support IPv6

Currently the "bonding" driver does not support load balancing outgoing 
traffic in LACP mode for IPv6 traffic. IPv4 (and TCP or UDP over IPv4) 
are currently supported; this patch adds transmit hashing for IPv6 (and 
TCP or UDP over IPv6), bringing IPv6 up to par with IPv4 support in the 
bonding driver.

The algorithm chosen (xor'ing the bottom three quads and then xor'ing 
that down into the bottom byte) was chosen after testing almost 400,000 
unique IPv6 addresses harvested from server logs. This algorithm had the 
most even distribution for both big- and little-endian architectures 
while still using few instructions.

Fragmented IPv6 packets are handled the same way as fragmented IPv4 
packets, ie, they are not balanced based on layer 4 information. 
Additionally, IPv6 packets with intermediate headers are not balanced 
based on layer 4 information. In practice these intermediate headers are 
rare and this should not cause any problems, the alternative (a 
packet-parsing loop and look-up table) seemed slow and complicated for 
little gain.

This is an update to a prior patch I submitted. This version includes 
bounds checking not present in the original driver or my prior patch. 
Included with the patch is an update to the bonding documentation.

Patch has been tested and performs as expected.

John
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html