netdev - Re: [PATCH net-next 4/4] net: Add Open vSwitch kernel components.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 22 Nov 2011 22:07:24 -0500
From:	Jamal Hadi Salim <jhs@...atatu.com>
To:	John Fastabend <john.r.fastabend@...el.com>
Cc:	Jesse Gross <jesse@...ira.com>,
	"David S. Miller" <davem@...emloft.net>,
	"netdev@...r.kernel.org" <netdev@...r.kernel.org>,
	"dev@...nvswitch.org" <dev@...nvswitch.org>
Subject: Re: [PATCH net-next 4/4] net: Add Open vSwitch kernel components.

On Tue, 2011-11-22 at 18:30 -0800, John Fastabend wrote:

> He is pushing and popping entire tags off 802.1Q for now but
> you can easily imagine MPLS tags and all sorts of other things
> people will _need_.

Lots of packet munging already happening with actions. 
We can pedit/nat/iptables/checksum/etc/. Works very well.

> Do we want tc and likely the skbedit action to explode into a
> packet mangling tool? 

skbedit is the wrong action to use. I would write one with
a cutnpaste of the code they have to do vlan manipulation.

> Would it make sense to plug into ebtables
> perhaps with a new family, NFPROTO_OPENFLOW or even on the
> existing NFPROTO_BRIDGE.

There is _nothing_ that openflow needs that cant be done
in classifier-action piece.
A good number of the actions they need exist already. 

> Although doing it with classifiers and more actions would flush
> out that TODO in act_mirred, and get us an mq_ingress among
> other things.

The packet redirect to user space is achieveable in many other
ways, thats why it was not added.

cheers,
jamal

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html