linux-kernel - Re: [PATCH] IPVS: SCTP Tranport Load Balancing Support to IPVS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20100118232148.GB20302@verge.net.au>
Date:	Tue, 19 Jan 2010 12:21:48 +1300
From:	Simon Horman <horms@...ge.net.au>
To:	Mohan Reddy <mohanreddykv@...il.com>
Cc:	wensong@...ux-vs.org, ja@....bg, linux-kernel@...r.kernel.org,
	lvs-devel@...r.kernel.org
Subject: Re: [PATCH] IPVS: SCTP Tranport Load Balancing Support to IPVS

On Mon, Jan 18, 2010 at 11:20:11PM +0530, Mohan Reddy wrote:
> This patch adds SCTP packet load balancing support to IPVS. This patch is written against linux-2.6.32.3 kernel. This has been written based on the SCTP FSM desribed in the RFC 4960. All the posibilities of chunks have been taken care. 
> 
> Once the IPVS receives an SCTP packet with INIT chunk we will create a 
> connection object and chooses a real and forward the packet based on the
> forwarding method. After creating the connection we will drive the FSM based 
> on the chunks(in this code they are called as events). The return packet from
> the server will be an INIT ACK chunck, then we will move the FSM state to
> IP_VS_S_INIT_ACK_SER. Like this all the chunks have next states. 
> 
> As all the packets are destined to the virtual server (VIP) we haven't handled
> multihomed endpoints.
> 
> 
> Signed-off-by : Venkata Mohan Reddy Koppula <mohanreddykv@...il.com>
> 
> 
>   

Hi,

I haven't had time to review your patch properly yet.
But I have two minor comments.

Firstly, could you please base your work on Patrick McHardy's nf-next-2.6
tree or at least Dave Miller's the net-next-2.6 tree. At this stage it just
looks like you'll need to re-diff the patch.

[snip]

> diff -Npaur linux-2.6.32.3/net/netfilter/ipvs/Kconfig linux-2.6.32.3_new/net/netfilter/ipvs/Kconfig
> --- linux-2.6.32.3/net/netfilter/ipvs/Kconfig	2010-01-07 04:37:45.000000000 +0530
> +++ linux-2.6.32.3_new/net/netfilter/ipvs/Kconfig	2010-01-16 21:19:54.772760964 +0530
> @@ -100,6 +100,12 @@ config	IP_VS_PROTO_AH
>  	  This option enables support for load balancing AH (Authentication
>  	  Header) transport protocol. Say Y if unsure.
>  
> +config  IP_VS_PROTO_SCTP
> +	bool "SCTP load balancing support"

You need 

	select CRC32C

here.

> +	---help---
> +	  This option enables support for load balancing SCTP transport
> +	  protocol. Say Y if unsure.
> +
>  comment "IPVS scheduler"
>  
>  config	IP_VS_RR

[snip]
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/