netdev - net: RFC ethtool 5-tuple filter set/get feature

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.WNT.4.64.0812151630570.10472@ppwaskie-MOBL2.amr.corp.intel.com>
Date:	Mon, 15 Dec 2008 18:52:07 -0800 (Pacific Standard Time)
From:	"Waskiewicz Jr, Peter P" <peter.p.waskiewicz.jr@...el.com>
To:	netdev@...r.kernel.org
Subject: net: RFC ethtool 5-tuple filter set/get feature

I am looking at current methods to support adding 5-tuple filters to a 
network device.  3 methods I can see are 1) Creating a sysfs interface, 2) 
writing a custom application using netlink or some other interface, or 3) 
Adding support to ethtool.

The latest ethtool bits support the rxhash callbacks, allowing different 
Rx hashing methods to be enabled or disabled in Sun's Neptune device.  I 
would like to add similar options to ethtool to support features in 
current versions of igb hardware, and in future ixgbe hardware.

I'm soliciting feedback from the community before laying down code, in 
case someone has a better suggestion to solve this problem.  The data I 
need to pass through to the driver is: L4 source port, L4 destination 
port, Source address and Destination address (both IPv4 and IPv6), VLAN 
id, and a flexible layer 2 word (word anywhere in the L2 header) with 
masks for all of these.  I also need to pass through an Rx queue to assign 
the matching traffic to.  I'm also thinking of having the set operation 
take an add or remove command, so a filter can be popped out or added.

Any ideas or suggestions are appreciated.  I will work to get code out for 
review asap, but in the meantime any suggestions one way or another to 
possibly prevent lots of unnecessary work is appreciated.

Cheers,
-PJ Waskiewicz
<peter.p.waskiewicz.jr@...el.com>
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html