netdev - [PATCH net-next 0/6] ipv4 fixes for dmvpn

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1369653376-4731-1-git-send-email-timo.teras@iki.fi>
Date:	Mon, 27 May 2013 14:16:10 +0300
From:	Timo Teräs <timo.teras@....fi>
To:	netdev@...r.kernel.org
Cc:	Timo Teräs <timo.teras@....fi>
Subject: [PATCH net-next 0/6] ipv4 fixes for dmvpn

Collection of pending fixes which mostly hit DMVPN setups, but some
are doing good to generic setups too.

Patches 1 & 2 fix the NOARP flag change to flush nud NOARP entries
from ARP cache. The only change from previous send is updating the
commit message per request, and adding Ben's Acked-By.

Patch 3 reworks IPsec PMTU propagation to be less invasive, and fixes
certain subtle caching issues.

Patch 4 and 5 are performance improvements. Both are especially useful
on dmvpn setups, but the latter patch helps general setups too.

And finally the patch 6 is a respin of the input route caching so
we get proper pmtu and fragmentation in forwarding path (needed for
tunnel devices and TCPMSS clamp-to-pmtu). While it would be better if
we could avoid input route caching, this was the only non-intrusive way
to fix all issues I came up with.

The whole patchset is tested on top of 3.9.x and fixes the issues
I've encountered.

Please review and consider applying to net-next.

Timo Teräs (6):
  net: inform NETDEV_CHANGE callbacks which flags were changed
  arp: flush arp cache on IFF_NOARP change
  ipv4: properly refresh rtable entries on pmtu/redirect events
  ipv4: rate limit updating of next hop exceptions with same pmtu
  ipv4: use separate genid for next hop exceptions
  ipv4: use next hop exceptions also for input routes

 include/linux/netdevice.h   |   4 +-
 include/net/ip_fib.h        |   4 +-
 include/net/net_namespace.h |  11 ++++
 net/core/dev.c              |   5 +-
 net/ipv4/ah4.c              |   7 +--
 net/ipv4/arp.c              |   4 ++
 net/ipv4/esp4.c             |   7 +--
 net/ipv4/fib_semantics.c    |   3 +-
 net/ipv4/ipcomp.c           |   7 +--
 net/ipv4/route.c            | 140 +++++++++++++++++++++++++++++++-------------
 10 files changed, 132 insertions(+), 60 deletions(-)

-- 
1.8.2.3

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html