netdev - Re: MPLS decap with iproute2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 7 Dec 2015 21:42:50 +0000
From:	Robert Shearman <rshearma@...cade.com>
To:	Sam Russell <sam.h.russell@...il.com>, <netdev@...r.kernel.org>
Subject: Re: MPLS decap with iproute2

On 07/12/15 19:42, Sam Russell wrote:
> Hi,
>
> I've had success with the iproute2 manpage example for encapsulating
> outgoing traffic in MPLS, but I've not found a way to add decap routes
> inbound.
>
> I've tried "ip route -f mpls add 100 dev lo" and other variations, but I
> get netlink errors back.
>
> Has this been built yet? Is there sample config that I can try out? I'm
> running a home-built 4.3 kernel + iproute2 built from head (on ubuntu
> 15.10) and am comfortable with perf and splashing around in the codebase if
> need be.

Hi Sam,

This certainly works on net-next, albeit with a bug on the subsequent 
"ip route -f mpls list" that I'll shortly be sending a patch for.

Have you first set an appropriate label table size? E.g.:

   $ sysctl net.mpls.platform_labels=1048575

If you intend to receive non-BOS traffic over your route above, then you 
should also make sure to enable mpls input on lo (and your actual input 
interfaces), otherwise the traffic will be dropped.

Thanks,
Rob
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html