netdev - [PATCH net-next 0/3] net: vrf: Handle ipv6 multicast and link-local addresses

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1465850659-27830-1-git-send-email-dsa@cumulusnetworks.com>
Date:	Mon, 13 Jun 2016 13:44:16 -0700
From:	David Ahern <dsa@...ulusnetworks.com>
To:	netdev@...r.kernel.org
Cc:	David Ahern <dsa@...ulusnetworks.com>
Subject: [PATCH net-next 0/3] net: vrf: Handle ipv6 multicast and link-local addresses

IPv6 multicast and link-local addresses require special handling by the
VRF driver. Rather than using the VRF device index and full FIB lookups,
packets to/from these addresses should use direct FIB lookups based on
the VRF device table.

Multicast routes do not make sense for the L3 master device directly.
Accordingly, do not add mcast routes for the device, and the VRF driver
should fail attempts to send packets to ipv6 mcast addresses on the
device (e.g, ping6 ff02::1%<vrf> should fail)

With this change connections into and out of a VRF enslaved device work
for multicast and link-local addresses (icmp, tcp, and udp).  e.g.,

1. packets into VM with VRF config:
    ping6 -c3 fe80::e0:f9ff:fe1c:b974%br1
    ping6 -c3 ff02::1%br1
    ssh -6 fe80::e0:f9ff:fe1c:b974%br1

2. packets going out a VRF enslaved device:
    ping6 -c3 fe80::18f8:83ff:fe4b:7a2e%eth1
    ping6 -c3 ff02::1%eth1
    ssh -6 root@...0::18f8:83ff:fe4b:7a2e%eth1

David Ahern (3):
  net: l3mdev: Remove const from flowi6 arg to get_rt6_dst
  net: ipv6: Do not add multicast route for l3 master devices
  net: vrf: Handle ipv6 multicast and link-local addresses

 drivers/net/vrf.c       | 100 +++++++++++++++++++++++++++++++++++++++++++++---
 include/net/ip6_route.h |   2 +
 include/net/l3mdev.h    |   6 +--
 net/ipv6/addrconf.c     |   2 +-
 net/ipv6/icmp.c         |   2 +-
 net/ipv6/route.c        |   5 ++-
 net/l3mdev/l3mdev.c     |   2 +-
 7 files changed, 105 insertions(+), 14 deletions(-)

-- 
2.1.4