netdev - [PATCH net-next 0/3] sfc: encapsulated filters

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <39d8923f-4400-506c-dd50-250636ff83fa@solarflare.com>
Date:   Thu, 26 Jan 2017 17:50:24 +0000
From:   Edward Cree <ecree@...arflare.com>
To:     <linux-net-drivers@...arflare.com>, <davem@...emloft.net>
CC:     <netdev@...r.kernel.org>
Subject: [PATCH net-next 0/3] sfc: encapsulated filters

This series adds support for setting up filters for encapsulated traffic on
SFC 8000-series adapters, which recognise VXLAN, GENEVE and NVGRE packets by
parsing packet headers.  (VXLAN and GENEVE will only be recognised if the
driver on the primary PF has notified the firmware of relevant UDP ports,
which this driver does not yet do.)
While the driver currently has no way of using these filters for flow
steering, it is nonetheless necessary to insert catch-all (aka 'default')
filters to direct this traffic, similar to the existing unencapsulated uni-
and multi-cast catch-all filters, as otherwise the traffic will be dropped
by the NIC - implementation details of the hardware filtering mean that the
traffic will not get matched on outer MAC address to unencapsulated catch-
all filters.  (Yes, this is a mess.)
Although this is, therefore, fixing a bug in the existing driver, it's a bug
which has existed since 8000 series support was added, and the fix involves
quite a big patch with an 'adding features' flavour to it, hence why this is
for net-next rather than net and stable.

Edward Cree (1):
  sfc: insert catch-all filters for encapsulated traffic

Jon Cooper (2):
  sfc: fixes to filter restore handling
  sfc: refactor debug-or-warnings printks

 drivers/net/ethernet/sfc/ef10.c       | 582 +++++++++++++++++++++++++---------
 drivers/net/ethernet/sfc/filter.h     |  41 ++-
 drivers/net/ethernet/sfc/mcdi.c       |  19 +-
 drivers/net/ethernet/sfc/net_driver.h |   9 +
 4 files changed, 497 insertions(+), 154 deletions(-)