netdev - Query: eBPF socket filter

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1bc2c8ee-e7ac-cf1b-6cd2-a0c1a7ab0afa@oracle.com>
Date:   Fri, 20 Apr 2018 23:18:01 -0700
From:   Tushar Dave <tushar.n.dave@...cle.com>
To:     netdev <netdev@...r.kernel.org>
Subject: Query: eBPF socket filter

Hi,

I am dealing with Reliable Datagram Socket (RDS) protocol and exploring
ways to filter RDS traffic using eBPF.

FYI, RDS sits on top of transport layer and works with
transport such as TCP and IB/RDMA. So RDS messages arrive in form of skb
(over TCP)and scatterlist (over IB/RDMA).

For RDS traffic over TCP, I am using ebpf program of type
BPF_PROG_TYPE_SOCKET_FILTER and with that my filter program receives
__sk_buff as bpf context. This works.
However, I cannot use BPF_PROG_TYPE_SOCKET_FILTER with struct
scatterlist. I am not sure if it would be appropriate to extend BPF
socket filter so that it also work with struct scatterlist?

Ideas/suggestions or any other alternatives please?

Thanks in advance,
-Tushar