netdev - [PATCH net-next 0/3] set/match the tos/ttl fields of TC based IP tunnels

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1531844838-6065-1-git-send-email-ogerlitz@mellanox.com>
Date:   Tue, 17 Jul 2018 19:27:15 +0300
From:   Or Gerlitz <ogerlitz@...lanox.com>
To:     "David S. Miller" <davem@...emloft.net>
Cc:     netdev@...r.kernel.org, Or Gerlitz <ogerlitz@...lanox.com>
Subject: [PATCH net-next 0/3] set/match the tos/ttl fields of TC based IP tunnels

Hi Dave, 

This series comes to address the case to set (encap) and match (decap)
also the tos and ttl fields of TC based IP tunnels.

Example encap (1st one) and decap (2nd) that use the new fields 

tc filter add dev eth0_0 protocol ip parent ffff: prio 10 flower \
	src_mac e4:11:22:33:44:50 dst_mac e4:11:22:33:44:70  \
	action tunnel_key set src_ip 192.168.10.1 dst_ip 192.168.10.2 id 100 dst_port 4789 tos 0x30 \
	action mirred egress redirect dev vxlan_sys_4789

tc filter add dev vxlan_sys_4789 protocol ip parent ffff: prio 10 flower \
	enc_src_ip 192.168.10.2 enc_dst_ip 192.168.10.1 enc_key_id 100 enc_dst_port 4789 enc_tos 0x30 \
	src_mac e4:11:22:33:44:70 dst_mac e4:11:22:33:44:50 \
	action tunnel_key unset \
	action mirred egress redirect dev eth0_0

Or.

Or Gerlitz (3):
  net/sched: tunnel_key: Allow to set tos and ttl for tc based ip tunnels
  flow_dissector: Dissect tos and ttl from the tunnel info
  net/sched: cls_flower: Support matching on ip tos and ttl for tunnels

 include/net/flow_dissector.h              |  2 +-
 include/uapi/linux/pkt_cls.h              |  5 ++++
 include/uapi/linux/tc_act/tc_tunnel_key.h |  2 ++
 net/core/flow_dissector.c                 | 14 +++++++++-
 net/sched/act_tunnel_key.c                | 20 ++++++++++++--
 net/sched/cls_flower.c                    | 43 ++++++++++++++++++++-----------
 6 files changed, 67 insertions(+), 19 deletions(-)

-- 
2.5.5