netdev - Re: support for popping multiple MPLS labels with iproute2?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <alpine.LRH.2.20.1906041819440.7085@dhcp-10-175-213-181.vpn.oracle.com>
Date:   Tue, 4 Jun 2019 18:21:13 +0100 (BST)
From:   Alan Maguire <alan.maguire@...cle.com>
To:     David Ahern <dsahern@...il.com>
cc:     Alan Maguire <alan.maguire@...cle.com>, netdev@...r.kernel.org
Subject: Re: support for popping multiple MPLS labels with iproute2?

On Fri, 31 May 2019, David Ahern wrote:

> On 5/31/19 6:24 AM, Alan Maguire wrote:
> > I was wondering if there is a way to pop multiple MPLS labels at
> > once for local delivery using iproute2?
> > 
> > Adding multiple labels for encapsulation is supported via
> > label1/label2/... syntax, but I can't find a way to do the same
> > for popping multiple labels for local delivery.
> > 
> > For example if I run
> > 
> > # ip route add 192.168.1.0/24 encap mpls 100/200 via inet 192.168.1.101 \
> >    dev mytun mtu 1450
> > 
> > ...I'm looking for the equivalent command to pop both labels on the
> > target system for local delivery; something like
> > 
> > # ip -f mpls route add 100/200 dev lo
> > 
> > ...but that gets rejected as only a single label is expected.
> > 
> 
> as I recall the kernel driver only pops one and does a look for it.
> 
> Try:
> 
> ip -f mpls route add 100 dev lo
> ip -f mpls route add 200 dev lo
> 

That worked perfectly (once I remembered to run

sysctl -w net.ipv4.conf.lo.accept_local=1

...as well as on the tunnel). Thanks again!

Alan