netdev - Re: [PATCH net-next 0/6] net: add support for ip_tun

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 16 Sep 2019 15:17:26 +0800
From:   Xin Long <lucien.xin@...il.com>
To:     network dev <netdev@...r.kernel.org>
Cc:     davem <davem@...emloft.net>, Jiri Benc <jbenc@...hat.com>,
        Thomas Graf <tgraf@...g.ch>, William Tu <u9012063@...il.com>
Subject: Re: [PATCH net-next 0/6] net: add support for ip_tun_info options setting

On Mon, Sep 16, 2019 at 3:10 PM Xin Long <lucien.xin@...il.com> wrote:
>
> With this patchset, users can configure options with LWTUNNEL_IP(6)_OPTS
> by ip route encap for ersapn or vxlan lwtunnel. Note that in kernel part
> it won't parse the option details but do some check and memcpy only, and
> the options will be parsed by iproute in userspace.
>
> We also improve the vxlan and erspan options processing in this patchset.
>
> As an example I also wrote a patch for iproute2 that I will reply on this
> mail, with it we can add options for erspan lwtunnel like:
>
>    # ip net a a; ip net a b
>    # ip -n a l a eth0 type veth peer name eth0 netns b
>    # ip -n a l s eth0 up; ip -n b link set eth0 up
>    # ip -n a a a 10.1.0.1/24 dev eth0; ip -n b a a 10.1.0.2/24 dev eth0
>    # ip -n b l a erspan1 type erspan key 1 seq erspan 123 \
>         local 10.1.0.2 remote 10.1.0.1
>    # ip -n b a a 1.1.1.1/24 dev erspan1; ip -n b l s erspan1 up
>    # ip -n b r a 2.1.1.0/24 dev erspan1
>    # ip -n a l a erspan1 type erspan key 1 seq local 10.1.0.1 external
>    # ip -n a a a 2.1.1.1/24 dev erspan1; ip -n a l s erspan1 up
>    # ip -n a r a 1.1.1.0/24 encap ip id 1 erspan ver 1 idx 123 \
>         dst 10.1.0.2 dev erspan1
>    # ip -n a r s; ip net exec a ping 1.1.1.1 -c 1
the iproute2 patch for testing is as attached.

>
> Xin Long (6):
>   lwtunnel: add options process for arp request
>   lwtunnel: add LWTUNNEL_IP_OPTS support for lwtunnel_ip
>   lwtunnel: add LWTUNNEL_IP6_OPTS support for lwtunnel_ip6
>   vxlan: check tun_info options_len properly
>   erspan: fix the tun_info options_len check
>   erspan: make md work without TUNNEL_ERSPAN_OPT set
>
>  drivers/net/vxlan.c           |  6 +++--
>  include/uapi/linux/lwtunnel.h |  2 ++
>  net/ipv4/ip_gre.c             | 31 ++++++++++-------------
>  net/ipv4/ip_tunnel_core.c     | 59 +++++++++++++++++++++++++++++++++----------
>  net/ipv6/ip6_gre.c            | 35 +++++++++++++------------
>  5 files changed, 84 insertions(+), 49 deletions(-)
>
> --
> 2.1.0
>

Download attachment "0001-iproute_lwtunnel-add-support-options-for-erspan-meta.patch" of type "application/octet-stream" (7224 bytes)