netdev - [PATCH net-next 00/15] mlxsw: Add tunnel devlink-trap support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20200119130100.3179857-1-idosch@idosch.org>
Date:   Sun, 19 Jan 2020 15:00:45 +0200
From:   Ido Schimmel <idosch@...sch.org>
To:     netdev@...r.kernel.org
Cc:     davem@...emloft.net, jiri@...lanox.com, amitc@...lanox.com,
        mlxsw@...lanox.com, Ido Schimmel <idosch@...lanox.com>
Subject: [PATCH net-next 00/15] mlxsw: Add tunnel devlink-trap support

From: Ido Schimmel <idosch@...lanox.com>

This patch set from Amit adds support in mlxsw for tunnel traps and a
few additional layer 3 traps that can report drops and exceptions via
devlink-trap.

These traps allow the user to more quickly diagnose problems relating to
tunnel decapsulation errors, such as packet being too short to
decapsulate or a packet containing wrong GRE key in its GRE header.

Patch set overview:

Patches #1-#4 add three additional layer 3 traps. Two of which are
mlxsw-specific as they relate to hardware-specific errors. The patches
include documentation of each trap and selftests.

Patches #5-#8 are preparations. They ensure that the correct ECN bits
are set in the outer header during IPinIP encapsulation and that packets
with an invalid ECN combination in underlay and overlay are trapped to
the kernel and not decapsulated in hardware.

Patches #9-#15 add support for two tunnel related traps. Each trap is
documented and selftested using both VXLAN and IPinIP tunnels, if
applicable.

Amit Cohen (15):
  mlxsw: Add irif and erif disabled traps
  selftests: devlink_trap_l3_drops: Add test cases of irif and erif
    disabled
  devlink: Add non-routable packet trap
  mlxsw: Add NON_ROUTABLE trap
  mlxsw: reg: Add Tunneling IPinIP Encapsulation ECN Mapping Register
  mlxsw: reg: Add Tunneling IPinIP Decapsulation ECN Mapping Register
  mlxsw: Add ECN configurations with IPinIP tunnels
  mlxsw: spectrum_trap: Reorder cases according to enum order
  devlink: Add tunnel generic packet traps
  mlxsw: Add tunnel devlink-trap support
  selftests: devlink_trap_tunnel_vxlan: Add test case for decap_error
  selftests: devlink_trap_tunnel_ipip: Add test case for decap_error
  devlink: Add overlay source MAC is multicast trap
  mlxsw: Add OVERLAY_SMAC_MC trap
  selftests: devlink_trap_tunnel_vxlan: Add test case for
    overlay_smac_is_mc

 .../networking/devlink/devlink-trap.rst       |  19 +
 Documentation/networking/devlink/mlxsw.rst    |  22 ++
 drivers/net/ethernet/mellanox/mlxsw/reg.h     |  89 +++++
 .../net/ethernet/mellanox/mlxsw/spectrum.c    |   2 -
 .../ethernet/mellanox/mlxsw/spectrum_ipip.c   |  60 ++++
 .../ethernet/mellanox/mlxsw/spectrum_router.c |  10 +
 .../ethernet/mellanox/mlxsw/spectrum_router.h |   3 +
 .../ethernet/mellanox/mlxsw/spectrum_trap.c   |  52 ++-
 drivers/net/ethernet/mellanox/mlxsw/trap.h    |   5 +
 include/net/devlink.h                         |  12 +
 net/core/devlink.c                            |   4 +
 .../net/mlxsw/devlink_trap_l3_drops.sh        | 112 ++++++
 .../net/mlxsw/devlink_trap_tunnel_ipip.sh     | 265 ++++++++++++++
 .../net/mlxsw/devlink_trap_tunnel_vxlan.sh    | 330 ++++++++++++++++++
 14 files changed, 981 insertions(+), 4 deletions(-)
 create mode 100755 tools/testing/selftests/drivers/net/mlxsw/devlink_trap_tunnel_ipip.sh
 create mode 100755 tools/testing/selftests/drivers/net/mlxsw/devlink_trap_tunnel_vxlan.sh

-- 
2.24.1