lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:   Wed, 20 May 2020 19:28:36 +0200
From:   Guillaume Nault <>
To:     David Miller <>,
        Jakub Kicinski <>
Cc:, Jamal Hadi Salim <>,
        Cong Wang <>,
        Jiri Pirko <>,
        Benjamin LaHaise <>,
        Tom Herbert <>,
        Liel Shoshan <>,
        Rony Efraim <>
Subject: [PATCH net-next 0/2] flow_dissector, cls_flower: Add support for
 multiple MPLS Label Stack Entries

Currently, the flow dissector and the Flower classifier can only handle
the first entry of an MPLS label stack. This patch series generalises
the code to allow parsing and matching the labels that follow.

Patch 1 extends the flow dissector to parse MPLS LSEs until the Bottom
Of Stack bit is reached. The number of parsed LSEs is capped at
FLOW_DIS_MPLS_MAX (arbitrarily set to 7).

Patch 2 extends Flower. It defines new netlink attributes, which are
independent from the previous MPLS ones. Mixing the old and the new
attributes in a same filter is not allowed. For backward compatibility,
the old attributes are used when dumping filters that don't require the
new ones.

Guillaume Nault (2):
  flow_dissector: Parse multiple MPLS Label Stack Entries
  cls_flower: Support filtering on multiple MPLS Label Stack Entries

 include/net/flow_dissector.h |  14 +-
 include/uapi/linux/pkt_cls.h |  23 +++
 net/core/flow_dissector.c    |  49 ++++--
 net/sched/cls_flower.c       | 295 +++++++++++++++++++++++++++++++++--
 4 files changed, 347 insertions(+), 34 deletions(-)


Powered by blists - more mailing lists