netdev - Re: [RFC PATCH bpf-next] bpf: Introduce bpf

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 24 May 2021 07:56:09 -0700
From:   Alexei Starovoitov <alexei.starovoitov@...il.com>
To:     Lorenz Bauer <lmb@...udflare.com>
Cc:     "David S . Miller" <davem@...emloft.net>,
        Daniel Borkmann <daniel@...earbox.net>,
        Andrii Nakryiko <andrii@...nel.org>,
        John Fastabend <john.fastabend@...il.com>,
        Networking <netdev@...r.kernel.org>, bpf <bpf@...r.kernel.org>,
        Kernel Team <kernel-team@...com>
Subject: Re: [RFC PATCH bpf-next] bpf: Introduce bpf_timer

On Mon, May 24, 2021 at 4:50 AM Lorenz Bauer <lmb@...udflare.com> wrote:
>
> On Thu, 20 May 2021 at 19:55, Alexei Starovoitov
> <alexei.starovoitov@...il.com> wrote:
> >
> > From: Alexei Starovoitov <ast@...nel.org>
> >
> > Introduce 'struct bpf_timer' that can be embedded in most BPF map types
> > and helpers to operate on it:
> > long bpf_timer_init(struct bpf_timer *timer, void *callback, int flags)
> > long bpf_timer_mod(struct bpf_timer *timer, u64 msecs)
> > long bpf_timer_del(struct bpf_timer *timer)
>
> I like invoking the callback with a pointer to the map element it was
> defined in, since it solves lifetime of the context and user space
> introspection of the same. I'm not so sure about being able to put it
> into all different kinds of maps, is that really going to be used?

Certainly. At least in array and hash maps.
The global data is an array.
A single global timer is a simple and easy to use pattern.

>
> It would be useful if Cong Wang could describe their use case, it's
> kind of hard to tell what the end goal is. Should user space be able
> to create and arm timers? Or just BPF? In the other thread it seems
> like a primitive for waiting on a timer is proposed. Why? It also begs
> the question how we would wait on multiple timers.

In the proposed api the same callback can be invoked for multiple timers.
The user space can create/destroy timers via prog_run cmd.
It will also destroy timers by map_delete_elem cmd.

> > + *
> > + * long bpf_timer_init(struct bpf_timer *timer, void *callback, int flags)
>
> In your selftest the callback has a type (int)(*callback)(struct
> bpf_map *map, int *key, struct map_elem *val).

Correct. I'll update the comment.

> > + *     Description
> > + *             Initialize the timer to call given static function.
> > + *     Return
> > + *             zero
> > + *
> > + * long bpf_timer_mod(struct bpf_timer *timer, u64 msecs)
> > + *     Description
> > + *             Set the timer expiration N msecs from the current time.
> > + *     Return
> > + *             zero
> > + *
> > + * long bpf_timer_del(struct bpf_timer *timer)
> > + *     Description
> > + *             Deactivate the timer.
> > + *     Return
> > + *             zero
> >   */
> >  #define __BPF_FUNC_MAPPER(FN)          \
> >         FN(unspec),                     \
> > @@ -4932,6 +4950,9 @@ union bpf_attr {
> >         FN(sys_bpf),                    \
> >         FN(btf_find_by_name_kind),      \
> >         FN(sys_close),                  \
> > +       FN(timer_init),                 \
> > +       FN(timer_mod),                  \
> > +       FN(timer_del),                  \
> >         /* */
>
> How can user space force stopping of timers (required IMO)?

We can add new commands, of course, but I don't think it's
necessary, since test_run can be used to achieve the same
and map_delete_elem will stop them too.

> >
> >  /* integer value in 'imm' field of BPF_CALL instruction selects which helper
> > @@ -6038,6 +6059,10 @@ struct bpf_spin_lock {
> >         __u32   val;
> >  };
> >
> > +struct bpf_timer {
> > +       __u64 opaque;
> > +};
> > +
>
> This might be clear already, but we won't be able to modify the size
> of bpf_timer later since it would break uapi, right?

Correct. The internal implementation can change. The 'opaque'
is just the pointer to the internal struct.
When do you think we'd need to change this uapi struct?