lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Sat, 26 Feb 2022 19:25:19 -0800 From: Alexei Starovoitov <alexei.starovoitov@...il.com> To: Maxim Mikityanskiy <maximmi@...dia.com> Cc: bpf@...r.kernel.org, Alexei Starovoitov <ast@...nel.org>, Daniel Borkmann <daniel@...earbox.net>, Andrii Nakryiko <andrii@...nel.org>, netdev@...r.kernel.org, Tariq Toukan <tariqt@...dia.com>, Martin KaFai Lau <kafai@...com>, Song Liu <songliubraving@...com>, Yonghong Song <yhs@...com>, John Fastabend <john.fastabend@...il.com>, KP Singh <kpsingh@...nel.org>, "David S. Miller" <davem@...emloft.net>, Jakub Kicinski <kuba@...nel.org>, Petar Penkov <ppenkov@...gle.com>, Lorenz Bauer <lmb@...udflare.com>, Eric Dumazet <edumazet@...gle.com>, Hideaki YOSHIFUJI <yoshfuji@...ux-ipv6.org>, David Ahern <dsahern@...nel.org>, Shuah Khan <shuah@...nel.org>, Jesper Dangaard Brouer <hawk@...nel.org>, Nathan Chancellor <nathan@...nel.org>, Nick Desaulniers <ndesaulniers@...gle.com>, Joe Stringer <joe@...ium.io>, Florent Revest <revest@...omium.org>, linux-kselftest@...r.kernel.org, Toke Høiland-Jørgensen <toke@...e.dk>, Kumar Kartikeya Dwivedi <memxor@...il.com>, Florian Westphal <fw@...len.de> Subject: Re: [PATCH bpf-next v3 4/5] bpf: Add helpers to issue and check SYN cookies in XDP On Thu, Feb 24, 2022 at 05:11:44PM +0200, Maxim Mikityanskiy wrote: > @@ -7798,6 +7916,14 @@ xdp_func_proto(enum bpf_func_id func_id, const struct bpf_prog *prog) > return &bpf_tcp_check_syncookie_proto; > case BPF_FUNC_tcp_gen_syncookie: > return &bpf_tcp_gen_syncookie_proto; > + case BPF_FUNC_tcp_raw_gen_syncookie_ipv4: > + return &bpf_tcp_raw_gen_syncookie_ipv4_proto; > + case BPF_FUNC_tcp_raw_gen_syncookie_ipv6: > + return &bpf_tcp_raw_gen_syncookie_ipv6_proto; > + case BPF_FUNC_tcp_raw_check_syncookie_ipv4: > + return &bpf_tcp_raw_check_syncookie_ipv4_proto; > + case BPF_FUNC_tcp_raw_check_syncookie_ipv6: > + return &bpf_tcp_raw_check_syncookie_ipv6_proto; > #endif I understand that the main use case for new helpers is XDP specific, but why limit them to XDP? The feature looks generic and applicable to skb too.
Powered by blists - more mailing lists