netdev - Re: Need of advice for XDP sockets on top of the interfaces behind a Linux bonding device

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 26 Jan 2024 20:39:16 -0800
From: Jakub Kicinski <kuba@...nel.org>
To: Pavel Vazharov <pavel@...e.net>
Cc: Toke Høiland-Jørgensen <toke@...nel.org>,
 netdev@...r.kernel.org
Subject: Re: Need of advice for XDP sockets on top of the interfaces behind
 a Linux bonding device

On Sat, 27 Jan 2024 05:58:55 +0200 Pavel Vazharov wrote:
> > Well, it will be up to your application to ensure that it is not. The
> > XDP program will run before the stack sees the LACP management traffic,
> > so you will have to take some measure to ensure that any such management
> > traffic gets routed to the stack instead of to the DPDK application. My
> > immediate guess would be that this is the cause of those warnings?
>
> Thank you for the response.
> I already checked the XDP program.
> It redirects particular pools of IPv4 (TCP or UDP) traffic to the application.
> Everything else is passed to the Linux kernel.
> However, I'll check it again. Just to be sure.

What device driver are you using, if you don't mind sharing?
The pass thru code path may be much less well tested in AF_XDP
drivers.