lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <20240423223919.3385493-1-pablo@netfilter.org>
Date: Wed, 24 Apr 2024 00:39:07 +0200
From: Pablo Neira Ayuso <pablo@...filter.org>
To: netdev@...r.kernel.org
Cc: davem@...emloft.net,
	kuba@...nel.org,
	pabeni@...hat.com,
	edumazet@...gle.com,
	laforge@...ocom.org,
	pespin@...mocom.de,
	osmith@...mocom.de
Subject: [PATCH net-next 00/12] GTP driver updates for net-next

Hi,

The following patchset contains IPv6 GTP driver support for net-next,
this also includes IPv6 over IPv4 and vice-versa:

Patch #1 removes a unnecessary stack variable initialization in the
	 socket routine.

Patch #2 deals with GTP extension headers. This variable length extension
	 header to decapsulate packets accordingly. Otherwise, packets are
	 dropped when these extension headers are present which breaks
	 interoperation with other non-Linux based GTP implementations.

Patch #3 prepares for IPv6 support by moving IPv4 specific fields in PDP
	 context objects to a union.

Patch #4 adds IPv6 support while retaining backward compatibility.
	 Three new attributes allows to declare an IPv6 GTP tunnel
	 GTPA_FAMILY, GTPA_PEER_ADDR6 and GTPA_MS_ADDR6 as well as
	 IFLA_GTP_LOCAL6 to declare the IPv6 GTP UDP socket. Up to this
	 patch, only IPv6 outer in IPv6 inner is supported.

Patch #5 uses IPv6 address /64 prefix for UE/MS in the inner headers.
	 Unlike IPv4, which provides a 1:1 mapping between UE/MS,
	 IPv6 tunnel encapsulates traffic for /64 address as specified
	 by 3GPP TS. Patch has been split from Patch #4 to highlight
	 this behaviour.

Patch #6 passes up IPv6 link-local traffic, such as IPv6 SLAAC, for
	 handling to userspace so they are handled as control packets.

Patch #7 prepares to allow for GTP IPv4 over IPv6 and vice-versa by
	 moving IP specific debugging out of the function to build
	 IPv4 and IPv6 GTP packets.

Patch #8 generalizes TOS/DSCP handling following similar approach as
	 in the existing iptunnel infrastructure.

Patch #9 adds a helper function to build an IPv4 GTP packet in the outer
	 header.

Patch #10 adds a helper function to build an IPv6 GTP packet in the outer
	  header.

Patch #11 adds support for GTP IPv4-over-IPv6 and vice-versa.

Patch #12 allows to use the same TID/TEID (tunnel identifier) for inner
	  IPv4 and IPv6 packets for better UE/MS dual stack integration.

This series integrates with the osmocom.org project CI and TTCN-3 test
infrastructure (Oliver Smith) as well as the userspace libgtpnl library.

Thanks to Harald Welte, Oliver Smith and Pau Espin for reviewing and
providing feedback through the osmocom.org redmine platform to make this
happen.

Please, pull these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/pablo/gtp.git tags/gtp-24-04-24

Thanks.

----------------------------------------------------------------

The following changes since commit 8d03c1534d4ae136fd2c9e27f026157cb244b212:

  Merge branch 'selftests-drv-net-support-testing-with-a-remote-system' (2024-04-23 10:13:59 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/pablo/gtp.git tags/gtp-24-04-24

for you to fetch changes up to 1c0b778c54746b870a5297339ca36a43ed8fc701:

  gtp: identify tunnel via GTP device + GTP version + TEID + family (2024-04-23 23:44:37 +0200)

----------------------------------------------------------------
gtp pull request 24-04-24

----------------------------------------------------------------
Pablo Neira Ayuso (12):
      gtp: remove useless initialization
      gtp: properly parse extension headers
      gtp: prepare for IPv6 support
      gtp: add IPv6 support
      gtp: use IPv6 address /64 prefix for UE/MS
      gtp: pass up link local traffic to userspace socket
      gtp: move debugging to skbuff build helper function
      gtp: remove IPv4 and IPv6 header from context object
      gtp: add helper function to build GTP packets from an IPv4 packet
      gtp: add helper function to build GTP packets from an IPv6 packet
      gtp: support for IPv4-in-IPv6-GTP and IPv6-in-IPv4-GTP
      gtp: identify tunnel via GTP device + GTP version + TEID + family

 drivers/net/gtp.c            | 855 ++++++++++++++++++++++++++++++++++++-------
 include/net/gtp.h            |   5 +
 include/uapi/linux/gtp.h     |   3 +
 include/uapi/linux/if_link.h |   2 +
 4 files changed, 735 insertions(+), 130 deletions(-)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ