From: Tanner Love <tannerlove.kernel@gmail.com>
To: netdev@vger.kernel.org
Cc: davem@davemloft.net, Alexei Starovoitov <ast@kernel.org>,
Daniel Borkmann <daniel@iogearbox.net>,
Andrii Nakryiko <andrii@kernel.org>,
Eric Dumazet <edumazet@google.com>,
Willem de Bruijn <willemb@google.com>,
Petar Penkov <ppenkov@google.com>,
Jakub Kicinski <kuba@kernel.org>,
Tanner Love <tannerlove@google.com>
Subject: [PATCH net-next v3 0/3] virtio_net: add optional flow dissection in virtio_net_hdr_to_skb
Date: Tue, 1 Jun 2021 18:18:37 -0400 [thread overview]
Message-ID: <20210601221841.1251830-1-tannerlove.kernel@gmail.com> (raw)
From: Tanner Love <tannerlove@google.com>
First patch extends the flow dissector BPF program type to accept
virtio-net header members.
Second patch uses this feature to add optional flow dissection in
virtio_net_hdr_to_skb(). This allows admins to define permitted
packets more strictly, for example dropping deprecated UDP_UFO
packets.
Third patch extends kselftest to cover this feature.
Tanner Love (3):
net: flow_dissector: extend bpf flow dissector support with vnet hdr
virtio_net: add optional flow dissection in virtio_net_hdr_to_skb
selftests/net: amend bpf flow dissector prog to do vnet hdr validation
drivers/net/bonding/bond_main.c | 2 +-
include/linux/skbuff.h | 26 ++-
include/linux/virtio_net.h | 25 ++-
include/net/flow_dissector.h | 6 +
include/uapi/linux/bpf.h | 6 +
net/core/filter.c | 55 +++++
net/core/flow_dissector.c | 27 ++-
net/core/sysctl_net_core.c | 9 +
tools/include/uapi/linux/bpf.h | 6 +
tools/testing/selftests/bpf/progs/bpf_flow.c | 188 +++++++++++++-----
.../selftests/bpf/test_flow_dissector.c | 181 +++++++++++++++--
.../selftests/bpf/test_flow_dissector.sh | 19 ++
12 files changed, 470 insertions(+), 80 deletions(-)
--
2.32.0.rc0.204.g9fa02ecfa5-goog
next reply other threads:[~2021-06-01 22:18 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-06-01 22:18 Tanner Love [this message]
2021-06-01 22:18 ` [PATCH net-next v3 1/3] net: flow_dissector: extend bpf flow dissector support with vnet hdr Tanner Love
2021-06-03 15:39 ` sdf
2021-06-01 22:18 ` [PATCH net-next v3 2/3] virtio_net: add optional flow dissection in virtio_net_hdr_to_skb Tanner Love
2021-06-03 15:54 ` sdf
2021-06-03 23:56 ` Alexei Starovoitov
2021-06-04 0:44 ` Willem de Bruijn
2021-06-04 2:04 ` Alexei Starovoitov
2021-06-01 22:18 ` [PATCH net-next v3 3/3] selftests/net: amend bpf flow dissector prog to do vnet hdr validation Tanner Love
2021-06-02 20:10 ` [PATCH net-next v3 0/3] virtio_net: add optional flow dissection in virtio_net_hdr_to_skb David Miller
2021-06-02 23:16 ` Alexei Starovoitov
2021-06-04 2:55 ` Jason Wang
2021-06-04 3:51 ` Willem de Bruijn
2021-06-04 6:43 ` Jason Wang
2021-06-04 14:43 ` Willem de Bruijn
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210601221841.1251830-1-tannerlove.kernel@gmail.com \
--to=tannerlove.kernel@gmail.com \
--cc=andrii@kernel.org \
--cc=ast@kernel.org \
--cc=daniel@iogearbox.net \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=kuba@kernel.org \
--cc=netdev@vger.kernel.org \
--cc=ppenkov@google.com \
--cc=tannerlove@google.com \
--cc=willemb@google.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.