Re: bpf_fib_lookup support for firewall mark

[Rumen Telbizov <rumen.telbizov@menlosecurity.com>]

[-- Attachment #1: Type: text/plain, Size: 937 bytes --]

Daniel, BPF list,

Over the last week or so David Ahern and I worked on a patchset that solves
the problem discussed here along with a self-test.

Attached here is a patchset of 3 files which covers the following:

[PATCH 1/3] bpf: Add support for mark with bpf_fib_lookup
[PATCH 2/3] tools: Update bpf header
[PATCH 3/3] selftests: Add selftests for fwmark support in bpf_fib_lookup

I have tested those against a very recent clone of the latest 5.13-rc7.
Self-test results look like this:

----
# ./test_bpf_fib_lookup.sh
[test_bpf_fib_lookup.sh] START
- Running test_egress_ipv4_fwmark
  * mark 0: PASS
  * mark 2: PASS
- Running test_egress_ipv6_fwmark
  * mark 0: PASS
  * mark 2: PASS
[test_bpf_fib_lookup.sh] PASS: 4 -- FAIL: 0
# echo $?
0
----

Let me know what you think and if there's anything else needed to incorporate
the patchset into the kernel as well as what you think the next steps should be.

Regards,
Rumen Telbizov

[-- Attachment #2: 0002-tools-Update-bpf-header.patch --]
[-- Type: application/x-patch, Size: 1121 bytes --]

[-- Attachment #3: 0003-selftests-Add-selftests-for-fwmark-support-in-bpf_fi.patch --]
[-- Type: application/x-patch, Size: 10687 bytes --]

[-- Attachment #4: 0001-bpf-Add-support-for-mark-with-bpf_fib_lookup.patch --]
[-- Type: application/x-patch, Size: 2832 bytes --]