From mboxrd@z Thu Jan 1 00:00:00 1970 From: Xin Long Date: Tue, 13 Oct 2020 07:27:25 +0000 Subject: [PATCHv3 net-next 00/16] sctp: Implement RFC6951: UDP Encapsulation of SCTP Message-Id: List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: network dev , linux-sctp@vger.kernel.org Cc: Marcelo Ricardo Leitner , Neil Horman , Michael Tuexen , davem@davemloft.net, gnault@redhat.com, pabeni@redhat.com, willemdebruijn.kernel@gmail.com Description From the RFC: The Main Reasons: o To allow SCTP traffic to pass through legacy NATs, which do not provide native SCTP support as specified in [BEHAVE] and [NATSUPP]. o To allow SCTP to be implemented on hosts that do not provide direct access to the IP layer. In particular, applications can use their own SCTP implementation if the operating system does not provide one. Implementation Notes: UDP-encapsulated SCTP is normally communicated between SCTP stacks using the IANA-assigned UDP port number 9899 (sctp-tunneling) on both ends. There are circumstances where other ports may be used on either end, and it might be required to use ports other than the registered port. Each SCTP stack uses a single local UDP encapsulation port number as the destination port for all its incoming SCTP packets, this greatly simplifies implementation design. An SCTP implementation supporting UDP encapsulation MUST maintain a remote UDP encapsulation port number per destination address for each SCTP association. Again, because the remote stack may be using ports other than the well-known port, each port may be different from each stack. However, because of remapping of ports by NATs, the remote ports associated with different remote IP addresses may not be identical, even if they are associated with the same stack. Because the well-known port might not be used, implementations need to allow other port numbers to be specified as a local or remote UDP encapsulation port number through APIs. Patches: This patchset is using the udp4/6 tunnel APIs to implement the UDP Encapsulation of SCTP with not much change in SCTP protocol stack and with all current SCTP features keeped in Linux Kernel. 1 - 4: Fix some UDP issues that may be triggered by SCTP over UDP. 5 - 7: Process incoming UDP encapsulated packets and ICMP packets. 8 -10: Remote encap port's update by sysctl, sockopt and packets. 11-14: Process outgoing pakects with UDP encapsulated and its GSO. 15-16: Add the part from draft-tuexen-tsvwg-sctp-udp-encaps-cons-03. 17: Enable this feature. Tests: - lksctp-tools/src/func_tests with UDP Encapsulation enabled/disabled: Both make v4test and v6test passed. - sctp-tests with UDP Encapsulation enabled/disabled: repeatability/procdumps/sctpdiag/gsomtuchange/extoverflow/ sctphashtable passed. Others failed as expected due to those "iptables -p sctp" rules. - netperf on lo/netns/virtio_net, with gso enabled/disabled and with ip_checksum enabled/disabled, with UDP Encapsulation enabled/disabled: No clear performance dropped. v1->v2: - Fix some incorrect code in the patches 5,6,8,10,11,13,14,17, suggested by Marcelo. - Append two patches 15-16 to add the Additional Considerations for UDP Encapsulation of SCTP from draft-tuexen-tsvwg-sctp-udp-encaps-cons-03. v2->v3: - remove the cleanup code in patch 2, suggested by Willem. - remove the patch 3 and fix the checksum in the new patch 3 after talking with Paolo, Marcelo and Guillaume. - add 'select NET_UDP_TUNNEL' in patch 4 to solve a compiling error. - fix __be16 type cast warning in patch 8. - fix the wrong endian orders when setting values in 14,16. Xin Long (16): udp: check udp sock encap_type in __udp_lib_err udp6: move the mss check after udp gso tunnel processing udp: support sctp over udp in skb_udp_tunnel_segment sctp: create udp4 sock and add its encap_rcv sctp: create udp6 sock and set its encap_rcv sctp: add encap_err_lookup for udp encap socks sctp: add encap_port for netns sock asoc and transport sctp: add SCTP_REMOTE_UDP_ENCAPS_PORT sockopt sctp: allow changing transport encap_port by peer packets sctp: add udphdr to overhead when udp_port is set sctp: call sk_setup_caps in sctp_packet_transmit instead sctp: support for sending packet over udp4 sock sctp: support for sending packet over udp6 sock sctp: add the error cause for new encapsulation port restart sctp: handle the init chunk matching an existing asoc sctp: enable udp tunneling socks include/linux/sctp.h | 20 ++++++ include/net/netns/sctp.h | 8 +++ include/net/sctp/constants.h | 2 + include/net/sctp/sctp.h | 9 ++- include/net/sctp/sm.h | 4 ++ include/net/sctp/structs.h | 14 ++-- include/uapi/linux/sctp.h | 7 ++ net/ipv4/udp.c | 2 +- net/ipv4/udp_offload.c | 3 + net/ipv6/udp.c | 2 +- net/ipv6/udp_offload.c | 8 +-- net/sctp/Kconfig | 1 + net/sctp/associola.c | 4 ++ net/sctp/ipv6.c | 44 +++++++++---- net/sctp/offload.c | 6 +- net/sctp/output.c | 22 +++---- net/sctp/protocol.c | 148 +++++++++++++++++++++++++++++++++++++++---- net/sctp/sm_make_chunk.c | 21 ++++++ net/sctp/sm_statefuns.c | 52 +++++++++++++++ net/sctp/socket.c | 116 +++++++++++++++++++++++++++++++++ net/sctp/sysctl.c | 60 ++++++++++++++++++ 21 files changed, 503 insertions(+), 50 deletions(-) -- 2.1.0 From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-6.6 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, USER_AGENT_GIT autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 7DB8FC433DF for ; Tue, 13 Oct 2020 07:27:51 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 303D12063A for ; Tue, 13 Oct 2020 07:27:51 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="sMPDiGUt" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2390072AbgJMH1u (ORCPT ); Tue, 13 Oct 2020 03:27:50 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55344 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2390045AbgJMH1u (ORCPT ); Tue, 13 Oct 2020 03:27:50 -0400 Received: from mail-pj1-x1043.google.com (mail-pj1-x1043.google.com [IPv6:2607:f8b0:4864:20::1043]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 8E1CFC0613D0; Tue, 13 Oct 2020 00:27:50 -0700 (PDT) Received: by mail-pj1-x1043.google.com with SMTP id a1so1624272pjd.1; Tue, 13 Oct 2020 00:27:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id; bh=lo50OR7jo9MWVm6/fBrObBSNTOO9jkKyMFDTE5L9qas=; b=sMPDiGUtxJFMTvuwZlW/uNPiGKHHhcclbHMyORvirMvexTvzK+gdz5zHKEBPRM7/sE ZCPXJzz6Pyg28y0aGZkujbJIpwdnjaizRiai0MC3UEiQVNPJVslZq5UKK0TOu6c9QurO e9AH7MCFlR3SbLNe1ta2lyIdrndgP7AnzzntsAaYoDmiH3XQpr30gCptt2LxjXUHi5f+ TdY/w8xn7rRPwyrFsEREy+AobnyyuQfdH2ApIOdHp4n42ShL5KAxBhfDW+bq52rFTKYA NYStgTQQ2dRaqgZbgXA18yNMj8TRxY4ivEBRNfZoJiB+ppvqcKm8DKTIEyUkU4abPlzR HVgg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=lo50OR7jo9MWVm6/fBrObBSNTOO9jkKyMFDTE5L9qas=; b=W4JTldZZ6ghUAKHgXYLVhHbXdT9kjA2wBRhIedbOaiOkwenHIPzOse4IMv08Mkf5YZ WNo0a/DJyIF59d12uPIRsFwOP1H0JBDV5qE4kUawijA2cyFqaoCInuC6UH9cT4QymmNx w5AOZZv/AWcooNtnmx2ykbIh9P77B2wBJPIGjvvtjFL0LNAB+1X7DSCDmFUMyqeEbK34 A3JRzjJWaGKeRy22mv4FMllBhAw/kEnda1NLpAfYTe/KC6w7T4WeDq0W+uJx5Y9d5uZa 8EsLZf46TUL/G7KJy7BGYRN8OoQ3XXZWD+tlyHKgXJTqFqFqlL93dbN66UA2iEU3ihEC D4TQ== X-Gm-Message-State: AOAM533yBFDYYNw8/UAB8ZH2ZiqxC1f01pONyPhFM+aqZL+WkU+VLEAZ bLsawJTzYvUOgYPIXm9m8pg/Ns+8uJ4= X-Google-Smtp-Source: ABdhPJwDjsNQdr+l5/WbZs696Evq+T5z1fsYQ/OHmQVzzBVF//bc5P8U8P32rF8s0qk5yR3q9TE8QA== X-Received: by 2002:a17:902:a40e:b029:d3:c6fa:2650 with SMTP id p14-20020a170902a40eb02900d3c6fa2650mr26292776plq.29.1602574069752; Tue, 13 Oct 2020 00:27:49 -0700 (PDT) Received: from localhost ([209.132.188.80]) by smtp.gmail.com with ESMTPSA id x22sm21988454pfp.181.2020.10.13.00.27.48 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 13 Oct 2020 00:27:48 -0700 (PDT) From: Xin Long To: network dev , linux-sctp@vger.kernel.org Cc: Marcelo Ricardo Leitner , Neil Horman , Michael Tuexen , davem@davemloft.net, gnault@redhat.com, pabeni@redhat.com, willemdebruijn.kernel@gmail.com Subject: [PATCHv3 net-next 00/16] sctp: Implement RFC6951: UDP Encapsulation of SCTP Date: Tue, 13 Oct 2020 15:27:25 +0800 Message-ID: X-Mailer: git-send-email 2.1.0 Precedence: bulk List-ID: X-Mailing-List: linux-sctp@vger.kernel.org Message-ID: <20201013072725.7jr5chv_M_Fgi93v-b9TOh3d5Pd4Sgz8ucYmWlze_Cs@z> Description From the RFC: The Main Reasons: o To allow SCTP traffic to pass through legacy NATs, which do not provide native SCTP support as specified in [BEHAVE] and [NATSUPP]. o To allow SCTP to be implemented on hosts that do not provide direct access to the IP layer. In particular, applications can use their own SCTP implementation if the operating system does not provide one. Implementation Notes: UDP-encapsulated SCTP is normally communicated between SCTP stacks using the IANA-assigned UDP port number 9899 (sctp-tunneling) on both ends. There are circumstances where other ports may be used on either end, and it might be required to use ports other than the registered port. Each SCTP stack uses a single local UDP encapsulation port number as the destination port for all its incoming SCTP packets, this greatly simplifies implementation design. An SCTP implementation supporting UDP encapsulation MUST maintain a remote UDP encapsulation port number per destination address for each SCTP association. Again, because the remote stack may be using ports other than the well-known port, each port may be different from each stack. However, because of remapping of ports by NATs, the remote ports associated with different remote IP addresses may not be identical, even if they are associated with the same stack. Because the well-known port might not be used, implementations need to allow other port numbers to be specified as a local or remote UDP encapsulation port number through APIs. Patches: This patchset is using the udp4/6 tunnel APIs to implement the UDP Encapsulation of SCTP with not much change in SCTP protocol stack and with all current SCTP features keeped in Linux Kernel. 1 - 4: Fix some UDP issues that may be triggered by SCTP over UDP. 5 - 7: Process incoming UDP encapsulated packets and ICMP packets. 8 -10: Remote encap port's update by sysctl, sockopt and packets. 11-14: Process outgoing pakects with UDP encapsulated and its GSO. 15-16: Add the part from draft-tuexen-tsvwg-sctp-udp-encaps-cons-03. 17: Enable this feature. Tests: - lksctp-tools/src/func_tests with UDP Encapsulation enabled/disabled: Both make v4test and v6test passed. - sctp-tests with UDP Encapsulation enabled/disabled: repeatability/procdumps/sctpdiag/gsomtuchange/extoverflow/ sctphashtable passed. Others failed as expected due to those "iptables -p sctp" rules. - netperf on lo/netns/virtio_net, with gso enabled/disabled and with ip_checksum enabled/disabled, with UDP Encapsulation enabled/disabled: No clear performance dropped. v1->v2: - Fix some incorrect code in the patches 5,6,8,10,11,13,14,17, suggested by Marcelo. - Append two patches 15-16 to add the Additional Considerations for UDP Encapsulation of SCTP from draft-tuexen-tsvwg-sctp-udp-encaps-cons-03. v2->v3: - remove the cleanup code in patch 2, suggested by Willem. - remove the patch 3 and fix the checksum in the new patch 3 after talking with Paolo, Marcelo and Guillaume. - add 'select NET_UDP_TUNNEL' in patch 4 to solve a compiling error. - fix __be16 type cast warning in patch 8. - fix the wrong endian orders when setting values in 14,16. Xin Long (16): udp: check udp sock encap_type in __udp_lib_err udp6: move the mss check after udp gso tunnel processing udp: support sctp over udp in skb_udp_tunnel_segment sctp: create udp4 sock and add its encap_rcv sctp: create udp6 sock and set its encap_rcv sctp: add encap_err_lookup for udp encap socks sctp: add encap_port for netns sock asoc and transport sctp: add SCTP_REMOTE_UDP_ENCAPS_PORT sockopt sctp: allow changing transport encap_port by peer packets sctp: add udphdr to overhead when udp_port is set sctp: call sk_setup_caps in sctp_packet_transmit instead sctp: support for sending packet over udp4 sock sctp: support for sending packet over udp6 sock sctp: add the error cause for new encapsulation port restart sctp: handle the init chunk matching an existing asoc sctp: enable udp tunneling socks include/linux/sctp.h | 20 ++++++ include/net/netns/sctp.h | 8 +++ include/net/sctp/constants.h | 2 + include/net/sctp/sctp.h | 9 ++- include/net/sctp/sm.h | 4 ++ include/net/sctp/structs.h | 14 ++-- include/uapi/linux/sctp.h | 7 ++ net/ipv4/udp.c | 2 +- net/ipv4/udp_offload.c | 3 + net/ipv6/udp.c | 2 +- net/ipv6/udp_offload.c | 8 +-- net/sctp/Kconfig | 1 + net/sctp/associola.c | 4 ++ net/sctp/ipv6.c | 44 +++++++++---- net/sctp/offload.c | 6 +- net/sctp/output.c | 22 +++---- net/sctp/protocol.c | 148 +++++++++++++++++++++++++++++++++++++++---- net/sctp/sm_make_chunk.c | 21 ++++++ net/sctp/sm_statefuns.c | 52 +++++++++++++++ net/sctp/socket.c | 116 +++++++++++++++++++++++++++++++++ net/sctp/sysctl.c | 60 ++++++++++++++++++ 21 files changed, 503 insertions(+), 50 deletions(-) -- 2.1.0