From: Pablo Neira Ayuso <pablo@netfilter.org>
To: netfilter-devel@vger.kernel.org
Cc: davem@davemloft.net, netdev@vger.kernel.org
Subject: [PATCH 0/9] Netfilter updates for net-next
Date: Sat, 29 Aug 2015 00:50:08 +0200 [thread overview]
Message-ID: <1440802217-13080-1-git-send-email-pablo@netfilter.org> (raw)
Hi David,
The following patchset contains Netfilter/IPVS updates for your net-next tree.
In sum, patches to address fallout from the previous round plus updates from
the IPVS folks via Simon Horman, they are:
1) Add a new scheduler to IPVS: The weighted overflow scheduling algorithm
directs network connections to the server with the highest weight that is
currently available and overflows to the next when active connections exceed
the node's weight. From Raducu Deaconu.
2) Fix locking ordering in IPVS, always take rtnl_lock in first place. Patch
from Julian Anastasov.
3) Allow to indicate the MTU to the IPVS in-kernel state sync daemon. From
Julian Anastasov.
4) Enhance multicast configuration for the IPVS state sync daemon. Also from
Julian.
5) Resolve sparse warnings in the nf_dup modules.
6) Fix a linking problem when CONFIG_NF_DUP_IPV6 is not set.
7) Add ICMP codes 5 and 6 to IPv6 REJECT target, they are more informative
subsets of code 1. From Andreas Herz.
8) Revert the jumpstack size calculation from mark_source_chains due to chain
depth miscalculations, from Florian Westphal.
9) Calm down more sparse warning around the Netfilter tree, again from Florian
Westphal.
You can pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Thanks!
----------------------------------------------------------------
The following changes since commit 81bf1c64e7fe08f956c74fe2b0f1fa6eb163bd91:
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next (2015-08-21 06:09:05 +0200)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git master
for you to fetch changes up to 851345c5bbb4644911f7c351c042559a71f57d19:
netfilter: reduce sparse warnings (2015-08-28 21:04:12 +0200)
----------------------------------------------------------------
Andreas Herz (1):
netfilter: ip6t_REJECT: added missing icmpv6 codes
Florian Westphal (2):
Revert "netfilter: xtables: compute exact size needed for jumpstack"
netfilter: reduce sparse warnings
Julian Anastasov (3):
ipvs: call rtnl_lock early
ipvs: add sync_maxlen parameter for the sync daemon
ipvs: add more mcast parameters for the sync daemon
Pablo Neira Ayuso (3):
netfilter: nf_dup: fix sparse warnings
netfilter: xt_TEE: use IS_ENABLED(CONFIG_NF_DUP_IPV6)
Merge tag 'ipvs2-for-v4.3' of https://git.kernel.org/.../horms/ipvs-next
Raducu Deaconu (1):
ipvs: Add ovf scheduler
include/net/ip_vs.h | 23 +-
include/uapi/linux/ip_vs.h | 5 +
include/uapi/linux/netfilter_ipv6/ip6t_REJECT.h | 4 +-
net/bridge/netfilter/ebtables.c | 2 +-
net/ipv4/netfilter/arp_tables.c | 19 +-
net/ipv4/netfilter/ip_tables.c | 28 +--
net/ipv4/netfilter/nft_dup_ipv4.c | 2 +-
net/ipv6/netfilter/ip6_tables.c | 23 +-
net/ipv6/netfilter/ip6t_REJECT.c | 6 +
net/ipv6/netfilter/ip6t_SYNPROXY.c | 2 +-
net/ipv6/netfilter/nf_dup_ipv6.c | 4 +-
net/netfilter/core.c | 3 -
net/netfilter/ipvs/Kconfig | 11 +
net/netfilter/ipvs/Makefile | 1 +
net/netfilter/ipvs/ip_vs_ctl.c | 143 +++++++++---
net/netfilter/ipvs/ip_vs_ovf.c | 86 ++++++++
net/netfilter/ipvs/ip_vs_sync.c | 269 +++++++++++++++--------
net/netfilter/nf_synproxy_core.c | 6 +-
net/netfilter/xt_TEE.c | 4 +-
19 files changed, 446 insertions(+), 195 deletions(-)
create mode 100644 net/netfilter/ipvs/ip_vs_ovf.c
next reply other threads:[~2015-08-28 22:44 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-08-28 22:50 Pablo Neira Ayuso [this message]
2015-08-28 22:50 ` [PATCH 1/9] ipvs: Add ovf scheduler Pablo Neira Ayuso
2015-08-28 22:50 ` [PATCH 2/9] ipvs: call rtnl_lock early Pablo Neira Ayuso
2015-08-28 22:50 ` [PATCH 3/9] ipvs: add sync_maxlen parameter for the sync daemon Pablo Neira Ayuso
2015-08-28 22:50 ` [PATCH 4/9] ipvs: add more mcast parameters " Pablo Neira Ayuso
2015-08-28 22:50 ` [PATCH 5/9] netfilter: nf_dup: fix sparse warnings Pablo Neira Ayuso
2015-08-28 22:50 ` [PATCH 6/9] netfilter: xt_TEE: use IS_ENABLED(CONFIG_NF_DUP_IPV6) Pablo Neira Ayuso
2015-08-28 22:50 ` [PATCH 7/9] netfilter: ip6t_REJECT: added missing icmpv6 codes Pablo Neira Ayuso
2015-08-28 22:50 ` [PATCH 8/9] Revert "netfilter: xtables: compute exact size needed for jumpstack" Pablo Neira Ayuso
2015-08-28 22:50 ` [PATCH 9/9] netfilter: reduce sparse warnings Pablo Neira Ayuso
2015-08-28 23:30 ` [PATCH 0/9] Netfilter updates for net-next David Miller
-- strict thread matches above, loose matches on Subject: below --
2020-05-29 17:50 Pablo Neira Ayuso
2020-06-01 18:46 ` David Miller
2018-06-02 23:14 Pablo Neira Ayuso
2014-07-31 19:26 Pablo Neira Ayuso
2014-07-31 21:12 ` David Miller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1440802217-13080-1-git-send-email-pablo@netfilter.org \
--to=pablo@netfilter.org \
--cc=davem@davemloft.net \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).