linux.git/net/ipv6, branch v4.7-rc1 Linux kernel source tree udp: prevent skbs lingering in tunnel socket queues 2016-05-20T23:56:02+00:00 Hannes Frederic Sowa hannes@stressinduktion.org 2016-05-19T13:58:33+00:00 e5aed006be918af163eb397e45aa5ea6cefd5e01 In case we find a socket with encapsulation enabled we should call the encap_recv function even if just a udp header without payload is available. The callbacks are responsible for correctly verifying and dropping the packets. Also, in case the header validation fails for geneve and vxlan we shouldn't put the skb back into the socket queue, no one will pick them up there. Instead we can simply discard them in the respective encap_recv functions. Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Signed-off-by: David S. Miller <davem@davemloft.net> 
In case we find a socket with encapsulation enabled we should call
the encap_recv function even if just a udp header without payload is
available. The callbacks are responsible for correctly verifying and
dropping the packets.

Also, in case the header validation fails for geneve and vxlan we
shouldn't put the skb back into the socket queue, no one will pick
them up there.  Instead we can simply discard them in the respective
encap_recv functions.

Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
ip6_gre: Do not allow segmentation offloads GRE_CSUM is enabled with FOU/GUE 2016-05-20T23:25:52+00:00 Alexander Duyck aduyck@mirantis.com 2016-05-18T17:44:47+00:00 6a5536810180bb2c739df890a36cfa29da1914eb This patch addresses the same issue we had for IPv4 where enabling GRE with an inner checksum cannot be supported with FOU/GUE due to the fact that they will jump past the GRE header at it is treated like a tunnel header. Signed-off-by: Alexander Duyck <aduyck@mirantis.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
This patch addresses the same issue we had for IPv4 where enabling GRE with
an inner checksum cannot be supported with FOU/GUE due to the fact that
they will jump past the GRE header at it is treated like a tunnel header.

Signed-off-by: Alexander Duyck <aduyck@mirantis.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
ipv6: Don't reset inner headers in ip6_tnl_xmit 2016-05-20T22:03:17+00:00 Tom Herbert tom@herbertland.com 2016-05-18T16:06:24+00:00 3ee93eaf2bbfbe0083f71a18a265d48adbd5bb27 Since iptunnel_handle_offloads() is called in all paths we can probably drop the block in ip6_tnl_xmit that was checking for skb->encapsulation and resetting the inner headers. Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Since iptunnel_handle_offloads() is called in all paths we can
probably drop the block in ip6_tnl_xmit that was checking for
skb->encapsulation and resetting the inner headers.

Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
ip4ip6: Support for GSO/GRO 2016-05-20T22:03:17+00:00 Tom Herbert tom@herbertland.com 2016-05-18T16:06:23+00:00 b8921ca83eed2496108ee308e9a41c5084089680 Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
ip6ip6: Support for GSO/GRO 2016-05-20T22:03:17+00:00 Tom Herbert tom@herbertland.com 2016-05-18T16:06:22+00:00 815d22e55b0eba3bfb8f0ba532ce9ae364fee556 Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
ipv6: Set features for IPv6 tunnels 2016-05-20T22:03:17+00:00 Tom Herbert tom@herbertland.com 2016-05-18T16:06:21+00:00 51c052d4f5871554377278762065450b4e64f6d1 Need to set dev features, use same values that are used in GREv6. Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Need to set dev features, use same values that are used in GREv6.

Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
ip6_tunnel: Add support for fou/gue encapsulation 2016-05-20T22:03:17+00:00 Tom Herbert tom@herbertland.com 2016-05-18T16:06:20+00:00 b3a27b519b22d4bf03788f6826190d4c5a130b3c Add netlink and setup for encapsulation Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Add netlink and setup for encapsulation

Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
ip6_gre: Add support for fou/gue encapsulation 2016-05-20T22:03:16+00:00 Tom Herbert tom@herbertland.com 2016-05-18T16:06:19+00:00 1faf3d9f7c06c803397665ada1448f374e8f48e0 Add netlink and setup for encapsulation Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Add netlink and setup for encapsulation

Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
fou: Add encap ops for IPv6 tunnels 2016-05-20T22:03:16+00:00 Tom Herbert tom@herbertland.com 2016-05-18T16:06:18+00:00 aa3463d65e7b9f5ae322db4a12214c2cb041bc8e This patch add a new fou6 module that provides encapsulation operations for IPv6. Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
This patch add a new fou6 module that provides encapsulation
operations for IPv6.

Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
ip6_tun: Add infrastructure for doing encapsulation 2016-05-20T22:03:16+00:00 Tom Herbert tom@herbertland.com 2016-05-18T16:06:17+00:00 058214a4d1dfefed9f01a277fadd3590acb5f990 Add encap_hlen and ip_tunnel_encap structure to ip6_tnl. Add functions for getting encap hlen, setting up encap on a tunnel, performing encapsulation operation. Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net> 
Add encap_hlen and ip_tunnel_encap structure to ip6_tnl. Add functions
for getting encap hlen, setting up encap on a tunnel, performing
encapsulation operation.

Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>