linux.git/net/netfilter/ipvs, branch v2.6.39

IPVS: fix netns if reading ip_vs_* procfs entries

2011-05-15T15:27:18+00:00

Without this patch every access to ip_vs in procfs will increase
the netns count i.e. an unbalanced get_net()/put_net().
(ipvsadm commands also use procfs.)
The result is you can't exit a netns if reading ip_vs_* procfs entries.

Signed-off-by: Hans Schillstrom 
Signed-off-by: Pablo Neira Ayuso

IPVS: init and cleanup restructuring

2011-05-10T07:52:47+00:00

DESCRIPTION
This patch tries to restore the initial init and cleanup
sequences that was before namspace patch.
Netns also requires action when net devices unregister
which has never been implemented. I.e this patch also
covers when a device moves into a network namespace,
and has to be released.

IMPLEMENTATION
The number of calls to register_pernet_device have been
reduced to one for the ip_vs.ko
Schedulers still have their own calls.

This patch adds a function __ip_vs_service_cleanup()
and an enable flag for the netfilter hooks.

The nf hooks will be enabled when the first service is loaded
and never disabled again, except when a namespace exit starts.

Signed-off-by: Hans Schillstrom 
Acked-by: Julian Anastasov 
[horms@verge.net.au: minor edit to changelog]
Signed-off-by: Simon Horman

IPVS: Change of socket usage to enable name space exit.

2011-05-10T07:52:33+00:00

If the sync daemons run in a name space while it crashes
or get killed, there is no way to stop them except for a reboot.
When all patches are there, ip_vs_core will handle register_pernet_(),
i.e. ip_vs_sync_init() and ip_vs_sync_cleanup() will be removed.

Kernel threads should not increment the use count of a socket.
By calling sk_change_net() after creating a socket this is avoided.
sock_release cant be used intead sk_release_kernel() should be used.

Thanks Eric W Biederman for your advices.

Signed-off-by: Hans Schillstrom 
[horms@verge.net.au: minor edit to changelog]
Signed-off-by: Simon Horman

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6

2011-04-11T14:27:24+00:00

* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6: (34 commits)
  net: Add support for SMSC LAN9530, LAN9730 and LAN89530
  mlx4_en: Restoring RX buffer pointer in case of failure
  mlx4: Sensing link type at device initialization
  ipv4: Fix "Set rt->rt_iif more sanely on output routes."
  MAINTAINERS: add entry for Xen network backend
  be2net: Fix suspend/resume operation
  be2net: Rename some struct members for clarity
  pppoe: drop PPPOX_ZOMBIEs in pppoe_flush_dev
  dsa/mv88e6131: add support for mv88e6085 switch
  ipv6: Enable RFS sk_rxhash tracking for ipv6 sockets (v2)
  be2net: Fix a potential crash during shutdown.
  bna: Fix for handling firmware heartbeat failure
  can: mcp251x: Allow pass IRQ flags through platform data.
  smsc911x: fix mac_lock acquision before calling smsc911x_mac_read
  iwlwifi: accept EEPROM version 0x423 for iwl6000
  rt2x00: fix cancelling uninitialized work
  rtlwifi: Fix some warnings/bugs
  p54usb: IDs for two new devices
  wl12xx: fix potential buffer overflow in testmode nvs push
  zd1211rw: reset rx idle timer from tasklet
  ...

IPVS: fix NULL ptr dereference in ip_vs_ctl.c ip_vs_genl_dump_daemons()

2011-04-04T13:25:18+00:00

ipvsadm -ln --daemon will trigger a Null pointer exception because
ip_vs_genl_dump_daemons() uses skb_net() instead of skb_sknet().

To prevent others from NULL ptr a check is made in ip_vs.h skb_net().

Signed-off-by: Hans Schillstrom 
Signed-off-by: Simon Horman 
Signed-off-by: Patrick McHardy

Fix common misspellings

2011-03-31T14:26:23+00:00

Fixes generated by 'codespell' and manually reviewed.

Signed-off-by: Lucas De Marchi

IPVS: Use global mutex in ip_vs_app.c

2011-03-22T03:39:24+00:00

As part of the work to make IPVS network namespace aware
__ip_vs_app_mutex was replaced by a per-namespace lock,
ipvs->app_mutex. ipvs->app_key is also supplied for debugging purposes.

Unfortunately this implementation results in ipvs->app_key residing
in non-static storage which at the very least causes a lockdep warning.

This patch takes the rather heavy-handed approach of reinstating
__ip_vs_app_mutex which will cover access to the ipvs->list_head
of all network namespaces.

[   12.610000] IPVS: Creating netns size=2456 id=0
[   12.630000] IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP)
[   12.640000] BUG: key ffff880003bbf1a0 not in .data!
[   12.640000] ------------[ cut here ]------------
[   12.640000] WARNING: at kernel/lockdep.c:2701 lockdep_init_map+0x37b/0x570()
[   12.640000] Hardware name: Bochs
[   12.640000] Pid: 1, comm: swapper Tainted: G        W 2.6.38-kexec-06330-g69b7efe-dirty #122
[   12.650000] Call Trace:
[   12.650000]  [] warn_slowpath_common+0x75/0xb0
[   12.650000]  [] warn_slowpath_null+0x15/0x20
[   12.650000]  [] lockdep_init_map+0x37b/0x570
[   12.650000]  [] ? trace_hardirqs_on+0xd/0x10
[   12.650000]  [] debug_mutex_init+0x38/0x50
[   12.650000]  [] __mutex_init+0x5c/0x70
[   12.650000]  [] __ip_vs_app_init+0x64/0x86
[   12.660000]  [] ? ip_vs_init+0x0/0xff
[   12.660000]  [] T.620+0x43/0x170
[   12.660000]  [] ? register_pernet_subsys+0x1a/0x40
[   12.660000]  [] ? ip_vs_init+0x0/0xff
[   12.660000]  [] ? ip_vs_init+0x0/0xff
[   12.660000]  [] register_pernet_operations+0x57/0xb0
[   12.660000]  [] ? ip_vs_init+0x0/0xff
[   12.670000]  [] register_pernet_subsys+0x29/0x40
[   12.670000]  [] ip_vs_app_init+0x10/0x12
[   12.670000]  [] ip_vs_init+0x4c/0xff
[   12.670000]  [] do_one_initcall+0x7a/0x12e
[   12.670000]  [] kernel_init+0x13e/0x1c2
[   12.670000]  [] kernel_thread_helper+0x4/0x10
[   12.670000]  [] ? restore_args+0x0/0x30
[   12.680000]  [] ? kernel_init+0x0/0x1c2
[   12.680000]  [] ? kernel_thread_helper+0x0/0x1global0

Signed-off-by: Simon Horman 
Cc: Ingo Molnar 
Cc: Eric Dumazet 
Cc: Julian Anastasov 
Cc: Hans Schillstrom 
Signed-off-by: David S. Miller

ipvs: fix a typo in __ip_vs_control_init()

2011-03-22T03:39:24+00:00

Reported-by: Ingo Molnar 
Signed-off-by: Eric Dumazet 
Cc: Simon Horman 
Cc: Julian Anastasov 
Acked-by: Simon Horman 
Signed-off-by: David S. Miller

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6

2011-03-15T20:03:27+00:00

Conflicts:
	Documentation/feature-removal-schedule.txt

IPVS: Add __ip_vs_control_{init,cleanup}_sysctl()

2011-03-15T00:37:01+00:00

Break out the portions of __ip_vs_control_init() and
__ip_vs_control_cleanup() where aren't necessary when
CONFIG_SYSCTL is undefined.

Signed-off-by: Simon Horman