linux.git/samples/sockmap/sockmap_kern.c, branch v4.17

bpf: sockmap, more BPF_SK_SKB_STREAM_VERDICT tests

2018-03-29T22:09:43+00:00

Add BPF_SK_SKB_STREAM_VERDICT tests for ingress hook. While
we do this also bring stream tests in-line with MSG based
testing.

A map for skb options is added for userland to push options
at BPF programs.

Signed-off-by: John Fastabend 
Signed-off-by: Daniel Borkmann

bpf: sockmap, add BPF_F_INGRESS tests

2018-03-29T22:09:43+00:00

Add a set of tests to verify ingress flag in redirect helpers
works correctly with various msg sizes.

Signed-off-by: John Fastabend 
Signed-off-by: Daniel Borkmann

bpf: sockmap sample test for bpf_msg_pull_data

2018-03-19T20:14:41+00:00

This adds an option to test the msg_pull_data helper. This
uses two options txmsg_start and txmsg_end to let the user
specify start and end bytes to pull.

The options can be used with txmsg_apply, txmsg_cork options
as well as with any of the basic tests, txmsg, txmsg_redir and
txmsg_drop (plus noisy variants) to run pull_data inline with
those tests. By giving user direct control over the variables
we can easily do negative testing as well as positive tests.

Signed-off-by: John Fastabend 
Acked-by: David S. Miller 
Signed-off-by: Daniel Borkmann

bpf: sockmap add SK_DROP tests

2018-03-19T20:14:41+00:00

Add tests for SK_DROP.

Signed-off-by: John Fastabend 
Acked-by: David S. Miller 
Signed-off-by: Daniel Borkmann

bpf: sockmap sample support for bpf_msg_cork_bytes()

2018-03-19T20:14:40+00:00

Add sample application support for the bpf_msg_cork_bytes helper. This
lets the user specify how many bytes each verdict should apply to.

Similar to apply_bytes() tests these can be run as a stand-alone test
when used without other options or inline with other tests by using
the txmsg_cork option along with any of the basic tests txmsg,
txmsg_redir, txmsg_drop.

Signed-off-by: John Fastabend 
Acked-by: David S. Miller 
Signed-off-by: Daniel Borkmann

bpf: sockmap, add sample option to test apply_bytes helper

2018-03-19T20:14:40+00:00

This adds an option to test the apply_bytes helper. This option lets
the user specify an int on the command line specifying how much data
each verdict should apply to.

When this is set a map entry is set with the bytes input by the user
and then the specified program --txmsg or --txmsg_redir will use the
value and set the applied data. If no other option is set then a
default --txmsg_apply program is run. This program will drop pkts
if an error is detected on the bytes map lookup. Useful to verify
the map lookup and apply helper are working and causing a hard
error if it is not.

Signed-off-by: John Fastabend 
Acked-by: David S. Miller 
Signed-off-by: Daniel Borkmann

bpf: sockmap sample, add option to attach SK_MSG program

2018-03-19T20:14:40+00:00

Add sockmap option to use SK_MSG program types.

Signed-off-by: John Fastabend 
Acked-by: David S. Miller 
Signed-off-by: Daniel Borkmann

bpf: avoid preempt enable/disable in sockmap using tcp_skb_cb region

2017-10-20T12:01:29+00:00

SK_SKB BPF programs are run from the socket/tcp context but early in
the stack before much of the TCP metadata is needed in tcp_skb_cb. So
we can use some unused fields to place BPF metadata needed for SK_SKB
programs when implementing the redirect function.

This allows us to drop the preempt disable logic. It does however
require an API change so sk_redirect_map() has been updated to
additionally provide ctx_ptr to skb. Note, we do however continue to
disable/enable preemption around actual BPF program running to account
for map updates.

Signed-off-by: John Fastabend 
Acked-by: Daniel Borkmann 
Acked-by: Alexei Starovoitov 
Signed-off-by: David S. Miller

bpf: convert sockmap field attach_bpf_fd2 to type

2017-08-28T18:13:21+00:00

In the initial sockmap API we provided strparser and verdict programs
using a single attach command by extending the attach API with a the
attach_bpf_fd2 field.

However, if we add other programs in the future we will be adding a
field for every new possible type, attach_bpf_fd(3,4,..). This
seems a bit clumsy for an API. So lets push the programs using two
new type fields.

   BPF_SK_SKB_STREAM_PARSER
   BPF_SK_SKB_STREAM_VERDICT

This has the advantage of having a readable name and can easily be
extended in the future.

Updates to samples and sockmap included here also generalize tests
slightly to support upcoming patch for multiple map support.

Signed-off-by: John Fastabend 
Fixes: 174a79ff9515 ("bpf: sockmap with sk redirect support")
Suggested-by: Alexei Starovoitov 
Acked-by: Alexei Starovoitov 
Signed-off-by: David S. Miller

bpf: sockmap sample program

2017-08-16T18:27:53+00:00

This program binds a program to a cgroup and then matches hard
coded IP addresses and adds these to a sockmap.

This will receive messages from the backend and send them to
the client.

     client:X <---> frontend:10000 client:X <---> backend:10001

To keep things simple this is only designed for 1:1 connections
using hard coded values. A more complete example would allow many
backends and clients.

To run,

 # sockmap 

Signed-off-by: John Fastabend 
Signed-off-by: David S. Miller