From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from orbyte.nwl.cc ([151.80.46.58]:51726 "EHLO orbyte.nwl.cc" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751998AbeBTNGA (ORCPT ); Tue, 20 Feb 2018 08:06:00 -0500 Date: Tue, 20 Feb 2018 14:05:49 +0100 From: Phil Sutter To: David Miller Cc: laforge@gnumonks.org, fw@strlen.de, daniel@iogearbox.net, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, alexei.starovoitov@gmail.com Subject: Re: [PATCH RFC 0/4] net: add bpfilter Message-ID: <20180220130549.GA4196@orbyte.nwl.cc> References: <20180219152746.GH5490@nataraja> <20180219.103139.2230101523652161323.davem@davemloft.net> <20180219170939.GF15918@orbyte.nwl.cc> <20180219.121537.1539564190955393526.davem@davemloft.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180219.121537.1539564190955393526.davem@davemloft.net> Sender: netdev-owner@vger.kernel.org List-ID: Hi David, On Mon, Feb 19, 2018 at 12:15:37PM -0500, David Miller wrote: > From: Phil Sutter > Date: Mon, 19 Feb 2018 18:09:39 +0100 > > > What puzzles me about your argumentation is that you seem to propose for > > the kernel to cover up flaws in userspace. Spinning this concept further > > would mean that if there would be an old bug in iproute2 we should think > > of adding a workaround to rtnetlink interface in kernel because > > containers will keep the old iproute2 binary? Or am I (hopefully) just > > missing your point? > > I'll answer this with a question. I tried to remove UFO entirely from > the kernel, did you see how that went? :) I didn't follow back then, but found mails about KVM live migration breakage when moving to a kernel without UFO. But isn't that a problem with how virtio_net optimizes things? Florian recently told me how iptables CHECKSUM target was mainly introduced to overcome a different problem in the same area. So all this is kernel covering up for kernel problems. My question was about covering up for userspace bugs in kernelspace. If you think that is preferable over fixing userspace, I have to put that in consideration when dealing with userspace issues. Cheers, Phil