From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-10.6 required=3.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_PASS,URIBL_BLOCKED,USER_AGENT_GIT,USER_IN_DEF_DKIM_WL autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 922EAC282CD for ; Tue, 29 Jan 2019 01:12:25 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 5BBED214DA for ; Tue, 29 Jan 2019 01:12:25 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="eag4o/mD" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727380AbfA2BMY (ORCPT ); Mon, 28 Jan 2019 20:12:24 -0500 Received: from mail-yb1-f202.google.com ([209.85.219.202]:33726 "EHLO mail-yb1-f202.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726993AbfA2BMY (ORCPT ); Mon, 28 Jan 2019 20:12:24 -0500 Received: by mail-yb1-f202.google.com with SMTP id y4so2285248ybi.0 for ; Mon, 28 Jan 2019 17:12:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=date:message-id:mime-version:subject:from:to:cc; bh=Zh77bA+a+kKxnrbb/haylRuUoJzrsEX6quJswff6at4=; b=eag4o/mD6/SRtBe7s4+AaRFdOgnL/+Or93W4HFGN2tEqqQv1a6HXP5mJiyUZr87tIX DGAjIicLDhNNzoeT2mG04d7FI7ajIF1LI8DOXX6w79stx8fhwSqk5x/FKLXk7kWiedIV 9HoeEBuY1vygZO0+TbEVublj2/xpkcQxVat+HgOXC5aQFwsobkxbVGV56Rb+qONjm9vK TL3mphdhVWIsqcaeiTKTYeVbLMXnrUlsPxIlBY128Y36c4Rxgwb1Mx+/uQC0nDJACtis B35jxIMixsAi6wur2nMqga6e7LZo+RHH0X8bM+caEet13KXytPck791v/qyh57dCVz09 pf/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:message-id:mime-version:subject:from:to:cc; bh=Zh77bA+a+kKxnrbb/haylRuUoJzrsEX6quJswff6at4=; b=htF4RAwOTVwPaDUCMCqaVWRJW73sT8JQQ3z5mFLKenF3wYTBxrLiV0xjIUhgiVA3/w WLD4X2z4xg31Wz57lxiD8qcvhuiu3HWIFcaRkg2xi8XbL9lu1Vz4k40CvJAJGZVobplh 7VipgkrzIUSZEvHwWep4jx7mfqiBTrwFAHP+JJFigiJHfYjDEmiUMhHWDjm/qZ4/wN28 rTYGL2xFMrCM+AEU/edvepl32RwV4HBpaIF25HRT6A/VNO8l2uoT4s39zzcoWBi0fOYM P66eRu4WcjRHri8NoeDKdLJnr9lINYTXblmLvNeM0OlMUPUP4zdQNxHkIL83iP/IpBfX Rn1w== X-Gm-Message-State: AHQUAubAxGbBCUMSLytbGNP6+6G8eHVyPvMCASLQsB9kL7xJsHXOmBPl Ve2gsW74RDZEBfaluP3Of9ZPgdqV X-Google-Smtp-Source: AHgI3Iahjgul+NXCX77Pj6X/towcRIhpwauQV4/Qy15vzM9W8+jiWxusA7XykcnOIHdoygVBueJWkQbF X-Received: by 2002:a25:6111:: with SMTP id v17mr1141659ybb.33.1548724342754; Mon, 28 Jan 2019 17:12:22 -0800 (PST) Date: Mon, 28 Jan 2019 17:12:13 -0800 Message-Id: <20190129011217.192510-1-posk@google.com> Mime-Version: 1.0 X-Mailer: git-send-email 2.20.1.495.gaa96b0ce6b-goog Subject: [PATCH bpf-next v3 0/4] bpf: add BPF_LWT_ENCAP_IP option to bpf_lwt_push_encap From: Peter Oskolkov To: Alexei Starovoitov , Daniel Borkmann , netdev@vger.kernel.org Cc: Peter Oskolkov , David Ahern , Willem de Bruijn , Peter Oskolkov Content-Type: text/plain; charset="UTF-8" Sender: netdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org This patchset implements BPF_LWT_ENCAP_IP mode in bpf_lwt_push_encap BPF helper. It enables BPF programs (specifically, BPF_PROG_TYPE_LWT_IN and BPF_PROG_TYPE_LWT_XMIT prog types) to add IP encapsulation headers to packets (e.g. IP/GRE, GUE, IPIP). This is useful when thousands of different short-lived flows should be encapped, each with different and dynamically determined destination. Although lwtunnels can be used in some of these scenarios, the ability to dynamically generate encap headers adds more flexibility, e.g. when routing depends on the state of the host (reflected in global bpf maps). V2 changes: Added flowi-based route lookup, IPv6 encapping, and encapping on ingress. V3 changes: incorporated David Ahern's suggestions: - added l3mdev check/oif (patch 2) - sync bpf.h from include/uapi into tools/include/uapi - selftest tweaks Peter Oskolkov (4): bpf: add plumbing for BPF_LWT_ENCAP_IP in bpf_lwt_push_encap bpf: implement BPF_LWT_ENCAP_IP mode in bpf_lwt_push_encap bpf: sync //bpf.h with tools//bpf.h selftests: bpf: add test_lwt_ip_encap selftest include/net/lwtunnel.h | 3 + include/uapi/linux/bpf.h | 23 +- net/core/filter.c | 47 ++- net/core/lwt_bpf.c | 147 +++++++++ tools/include/uapi/linux/bpf.h | 23 +- tools/testing/selftests/bpf/Makefile | 5 +- .../testing/selftests/bpf/test_lwt_ip_encap.c | 84 +++++ .../selftests/bpf/test_lwt_ip_encap.sh | 311 ++++++++++++++++++ 8 files changed, 632 insertions(+), 11 deletions(-) create mode 100644 tools/testing/selftests/bpf/test_lwt_ip_encap.c create mode 100755 tools/testing/selftests/bpf/test_lwt_ip_encap.sh -- 2.20.1.495.gaa96b0ce6b-goog