* [Openvpn-devel] [RFC ovpn net-next 1/2] ovpn: extend statistics with per-peer drop and event counters
@ 2026-09-04 21:12 Marco Baffo
2026-09-04 21:12 ` [Openvpn-devel] [RFC ovpn net-next 2/2] ovpn: export detailed statistics via ethtool Marco Baffo
0 siblings, 1 reply; 2+ messages in thread
From: Marco Baffo @ 2026-09-04 21:12 UTC (permalink / raw)
To: openvpn-devel; +Cc: Antonio Quartulli
Drops are currently accounted only via the undifferentiated netdev
rx/tx_dropped counters, hiding the actual drop reason. Add per-peer
atomic64_t counters (struct ovpn_peer_estats) for the significant
drop reasons and events in the data path:
* RX: decrypt errors, replay errors, unknown key-id, unsupported
inner protocol, RPF check failures
* TX: encrypt errors, IV exhaustion, missing primary key, missing
transport, GSO segmentation errors
* events: keepalives received/sent, endpoint floats
Only ovpn-specific drop reasons are covered. Generic
ENOMEM failures and teardown races are not accounted.
Export the counters in a new OVPN_A_PEER_ESTATS nest in the
OVPN_CMD_PEER_GET reply and teach ovpn-cli to print them.
Signed-off-by: Marco Baffo <marco@mandelbit.com>
---
Documentation/netlink/specs/ovpn.yaml | 62 +++++++++++++++++++++
drivers/net/ovpn/io.c | 25 +++++++--
drivers/net/ovpn/netlink-gen.c | 19 ++++++-
drivers/net/ovpn/netlink-gen.h | 3 +-
drivers/net/ovpn/netlink.c | 37 +++++++++++-
drivers/net/ovpn/peer.c | 5 ++
drivers/net/ovpn/peer.h | 2 +
drivers/net/ovpn/stats.h | 33 +++++++++++
include/uapi/linux/ovpn.h | 20 +++++++
tools/testing/selftests/net/ovpn/ovpn-cli.c | 60 ++++++++++++++++++++
10 files changed, 259 insertions(+), 7 deletions(-)
diff --git a/Documentation/netlink/specs/ovpn.yaml b/Documentation/netlink/specs/ovpn.yaml
index ac50d1d7c00a..dd1bb96c312d 100644
--- a/Documentation/netlink/specs/ovpn.yaml
+++ b/Documentation/netlink/specs/ovpn.yaml
@@ -175,6 +175,68 @@ attribute-sets:
will advertise the tx-id to be used on the link.
checks:
max: 0xFFFFFF
+ -
+ name: estats
+ type: nest
+ doc: Extended statistics, per-peer drop/event counters
+ nested-attributes: peer-estats
+ -
+ name: peer-estats
+ attributes:
+ -
+ name: rx-decrypt-errors
+ type: uint
+ doc: Number of packets dropped due to decryption failure
+ -
+ name: rx-replay-errors
+ type: uint
+ doc: Number of packets dropped by the replay protection check
+ -
+ name: rx-unknown-keyid
+ type: uint
+ doc: Number of packets dropped due to unknown key ID
+ -
+ name: rx-unsupported-proto
+ type: uint
+ doc: >-
+ Number of packets dropped due to unsupported or malformed inner
+ protocol
+ -
+ name: rx-rpf-errors
+ type: uint
+ doc: Number of packets dropped by the reverse path filtering check
+ -
+ name: tx-encrypt-errors
+ type: uint
+ doc: Number of packets dropped due to encryption failure
+ -
+ name: tx-iv-exhausted
+ type: uint
+ doc: Number of packets dropped due to packet ID (IV) exhaustion
+ -
+ name: tx-no-key
+ type: uint
+ doc: Number of packets dropped due to missing primary key
+ -
+ name: tx-no-transport
+ type: uint
+ doc: Number of packets dropped due to missing transport socket
+ -
+ name: tx-gso-errors
+ type: uint
+ doc: Number of packets dropped due to GSO segmentation failure
+ -
+ name: keepalive-rx
+ type: uint
+ doc: Number of keepalive packets received from this peer
+ -
+ name: keepalive-tx
+ type: uint
+ doc: Number of keepalive packets sent to this peer
+ -
+ name: float-count
+ type: uint
+ doc: Number of times the peer endpoint floated
-
name: peer-new-input
subset-of: peer
diff --git a/drivers/net/ovpn/io.c b/drivers/net/ovpn/io.c
index 9a66d693039a..f9379d8c9c08 100644
--- a/drivers/net/ovpn/io.c
+++ b/drivers/net/ovpn/io.c
@@ -128,8 +128,10 @@ void ovpn_decrypt_post(void *data, int ret)
/* crypto is done, cleanup skb CB and its members */
kfree(ovpn_skb_cb(skb)->crypto_tmp);
- if (unlikely(ret < 0))
+ if (unlikely(ret < 0)) {
+ atomic64_inc(&peer->estats.rx_decrypt_errors);
goto drop;
+ }
/* PID sits after the op */
pid = (__force __be32 *)(skb->data + OVPN_OPCODE_SIZE);
@@ -138,6 +140,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_err_ratelimited("%s: PKT ID RX error for peer %u: %d\n",
netdev_name(peer->ovpn->dev), peer->id,
ret);
+ atomic64_inc(&peer->estats.rx_replay_errors);
goto drop;
}
@@ -165,6 +168,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_info_ratelimited("%s: NULL packet received from peer %u\n",
netdev_name(peer->ovpn->dev),
peer->id);
+ atomic64_inc(&peer->estats.rx_unsupported_proto);
goto drop;
}
@@ -172,6 +176,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_dbg_ratelimited("%s: ping received from peer %u\n",
netdev_name(peer->ovpn->dev),
peer->id);
+ atomic64_inc(&peer->estats.keepalive_rx);
/* we drop the packet, but this is not a failure */
consume_skb(skb);
goto drop_nocount;
@@ -179,6 +184,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_info_ratelimited("%s: unsupported protocol received from peer %u\n",
netdev_name(peer->ovpn->dev), peer->id);
+ atomic64_inc(&peer->estats.rx_unsupported_proto);
goto drop;
}
skb->protocol = proto;
@@ -193,6 +199,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_dbg_ratelimited("%s: RPF dropped packet from peer %u, src: %pI4\n",
netdev_name(peer->ovpn->dev),
peer->id, &ip_hdr(skb)->saddr);
+ atomic64_inc(&peer->estats.rx_rpf_errors);
goto drop;
}
@@ -225,6 +232,7 @@ void ovpn_recv(struct ovpn_peer *peer, struct sk_buff *skb)
net_info_ratelimited("%s: no available key for peer %u, key-id: %u\n",
netdev_name(peer->ovpn->dev), peer->id,
key_id);
+ atomic64_inc(&peer->estats.rx_unknown_keyid);
ovpn_dev_dstats_rx_dropped(peer->ovpn->dev);
kfree_skb(skb);
ovpn_peer_put(peer);
@@ -266,19 +274,24 @@ void ovpn_encrypt_post(void *data, int ret)
/* let userspace know so that a new key must be negotiated */
ovpn_nl_key_swap_notify(peer, ks->key_id);
+ atomic64_inc(&peer->estats.tx_iv_exhausted);
goto err;
}
- if (unlikely(ret < 0))
+ if (unlikely(ret < 0)) {
+ atomic64_inc(&peer->estats.tx_encrypt_errors);
goto err;
+ }
skb_mark_not_on_list(skb);
orig_len = skb->len;
rcu_read_lock();
sock = rcu_dereference(peer->sock);
- if (unlikely(!sock))
+ if (unlikely(!sock)) {
+ atomic64_inc(&peer->estats.tx_no_transport);
goto err_unlock;
+ }
switch (sock->sk->sk_protocol) {
case IPPROTO_UDP:
@@ -289,6 +302,7 @@ void ovpn_encrypt_post(void *data, int ret)
break;
default:
/* no transport configured yet */
+ atomic64_inc(&peer->estats.tx_no_transport);
goto err_unlock;
}
@@ -315,8 +329,10 @@ static bool ovpn_encrypt_one(struct ovpn_peer *peer, struct sk_buff *skb)
/* get primary key to be used for encrypting data */
ks = ovpn_crypto_key_slot_primary(&peer->crypto);
- if (unlikely(!ks))
+ if (unlikely(!ks)) {
+ atomic64_inc(&peer->estats.tx_no_key);
return false;
+ }
/* take a reference to the peer because the crypto code may run async.
* ovpn_encrypt_post() will release it upon completion
@@ -397,6 +413,7 @@ netdev_tx_t ovpn_net_xmit(struct sk_buff *skb, struct net_device *dev)
ret = PTR_ERR(segments);
net_err_ratelimited("%s: cannot segment payload packet: %d\n",
netdev_name(dev), ret);
+ atomic64_inc(&peer->estats.tx_gso_errors);
goto drop;
}
diff --git a/drivers/net/ovpn/netlink-gen.c b/drivers/net/ovpn/netlink-gen.c
index 92d2fdc17c2e..d427db6c563f 100644
--- a/drivers/net/ovpn/netlink-gen.c
+++ b/drivers/net/ovpn/netlink-gen.c
@@ -63,7 +63,7 @@ const struct nla_policy ovpn_keydir_nl_policy[OVPN_A_KEYDIR_NONCE_TAIL + 1] = {
[OVPN_A_KEYDIR_NONCE_TAIL] = NLA_POLICY_EXACT_LEN(OVPN_NONCE_TAIL_SIZE),
};
-const struct nla_policy ovpn_peer_nl_policy[OVPN_A_PEER_TX_ID + 1] = {
+const struct nla_policy ovpn_peer_nl_policy[OVPN_A_PEER_ESTATS + 1] = {
[OVPN_A_PEER_ID] = NLA_POLICY_FULL_RANGE(NLA_U32, &ovpn_a_peer_id_range),
[OVPN_A_PEER_REMOTE_IPV4] = { .type = NLA_BE32, },
[OVPN_A_PEER_REMOTE_IPV6] = NLA_POLICY_EXACT_LEN(16),
@@ -88,12 +88,29 @@ const struct nla_policy ovpn_peer_nl_policy[OVPN_A_PEER_TX_ID + 1] = {
[OVPN_A_PEER_LINK_RX_PACKETS] = { .type = NLA_UINT, },
[OVPN_A_PEER_LINK_TX_PACKETS] = { .type = NLA_UINT, },
[OVPN_A_PEER_TX_ID] = NLA_POLICY_FULL_RANGE(NLA_U32, &ovpn_a_peer_tx_id_range),
+ [OVPN_A_PEER_ESTATS] = NLA_POLICY_NESTED(ovpn_peer_estats_nl_policy),
};
const struct nla_policy ovpn_peer_del_input_nl_policy[OVPN_A_PEER_ID + 1] = {
[OVPN_A_PEER_ID] = NLA_POLICY_FULL_RANGE(NLA_U32, &ovpn_a_peer_id_range),
};
+const struct nla_policy ovpn_peer_estats_nl_policy[OVPN_A_PEER_ESTATS_FLOAT_COUNT + 1] = {
+ [OVPN_A_PEER_ESTATS_RX_DECRYPT_ERRORS] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_RX_REPLAY_ERRORS] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_RX_UNKNOWN_KEYID] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_RX_UNSUPPORTED_PROTO] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_RX_RPF_ERRORS] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_TX_ENCRYPT_ERRORS] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_TX_IV_EXHAUSTED] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_TX_NO_KEY] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_TX_NO_TRANSPORT] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_TX_GSO_ERRORS] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_KEEPALIVE_RX] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_KEEPALIVE_TX] = { .type = NLA_UINT, },
+ [OVPN_A_PEER_ESTATS_FLOAT_COUNT] = { .type = NLA_UINT, },
+};
+
const struct nla_policy ovpn_peer_new_input_nl_policy[OVPN_A_PEER_TX_ID + 1] = {
[OVPN_A_PEER_ID] = NLA_POLICY_FULL_RANGE(NLA_U32, &ovpn_a_peer_id_range),
[OVPN_A_PEER_REMOTE_IPV4] = { .type = NLA_BE32, },
diff --git a/drivers/net/ovpn/netlink-gen.h b/drivers/net/ovpn/netlink-gen.h
index 67cd85f86173..197e4a992d69 100644
--- a/drivers/net/ovpn/netlink-gen.h
+++ b/drivers/net/ovpn/netlink-gen.h
@@ -18,8 +18,9 @@ extern const struct nla_policy ovpn_keyconf_del_input_nl_policy[OVPN_A_KEYCONF_S
extern const struct nla_policy ovpn_keyconf_get_nl_policy[OVPN_A_KEYCONF_CIPHER_ALG + 1];
extern const struct nla_policy ovpn_keyconf_swap_input_nl_policy[OVPN_A_KEYCONF_PEER_ID + 1];
extern const struct nla_policy ovpn_keydir_nl_policy[OVPN_A_KEYDIR_NONCE_TAIL + 1];
-extern const struct nla_policy ovpn_peer_nl_policy[OVPN_A_PEER_TX_ID + 1];
+extern const struct nla_policy ovpn_peer_nl_policy[OVPN_A_PEER_ESTATS + 1];
extern const struct nla_policy ovpn_peer_del_input_nl_policy[OVPN_A_PEER_ID + 1];
+extern const struct nla_policy ovpn_peer_estats_nl_policy[OVPN_A_PEER_ESTATS_FLOAT_COUNT + 1];
extern const struct nla_policy ovpn_peer_new_input_nl_policy[OVPN_A_PEER_TX_ID + 1];
extern const struct nla_policy ovpn_peer_set_input_nl_policy[OVPN_A_PEER_TX_ID + 1];
diff --git a/drivers/net/ovpn/netlink.c b/drivers/net/ovpn/netlink.c
index 4dad85294198..9e03b4cefcee 100644
--- a/drivers/net/ovpn/netlink.c
+++ b/drivers/net/ovpn/netlink.c
@@ -551,9 +551,9 @@ static int ovpn_nl_send_peer(struct sk_buff *skb, const struct genl_info *info,
int flags)
{
const struct ovpn_bind *bind;
+ struct nlattr *attr, *estats;
struct ovpn_socket *sock;
int ret = -EMSGSIZE;
- struct nlattr *attr;
__be16 local_port;
void *hdr;
int id;
@@ -654,6 +654,41 @@ static int ovpn_nl_send_peer(struct sk_buff *skb, const struct genl_info *info,
atomic64_read(&peer->link_stats.tx.packets)))
goto err;
+ estats = nla_nest_start(skb, OVPN_A_PEER_ESTATS);
+ if (!estats)
+ goto err;
+
+ if (/* drop/event counters */
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_RX_DECRYPT_ERRORS,
+ atomic64_read(&peer->estats.rx_decrypt_errors)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_RX_REPLAY_ERRORS,
+ atomic64_read(&peer->estats.rx_replay_errors)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_RX_UNKNOWN_KEYID,
+ atomic64_read(&peer->estats.rx_unknown_keyid)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_RX_UNSUPPORTED_PROTO,
+ atomic64_read(&peer->estats.rx_unsupported_proto)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_RX_RPF_ERRORS,
+ atomic64_read(&peer->estats.rx_rpf_errors)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_TX_ENCRYPT_ERRORS,
+ atomic64_read(&peer->estats.tx_encrypt_errors)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_TX_IV_EXHAUSTED,
+ atomic64_read(&peer->estats.tx_iv_exhausted)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_TX_NO_KEY,
+ atomic64_read(&peer->estats.tx_no_key)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_TX_NO_TRANSPORT,
+ atomic64_read(&peer->estats.tx_no_transport)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_TX_GSO_ERRORS,
+ atomic64_read(&peer->estats.tx_gso_errors)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_KEEPALIVE_RX,
+ atomic64_read(&peer->estats.keepalive_rx)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_KEEPALIVE_TX,
+ atomic64_read(&peer->estats.keepalive_tx)) ||
+ nla_put_uint(skb, OVPN_A_PEER_ESTATS_FLOAT_COUNT,
+ atomic64_read(&peer->estats.floats)))
+ goto err;
+
+ nla_nest_end(skb, estats);
+
nla_nest_end(skb, attr);
genlmsg_end(skb, hdr);
diff --git a/drivers/net/ovpn/peer.c b/drivers/net/ovpn/peer.c
index b0519f9840d8..6235c3d8414a 100644
--- a/drivers/net/ovpn/peer.c
+++ b/drivers/net/ovpn/peer.c
@@ -77,6 +77,10 @@ static void ovpn_peer_keepalive_send(struct work_struct *work)
struct ovpn_peer *peer = container_of(work, struct ovpn_peer,
keepalive_work);
+ /* count attempted keepalives: if the TX path fails afterwards,
+ * keepalive_tx will include a transmission that was not sent
+ */
+ atomic64_inc(&peer->estats.keepalive_tx);
local_bh_disable();
ovpn_xmit_special(peer, ovpn_keepalive_message,
sizeof(ovpn_keepalive_message));
@@ -309,6 +313,7 @@ void ovpn_peer_endpoints_update(struct ovpn_peer *peer, struct sk_buff *skb)
spin_unlock_bh(&peer->lock);
+ atomic64_inc(&peer->estats.floats);
ovpn_nl_peer_float_notify(peer, &ss);
/* rehashing is required only in MP mode as P2P has one peer
diff --git a/drivers/net/ovpn/peer.h b/drivers/net/ovpn/peer.h
index dfa5c0037e02..5667bad91c31 100644
--- a/drivers/net/ovpn/peer.h
+++ b/drivers/net/ovpn/peer.h
@@ -60,6 +60,7 @@
* @rcu: used to free peer in an RCU safe way
* @release_entry: entry for the socket release list
* @keepalive_work: used to schedule keepalive sending
+ * @estats: per-peer drop/event counters
*/
struct ovpn_peer {
struct ovpn_priv *ovpn;
@@ -114,6 +115,7 @@ struct ovpn_peer {
struct rcu_head rcu;
struct llist_node release_entry;
struct work_struct keepalive_work;
+ struct ovpn_peer_estats estats;
};
/**
diff --git a/drivers/net/ovpn/stats.h b/drivers/net/ovpn/stats.h
index 3a45b97c0056..8b900e0c1121 100644
--- a/drivers/net/ovpn/stats.h
+++ b/drivers/net/ovpn/stats.h
@@ -25,6 +25,39 @@ struct ovpn_peer_stats {
struct ovpn_peer_stat tx;
};
+/**
+ * struct ovpn_peer_estats - per-peer drop/event counters
+ * @rx_decrypt_errors: packets dropped due to decryption/auth failure
+ * @rx_replay_errors: packets dropped by the replay protection check
+ * @rx_unknown_keyid: packets dropped due to unknown key ID
+ * @rx_unsupported_proto: packets dropped due to unsupported or malformed
+ * inner protocol
+ * @rx_rpf_errors: packets dropped by the reverse path filtering check
+ * @tx_encrypt_errors: packets dropped due to encryption failure
+ * @tx_iv_exhausted: packets dropped due to packet ID (IV) exhaustion
+ * @tx_no_key: packets dropped due to missing primary key
+ * @tx_no_transport: packets dropped due to missing transport socket
+ * @tx_gso_errors: packets dropped due to GSO segmentation failure
+ * @keepalive_rx: keepalive packets received from this peer
+ * @keepalive_tx: keepalive packets sent to this peer
+ * @floats: number of times the peer endpoint floated
+ */
+struct ovpn_peer_estats {
+ atomic64_t rx_decrypt_errors;
+ atomic64_t rx_replay_errors;
+ atomic64_t rx_unknown_keyid;
+ atomic64_t rx_unsupported_proto;
+ atomic64_t rx_rpf_errors;
+ atomic64_t tx_encrypt_errors;
+ atomic64_t tx_iv_exhausted;
+ atomic64_t tx_no_key;
+ atomic64_t tx_no_transport;
+ atomic64_t tx_gso_errors;
+ atomic64_t keepalive_rx;
+ atomic64_t keepalive_tx;
+ atomic64_t floats;
+};
+
void ovpn_peer_stats_init(struct ovpn_peer_stats *ps);
static inline void ovpn_peer_stats_increment(struct ovpn_peer_stat *stat,
diff --git a/include/uapi/linux/ovpn.h b/include/uapi/linux/ovpn.h
index 06690090a1a9..e5ed635c0373 100644
--- a/include/uapi/linux/ovpn.h
+++ b/include/uapi/linux/ovpn.h
@@ -56,11 +56,31 @@ enum {
OVPN_A_PEER_LINK_RX_PACKETS,
OVPN_A_PEER_LINK_TX_PACKETS,
OVPN_A_PEER_TX_ID,
+ OVPN_A_PEER_ESTATS,
__OVPN_A_PEER_MAX,
OVPN_A_PEER_MAX = (__OVPN_A_PEER_MAX - 1)
};
+enum {
+ OVPN_A_PEER_ESTATS_RX_DECRYPT_ERRORS = 1,
+ OVPN_A_PEER_ESTATS_RX_REPLAY_ERRORS,
+ OVPN_A_PEER_ESTATS_RX_UNKNOWN_KEYID,
+ OVPN_A_PEER_ESTATS_RX_UNSUPPORTED_PROTO,
+ OVPN_A_PEER_ESTATS_RX_RPF_ERRORS,
+ OVPN_A_PEER_ESTATS_TX_ENCRYPT_ERRORS,
+ OVPN_A_PEER_ESTATS_TX_IV_EXHAUSTED,
+ OVPN_A_PEER_ESTATS_TX_NO_KEY,
+ OVPN_A_PEER_ESTATS_TX_NO_TRANSPORT,
+ OVPN_A_PEER_ESTATS_TX_GSO_ERRORS,
+ OVPN_A_PEER_ESTATS_KEEPALIVE_RX,
+ OVPN_A_PEER_ESTATS_KEEPALIVE_TX,
+ OVPN_A_PEER_ESTATS_FLOAT_COUNT,
+
+ __OVPN_A_PEER_ESTATS_MAX,
+ OVPN_A_PEER_ESTATS_MAX = (__OVPN_A_PEER_ESTATS_MAX - 1)
+};
+
enum {
OVPN_A_KEYCONF_PEER_ID = 1,
OVPN_A_KEYCONF_SLOT,
diff --git a/tools/testing/selftests/net/ovpn/ovpn-cli.c b/tools/testing/selftests/net/ovpn/ovpn-cli.c
index f4effa7580c0..ecac71db769a 100644
--- a/tools/testing/selftests/net/ovpn/ovpn-cli.c
+++ b/tools/testing/selftests/net/ovpn/ovpn-cli.c
@@ -893,6 +893,66 @@ static int ovpn_handle_peer(struct nl_msg *msg, void (*arg)__always_unused)
fprintf(stderr, "\tLINK TX packets: %" PRIu64 "\n",
ovpn_nla_get_uint(pattrs[OVPN_A_PEER_LINK_TX_PACKETS]));
+ if (pattrs[OVPN_A_PEER_ESTATS]) {
+ struct nlattr *eattrs[OVPN_A_PEER_ESTATS_MAX + 1];
+
+ nla_parse(eattrs, OVPN_A_PEER_ESTATS_MAX,
+ nla_data(pattrs[OVPN_A_PEER_ESTATS]),
+ nla_len(pattrs[OVPN_A_PEER_ESTATS]), NULL);
+
+ if (eattrs[OVPN_A_PEER_ESTATS_RX_DECRYPT_ERRORS])
+ fprintf(stderr, "\tRX decrypt errors: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_RX_DECRYPT_ERRORS]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_RX_REPLAY_ERRORS])
+ fprintf(stderr, "\tRX replay errors: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_RX_REPLAY_ERRORS]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_RX_UNKNOWN_KEYID])
+ fprintf(stderr, "\tRX unknown key-id: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_RX_UNKNOWN_KEYID]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_RX_UNSUPPORTED_PROTO])
+ fprintf(stderr, "\tRX unsupported/malformed proto: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_RX_UNSUPPORTED_PROTO]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_RX_RPF_ERRORS])
+ fprintf(stderr, "\tRX RPF errors: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_RX_RPF_ERRORS]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_TX_ENCRYPT_ERRORS])
+ fprintf(stderr, "\tTX encrypt errors: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_TX_ENCRYPT_ERRORS]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_TX_IV_EXHAUSTED])
+ fprintf(stderr, "\tTX IV exhausted: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_TX_IV_EXHAUSTED]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_TX_NO_KEY])
+ fprintf(stderr, "\tTX no key: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_TX_NO_KEY]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_TX_NO_TRANSPORT])
+ fprintf(stderr, "\tTX no transport: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_TX_NO_TRANSPORT]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_TX_GSO_ERRORS])
+ fprintf(stderr, "\tTX GSO errors: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_TX_GSO_ERRORS]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_KEEPALIVE_RX])
+ fprintf(stderr, "\tKeepalive RX: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_KEEPALIVE_RX]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_KEEPALIVE_TX])
+ fprintf(stderr, "\tKeepalive TX: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_KEEPALIVE_TX]));
+
+ if (eattrs[OVPN_A_PEER_ESTATS_FLOAT_COUNT])
+ fprintf(stderr, "\tFloat count: %" PRIu64 "\n",
+ ovpn_nla_get_uint(eattrs[OVPN_A_PEER_ESTATS_FLOAT_COUNT]));
+ }
+
return NL_SKIP;
}
--
2.43.0
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [Openvpn-devel] [RFC ovpn net-next 2/2] ovpn: export detailed statistics via ethtool
2026-09-04 21:12 [Openvpn-devel] [RFC ovpn net-next 1/2] ovpn: extend statistics with per-peer drop and event counters Marco Baffo
@ 2026-09-04 21:12 ` Marco Baffo
0 siblings, 0 replies; 2+ messages in thread
From: Marco Baffo @ 2026-09-04 21:12 UTC (permalink / raw)
To: openvpn-devel; +Cc: Antonio Quartulli
Detailed per-peer counters are currently available only through
netlink. Maintain device-wide copies of the same counters, incremented
together with the per-peer ones, and expose them through ethtool.
Store the device-wide counters in per-CPU storage and aggregate them
when queried, avoiding an additional device-wide atomic update in
packet processing paths. The totals remain monotonic across peer
deletion and interface down/up.
Also count packets dropped because no peer matched the source (RX)
or destination (TX) address, and locally generated packets with an
invalid protocol. These cannot be attributed to an individual peer
and are therefore exported via ethtool only.
Signed-off-by: Marco Baffo <marco@mandelbit.com>
---
drivers/net/ovpn/io.c | 33 +++++++------
drivers/net/ovpn/main.c | 98 +++++++++++++++++++++++++++++++++++--
drivers/net/ovpn/ovpnpriv.h | 4 ++
drivers/net/ovpn/peer.c | 4 +-
drivers/net/ovpn/peer.h | 16 ++++++
drivers/net/ovpn/stats.h | 31 ++++++++++++
drivers/net/ovpn/udp.c | 5 +-
7 files changed, 171 insertions(+), 20 deletions(-)
diff --git a/drivers/net/ovpn/io.c b/drivers/net/ovpn/io.c
index f9379d8c9c08..7f3a56d7d1a8 100644
--- a/drivers/net/ovpn/io.c
+++ b/drivers/net/ovpn/io.c
@@ -129,7 +129,7 @@ void ovpn_decrypt_post(void *data, int ret)
kfree(ovpn_skb_cb(skb)->crypto_tmp);
if (unlikely(ret < 0)) {
- atomic64_inc(&peer->estats.rx_decrypt_errors);
+ ovpn_estats_inc(peer, rx_decrypt_errors);
goto drop;
}
@@ -140,7 +140,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_err_ratelimited("%s: PKT ID RX error for peer %u: %d\n",
netdev_name(peer->ovpn->dev), peer->id,
ret);
- atomic64_inc(&peer->estats.rx_replay_errors);
+ ovpn_estats_inc(peer, rx_replay_errors);
goto drop;
}
@@ -168,7 +168,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_info_ratelimited("%s: NULL packet received from peer %u\n",
netdev_name(peer->ovpn->dev),
peer->id);
- atomic64_inc(&peer->estats.rx_unsupported_proto);
+ ovpn_estats_inc(peer, rx_unsupported_proto);
goto drop;
}
@@ -176,7 +176,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_dbg_ratelimited("%s: ping received from peer %u\n",
netdev_name(peer->ovpn->dev),
peer->id);
- atomic64_inc(&peer->estats.keepalive_rx);
+ ovpn_estats_inc(peer, keepalive_rx);
/* we drop the packet, but this is not a failure */
consume_skb(skb);
goto drop_nocount;
@@ -184,7 +184,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_info_ratelimited("%s: unsupported protocol received from peer %u\n",
netdev_name(peer->ovpn->dev), peer->id);
- atomic64_inc(&peer->estats.rx_unsupported_proto);
+ ovpn_estats_inc(peer, rx_unsupported_proto);
goto drop;
}
skb->protocol = proto;
@@ -199,7 +199,7 @@ void ovpn_decrypt_post(void *data, int ret)
net_dbg_ratelimited("%s: RPF dropped packet from peer %u, src: %pI4\n",
netdev_name(peer->ovpn->dev),
peer->id, &ip_hdr(skb)->saddr);
- atomic64_inc(&peer->estats.rx_rpf_errors);
+ ovpn_estats_inc(peer, rx_rpf_errors);
goto drop;
}
@@ -232,7 +232,7 @@ void ovpn_recv(struct ovpn_peer *peer, struct sk_buff *skb)
net_info_ratelimited("%s: no available key for peer %u, key-id: %u\n",
netdev_name(peer->ovpn->dev), peer->id,
key_id);
- atomic64_inc(&peer->estats.rx_unknown_keyid);
+ ovpn_estats_inc(peer, rx_unknown_keyid);
ovpn_dev_dstats_rx_dropped(peer->ovpn->dev);
kfree_skb(skb);
ovpn_peer_put(peer);
@@ -274,12 +274,12 @@ void ovpn_encrypt_post(void *data, int ret)
/* let userspace know so that a new key must be negotiated */
ovpn_nl_key_swap_notify(peer, ks->key_id);
- atomic64_inc(&peer->estats.tx_iv_exhausted);
+ ovpn_estats_inc(peer, tx_iv_exhausted);
goto err;
}
if (unlikely(ret < 0)) {
- atomic64_inc(&peer->estats.tx_encrypt_errors);
+ ovpn_estats_inc(peer, tx_encrypt_errors);
goto err;
}
@@ -289,7 +289,7 @@ void ovpn_encrypt_post(void *data, int ret)
rcu_read_lock();
sock = rcu_dereference(peer->sock);
if (unlikely(!sock)) {
- atomic64_inc(&peer->estats.tx_no_transport);
+ ovpn_estats_inc(peer, tx_no_transport);
goto err_unlock;
}
@@ -302,7 +302,7 @@ void ovpn_encrypt_post(void *data, int ret)
break;
default:
/* no transport configured yet */
- atomic64_inc(&peer->estats.tx_no_transport);
+ ovpn_estats_inc(peer, tx_no_transport);
goto err_unlock;
}
@@ -330,7 +330,7 @@ static bool ovpn_encrypt_one(struct ovpn_peer *peer, struct sk_buff *skb)
/* get primary key to be used for encrypting data */
ks = ovpn_crypto_key_slot_primary(&peer->crypto);
if (unlikely(!ks)) {
- atomic64_inc(&peer->estats.tx_no_key);
+ ovpn_estats_inc(peer, tx_no_key);
return false;
}
@@ -384,8 +384,11 @@ netdev_tx_t ovpn_net_xmit(struct sk_buff *skb, struct net_device *dev)
/* verify IP header size in network packet */
proto = ovpn_ip_check_protocol(skb);
- if (unlikely(!proto || skb->protocol != proto))
+ if (unlikely(!proto || skb->protocol != proto)) {
+ ovpn_dev_estats_inc(ovpn->estats,
+ OVPN_DEV_ESTAT_TX_BAD_PROTO);
goto drop_no_peer;
+ }
/* retrieve peer serving the destination IP of this packet */
peer = ovpn_peer_get_by_dst(ovpn, skb);
@@ -402,6 +405,8 @@ netdev_tx_t ovpn_net_xmit(struct sk_buff *skb, struct net_device *dev)
&ipv6_hdr(skb)->daddr);
break;
}
+ ovpn_dev_estats_inc(ovpn->estats,
+ OVPN_DEV_ESTAT_TX_NO_PEER);
goto drop_no_peer;
}
/* dst was needed for peer selection - it can now be dropped */
@@ -413,7 +418,7 @@ netdev_tx_t ovpn_net_xmit(struct sk_buff *skb, struct net_device *dev)
ret = PTR_ERR(segments);
net_err_ratelimited("%s: cannot segment payload packet: %d\n",
netdev_name(dev), ret);
- atomic64_inc(&peer->estats.tx_gso_errors);
+ ovpn_estats_inc(peer, tx_gso_errors);
goto drop;
}
diff --git a/drivers/net/ovpn/main.c b/drivers/net/ovpn/main.c
index 168cfe9b59a9..985bd2e56cf4 100644
--- a/drivers/net/ovpn/main.c
+++ b/drivers/net/ovpn/main.c
@@ -30,6 +30,7 @@ static void ovpn_priv_free(struct net_device *net)
{
struct ovpn_priv *ovpn = netdev_priv(net);
+ free_percpu(ovpn->estats);
kfree(ovpn->peers);
}
@@ -60,18 +61,29 @@ static int ovpn_mp_alloc(struct ovpn_priv *ovpn)
static int ovpn_net_init(struct net_device *dev)
{
struct ovpn_priv *ovpn = netdev_priv(dev);
- int err = gro_cells_init(&ovpn->gro_cells, dev);
+ int err;
+
+ ovpn->estats = netdev_alloc_pcpu_stats(struct ovpn_dev_estats);
+ if (!ovpn->estats)
+ return -ENOMEM;
+
+ err = gro_cells_init(&ovpn->gro_cells, dev);
if (err < 0)
- return err;
+ goto err_free_estats;
err = ovpn_mp_alloc(ovpn);
if (err < 0) {
gro_cells_destroy(&ovpn->gro_cells);
- return err;
+ goto err_free_estats;
}
return 0;
+
+err_free_estats:
+ free_percpu(ovpn->estats);
+ ovpn->estats = NULL;
+ return err;
}
static void ovpn_net_uninit(struct net_device *dev)
@@ -145,10 +157,90 @@ static void ovpn_get_drvinfo(struct net_device *dev,
strscpy(info->bus_info, "ovpn", sizeof(info->bus_info));
}
+/**
+ * struct ovpn_ethtool_stat - descriptor for one ethtool counter
+ * @name: counter name, as shown by ethtool -S
+ * @index: index of the counter within struct ovpn_dev_estats
+ */
+struct ovpn_ethtool_stat {
+ const char *name;
+ unsigned int index;
+};
+
+#define OVPN_ETHTOOL_ESTAT(_counter) \
+ { #_counter, OVPN_PEER_ESTAT_IDX(_counter) }
+
+static const struct ovpn_ethtool_stat ovpn_ethtool_stats[] = {
+ OVPN_ETHTOOL_ESTAT(rx_decrypt_errors),
+ OVPN_ETHTOOL_ESTAT(rx_replay_errors),
+ OVPN_ETHTOOL_ESTAT(rx_unknown_keyid),
+ OVPN_ETHTOOL_ESTAT(rx_unsupported_proto),
+ OVPN_ETHTOOL_ESTAT(rx_rpf_errors),
+ OVPN_ETHTOOL_ESTAT(tx_encrypt_errors),
+ OVPN_ETHTOOL_ESTAT(tx_iv_exhausted),
+ OVPN_ETHTOOL_ESTAT(tx_no_key),
+ OVPN_ETHTOOL_ESTAT(tx_no_transport),
+ OVPN_ETHTOOL_ESTAT(tx_gso_errors),
+ OVPN_ETHTOOL_ESTAT(keepalive_rx),
+ OVPN_ETHTOOL_ESTAT(keepalive_tx),
+ OVPN_ETHTOOL_ESTAT(floats),
+ /* device-only counters */
+ { "rx_no_peer", OVPN_DEV_ESTAT_RX_NO_PEER },
+ { "tx_no_peer", OVPN_DEV_ESTAT_TX_NO_PEER },
+ { "tx_bad_proto", OVPN_DEV_ESTAT_TX_BAD_PROTO },
+};
+
+static void ovpn_get_strings(struct net_device *dev, u32 stringset, u8 *data)
+{
+ unsigned int i;
+
+ if (stringset != ETH_SS_STATS)
+ return;
+
+ for (i = 0; i < ARRAY_SIZE(ovpn_ethtool_stats); i++)
+ ethtool_puts(&data, ovpn_ethtool_stats[i].name);
+}
+
+static int ovpn_get_sset_count(struct net_device *dev, int sset)
+{
+ if (sset == ETH_SS_STATS)
+ return ARRAY_SIZE(ovpn_ethtool_stats);
+
+ return -EOPNOTSUPP;
+}
+
+static void ovpn_get_ethtool_stats(struct net_device *dev,
+ struct ethtool_stats *stats, u64 *data)
+{
+ struct ovpn_priv *ovpn = netdev_priv(dev);
+ struct ovpn_dev_estats *estats;
+ const u64_stats_t *counter;
+ unsigned int start;
+ unsigned int i;
+ u64 value;
+ int cpu;
+
+ for (i = 0; i < ARRAY_SIZE(ovpn_ethtool_stats); i++) {
+ data[i] = 0;
+ for_each_possible_cpu(cpu) {
+ estats = per_cpu_ptr(ovpn->estats, cpu);
+ counter = &estats->counters[ovpn_ethtool_stats[i].index];
+ do {
+ start = u64_stats_fetch_begin(&estats->syncp);
+ value = u64_stats_read(counter);
+ } while (u64_stats_fetch_retry(&estats->syncp, start));
+ data[i] += value;
+ }
+ }
+}
+
static const struct ethtool_ops ovpn_ethtool_ops = {
.get_drvinfo = ovpn_get_drvinfo,
.get_link = ethtool_op_get_link,
.get_ts_info = ethtool_op_get_ts_info,
+ .get_strings = ovpn_get_strings,
+ .get_sset_count = ovpn_get_sset_count,
+ .get_ethtool_stats = ovpn_get_ethtool_stats,
};
static void ovpn_setup(struct net_device *dev)
diff --git a/drivers/net/ovpn/ovpnpriv.h b/drivers/net/ovpn/ovpnpriv.h
index 5898f6adada7..6e236880036e 100644
--- a/drivers/net/ovpn/ovpnpriv.h
+++ b/drivers/net/ovpn/ovpnpriv.h
@@ -15,6 +15,8 @@
#include <uapi/linux/if_link.h>
#include <uapi/linux/ovpn.h>
+#include "stats.h"
+
/**
* struct ovpn_peer_collection - container of peers for MultiPeer mode
* @by_id: table of peers index by ID
@@ -41,6 +43,7 @@ struct ovpn_peer_collection {
* @peer: in P2P mode, this is the only remote peer
* @gro_cells: pointer to the Generic Receive Offload cell
* @keepalive_work: struct used to schedule keepalive periodic job
+ * @estats: monotonic per-CPU device-wide drop/event counters
*/
struct ovpn_priv {
struct net_device *dev;
@@ -50,6 +53,7 @@ struct ovpn_priv {
struct ovpn_peer __rcu *peer;
struct gro_cells gro_cells;
struct delayed_work keepalive_work;
+ struct ovpn_dev_estats __percpu *estats;
};
#endif /* _NET_OVPN_OVPNSTRUCT_H_ */
diff --git a/drivers/net/ovpn/peer.c b/drivers/net/ovpn/peer.c
index 6235c3d8414a..248849ef5c74 100644
--- a/drivers/net/ovpn/peer.c
+++ b/drivers/net/ovpn/peer.c
@@ -80,7 +80,7 @@ static void ovpn_peer_keepalive_send(struct work_struct *work)
/* count attempted keepalives: if the TX path fails afterwards,
* keepalive_tx will include a transmission that was not sent
*/
- atomic64_inc(&peer->estats.keepalive_tx);
+ ovpn_estats_inc(peer, keepalive_tx);
local_bh_disable();
ovpn_xmit_special(peer, ovpn_keepalive_message,
sizeof(ovpn_keepalive_message));
@@ -313,7 +313,7 @@ void ovpn_peer_endpoints_update(struct ovpn_peer *peer, struct sk_buff *skb)
spin_unlock_bh(&peer->lock);
- atomic64_inc(&peer->estats.floats);
+ ovpn_estats_inc(peer, floats);
ovpn_nl_peer_float_notify(peer, &ss);
/* rehashing is required only in MP mode as P2P has one peer
diff --git a/drivers/net/ovpn/peer.h b/drivers/net/ovpn/peer.h
index 5667bad91c31..027958001174 100644
--- a/drivers/net/ovpn/peer.h
+++ b/drivers/net/ovpn/peer.h
@@ -118,6 +118,22 @@ struct ovpn_peer {
struct ovpn_peer_estats estats;
};
+/**
+ * ovpn_estats_inc - increment a counter in both the per-peer and the
+ * device-wide extended statistics
+ * @peer: peer whose counter should be incremented
+ * @counter: name of the counter member in struct ovpn_peer_estats
+ *
+ * Device-wide counters are monotonic, they do not decrease when a peer
+ * is deleted. For device only counters use ovpn_dev_estats_inc() instead.
+ */
+#define ovpn_estats_inc(peer, counter) \
+ do { \
+ atomic64_inc(&(peer)->estats.counter); \
+ ovpn_dev_estats_inc((peer)->ovpn->estats, \
+ OVPN_PEER_ESTAT_IDX(counter)); \
+ } while (0)
+
/**
* ovpn_peer_hold - increase reference counter
* @peer: the peer whose counter should be increased
diff --git a/drivers/net/ovpn/stats.h b/drivers/net/ovpn/stats.h
index 8b900e0c1121..763fe19a4938 100644
--- a/drivers/net/ovpn/stats.h
+++ b/drivers/net/ovpn/stats.h
@@ -58,6 +58,37 @@ struct ovpn_peer_estats {
atomic64_t floats;
};
+#define OVPN_PEER_ESTAT_COUNT \
+ (sizeof(struct ovpn_peer_estats) / sizeof(atomic64_t))
+#define OVPN_PEER_ESTAT_IDX(_counter) \
+ (offsetof(struct ovpn_peer_estats, _counter) / sizeof(atomic64_t))
+
+enum ovpn_dev_estat {
+ OVPN_DEV_ESTAT_RX_NO_PEER = OVPN_PEER_ESTAT_COUNT,
+ OVPN_DEV_ESTAT_TX_NO_PEER,
+ OVPN_DEV_ESTAT_TX_BAD_PROTO,
+ OVPN_DEV_ESTAT_COUNT,
+};
+
+struct ovpn_dev_estats {
+ u64_stats_t counters[OVPN_DEV_ESTAT_COUNT];
+ struct u64_stats_sync syncp;
+};
+
+static inline void
+ovpn_dev_estats_inc(struct ovpn_dev_estats __percpu *estats,
+ unsigned int index)
+{
+ struct ovpn_dev_estats *stats;
+
+ local_bh_disable();
+ stats = this_cpu_ptr(estats);
+ u64_stats_update_begin(&stats->syncp);
+ u64_stats_inc(&stats->counters[index]);
+ u64_stats_update_end(&stats->syncp);
+ local_bh_enable();
+}
+
void ovpn_peer_stats_init(struct ovpn_peer_stats *ps);
static inline void ovpn_peer_stats_increment(struct ovpn_peer_stat *stat,
diff --git a/drivers/net/ovpn/udp.c b/drivers/net/ovpn/udp.c
index 7f69e8890b5b..5ee196a8d430 100644
--- a/drivers/net/ovpn/udp.c
+++ b/drivers/net/ovpn/udp.c
@@ -116,8 +116,11 @@ static int ovpn_udp_encap_recv(struct sock *sk, struct sk_buff *skb)
else
peer = ovpn_peer_get_by_id(ovpn, peer_id);
- if (unlikely(!peer))
+ if (unlikely(!peer)) {
+ ovpn_dev_estats_inc(ovpn->estats,
+ OVPN_DEV_ESTAT_RX_NO_PEER);
goto drop;
+ }
/* pop off outer UDP header */
__skb_pull(skb, sizeof(struct udphdr));
--
2.43.0
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-09-04 21:13 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-04 21:12 [Openvpn-devel] [RFC ovpn net-next 1/2] ovpn: extend statistics with per-peer drop and event counters Marco Baffo
2026-09-04 21:12 ` [Openvpn-devel] [RFC ovpn net-next 2/2] ovpn: export detailed statistics via ethtool Marco Baffo
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.