From: Chris Friesen <chris.friesen@windriver.com>
To: netdev <netdev@vger.kernel.org>
Subject: [RFC PATCH] possible bug in handling of ipv4 route caching
Date: Thu, 7 Apr 2016 13:17:36 -0600 [thread overview]
Message-ID: <5706B250.1060303@windriver.com> (raw)
Hi,
We think we may have found a bug in the handling of ipv4 route caching,
and are curious what you think.
For local routes that require a particular output interface we do not
want to cache the result. Caching the result causes incorrect behaviour
when there are multiple source addresses on the interface. The end
result being that if the intended recipient is waiting on that interface
for the packet he won't receive it because it will be delivered on the
loopback interface and the IP_PKTINFO ipi_ifindex will be set to the
loopback interface as well.
This can be tested by running a program such as "dhcp_release" which
attempts to inject a packet on a particular interface so that it is
received by another program on the same board. The receiving process
should see an IP_PKTINFO ipi_ifndex value of the source interface
(e.g., eth1) instead of the loopback interface (e.g., lo). The packet
will still appear on the loopback interface in tcpdump but the important
aspect is that the CMSG info is correct.
For what it's worth, here's a patch that we've applied locally to deal
with the issue.
Chris
Signed-off-by: Allain Legacy <allain.legacy@windriver.com>
Signed-off-by: Chris Friesen <chris.friesen@windriver.com>
diff --git a/net/ipv4/route.c b/net/ipv4/route.c
index 02c6229..e965d4b 100644
--- a/net/ipv4/route.c
+++ b/net/ipv4/route.c
@@ -2045,6 +2045,17 @@ static struct rtable *__mkroute_output(const struct fib_result *res,
*/
if (fi && res->prefixlen < 4)
fi = NULL;
+ } else if ((type == RTN_LOCAL) && (orig_oif != 0)) {
+ /* For local routes that require a particular output interface
+ * we do not want to cache the result. Caching the result
+ * causes incorrect behaviour when there are multiple source
+ * addresses on the interface, the end result being that if the
+ * intended recipient is waiting on that interface for the
+ * packet he won't receive it because it will be delivered on
+ * the loopback interface and the IP_PKTINFO ipi_ifindex will
+ * be set to the loopback interface as well.
+ */
+ fi = NULL;
}
fnhe = NULL;
next reply other threads:[~2016-04-07 19:17 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-04-07 19:17 Chris Friesen [this message]
2016-04-07 21:20 ` [RFC PATCH] possible bug in handling of ipv4 route caching Julian Anastasov
2016-04-08 15:00 ` Chris Friesen
2016-04-08 15:08 ` [PATCH v2] route: do not cache fib route info on local routes with oif Chris Friesen
2016-04-08 19:14 ` Julian Anastasov
2016-04-08 20:06 ` Chris Friesen
2016-04-08 20:07 ` [PATCH v3] " Chris Friesen
2016-04-08 20:35 ` Julian Anastasov
2016-04-08 21:21 ` [PATCH v4] " Chris Friesen
2016-04-08 22:08 ` Julian Anastasov
2016-04-14 3:34 ` David Miller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5706B250.1060303@windriver.com \
--to=chris.friesen@windriver.com \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).