netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Joe Stringer <joestringer@nicira.com>
To: netdev@vger.kernel.org, pshelar@nicira.com
Cc: linux-kernel@vger.kernel.org, pablo@netfilter.org,
	fwestpha@redhat.com, hannes@redhat.com, tgraf@suug.ch,
	jpettit@nicira.com, jesse@nicira.com,
	netfilter-devel@vger.kernel.org
Subject: [PATCHv6 net-next 00/10] OVS conntrack support
Date: Wed, 26 Aug 2015 11:31:43 -0700	[thread overview]
Message-ID: <1440613913-10141-1-git-send-email-joestringer@nicira.com> (raw)

The goal of this series is to allow OVS to send packets through the Linux
kernel connection tracker, and subsequently match on fields populated by
conntrack. This functionality is enabled through a new
CONFIG_OPENVSWITCH_CONNTRACK option.

This version addresses the feedback from v5, primarily checking the behaviour
is correct with different configurations such as disabling
CONFIG_OPENVSWITCH_CONNTRACK or disabling individual conntrack features like
connlabels.

The branch below has been updated with the corresponding userspace pieces:
https://github.com/joestringer/ovs dev/ct_20150818

Joe Stringer (10):
  openvswitch: Serialize acts with original netlink len
  openvswitch: Move MASKED* macros to datapath.h
  ipv6: Export nf_ct_frag6_gather()
  dst: Add __skb_dst_copy() variation
  openvswitch: Add conntrack action
  openvswitch: Allow matching on conntrack mark
  netfilter: Always export nf_connlabels_replace()
  netfilter: connlabels: Export setting connlabel length
  openvswitch: Allow matching on conntrack label
  openvswitch: Allow attaching helpers to ct action

 include/net/dst.h                           |   9 +-
 include/net/netfilter/nf_conntrack_labels.h |   4 +
 include/uapi/linux/openvswitch.h            |  58 +++
 net/ipv6/netfilter/nf_conntrack_reasm.c     |   1 +
 net/netfilter/nf_conntrack_labels.c         |  34 +-
 net/netfilter/xt_connlabel.c                |  16 +-
 net/openvswitch/Kconfig                     |  11 +
 net/openvswitch/Makefile                    |   2 +
 net/openvswitch/actions.c                   | 229 +++++++--
 net/openvswitch/conntrack.c                 | 744 ++++++++++++++++++++++++++++
 net/openvswitch/conntrack.h                 |  86 ++++
 net/openvswitch/datapath.c                  |  86 +++-
 net/openvswitch/datapath.h                  |  13 +
 net/openvswitch/flow.c                      |   6 +-
 net/openvswitch/flow.h                      |  11 +-
 net/openvswitch/flow_netlink.c              | 119 ++++-
 net/openvswitch/flow_netlink.h              |  13 +-
 net/openvswitch/vport.c                     |   1 +
 18 files changed, 1336 insertions(+), 107 deletions(-)
 create mode 100644 net/openvswitch/conntrack.c
 create mode 100644 net/openvswitch/conntrack.h

-- 
2.1.4

             reply	other threads:[~2015-08-26 18:31 UTC|newest]

Thread overview: 16+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-08-26 18:31 Joe Stringer [this message]
2015-08-26 18:31 ` [PATCHv6 net-next 01/10] openvswitch: Serialize acts with original netlink len Joe Stringer
2015-08-26 18:31 ` [PATCHv6 net-next 02/10] openvswitch: Move MASKED* macros to datapath.h Joe Stringer
2015-08-26 18:31 ` [PATCHv6 net-next 03/10] ipv6: Export nf_ct_frag6_gather() Joe Stringer
2015-08-26 18:31 ` [PATCHv6 net-next 04/10] dst: Add __skb_dst_copy() variation Joe Stringer
2015-08-26 18:31 ` [PATCHv6 net-next 05/10] openvswitch: Add conntrack action Joe Stringer
2015-08-26 18:55   ` Joe Stringer
2015-08-26 20:40   ` Pravin Shelar
2015-08-26 18:31 ` [PATCHv6 net-next 06/10] openvswitch: Allow matching on conntrack mark Joe Stringer
2015-08-26 18:31 ` [PATCHv6 net-next 07/10] netfilter: Always export nf_connlabels_replace() Joe Stringer
2015-08-26 18:31 ` [PATCHv6 net-next 08/10] netfilter: connlabels: Export setting connlabel length Joe Stringer
2015-08-26 18:31 ` [PATCHv6 net-next 09/10] openvswitch: Allow matching on conntrack label Joe Stringer
2015-08-26 18:31 ` [PATCHv6 net-next 10/10] openvswitch: Allow attaching helpers to ct action Joe Stringer
2015-08-27 18:41 ` [PATCHv6 net-next 00/10] OVS conntrack support David Miller
2015-08-28 23:57 ` Simon Horman
2015-08-29  2:25   ` Joe Stringer

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1440613913-10141-1-git-send-email-joestringer@nicira.com \
    --to=joestringer@nicira.com \
    --cc=fwestpha@redhat.com \
    --cc=hannes@redhat.com \
    --cc=jesse@nicira.com \
    --cc=jpettit@nicira.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=netdev@vger.kernel.org \
    --cc=netfilter-devel@vger.kernel.org \
    --cc=pablo@netfilter.org \
    --cc=pshelar@nicira.com \
    --cc=tgraf@suug.ch \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).