diff options
author | Daniel Borkmann <daniel@iogearbox.net> | 2018-04-24 22:26:59 +0200 |
---|---|---|
committer | Daniel Borkmann <daniel@iogearbox.net> | 2018-04-24 22:27:00 +0200 |
commit | 0e25d14e5f0a3d4c32a1961e0cf58ae23b637681 (patch) | |
tree | 9790a515413c05b19aa0eb988ef002a2cdb1dc05 /kernel/bpf | |
parent | fbcf93ebcaef7d09881ee308b52cd84f5e43c622 (diff) | |
parent | 29a36f9eef30b7f008b722a753a84b314f981037 (diff) | |
download | linux-0e25d14e5f0a3d4c32a1961e0cf58ae23b637681.tar.bz2 |
Merge branch 'bpf-xfrm-states'
Eyal Birger says:
====================
This patchset adds support for fetching XFRM state information from
an eBPF program called from TC.
The first patch introduces a helper for fetching an XFRM state from the
skb's secpath. The XFRM state is modeled using a new virtual struct which
contains the SPI, peer address, and reqid values of the state; This struct
can be extended in the future to provide additional state information.
The second patch adds a test example in test_tunnel_bpf.sh. The sample
validates the correct extraction of state information by the eBPF program.
v3:
- Kept SPI and peer IPv4 address in state in network byte order
following suggestion from Alexei Starovoitov
v2:
- Fixed two comments by Daniel Borkmann:
- disallow reserved flags in helper call
- avoid compiling in helper code when CONFIG_XFRM is off
====================
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Diffstat (limited to 'kernel/bpf')
0 files changed, 0 insertions, 0 deletions