diff options
author | Jesper Dangaard Brouer <brouer@redhat.com> | 2021-02-09 14:38:29 +0100 |
---|---|---|
committer | Daniel Borkmann <daniel@iogearbox.net> | 2021-02-13 01:15:28 +0100 |
commit | 5f7d57280c1982d993d5f4ff0edac310f820f607 (patch) | |
tree | 2cc3d0e2753a3537c810d801775a84d980b454c3 /tools | |
parent | 34b2021cc61642d61c3cf943d9e71925b827941b (diff) | |
download | linux-5f7d57280c1982d993d5f4ff0edac310f820f607.tar.bz2 |
bpf: Drop MTU check when doing TC-BPF redirect to ingress
The use-case for dropping the MTU check when TC-BPF does redirect to
ingress, is described by Eyal Birger in email[0]. The summary is the
ability to increase packet size (e.g. with IPv6 headers for NAT64) and
ingress redirect packet and let normal netstack fragment packet as needed.
[0] https://lore.kernel.org/netdev/CAHsH6Gug-hsLGHQ6N0wtixdOa85LDZ3HNRHVd0opR=19Qo4W4Q@mail.gmail.com/
V15:
- missing static for function declaration
V9:
- Make net_device "up" (IFF_UP) check explicit in skb_do_redirect
V4:
- Keep net_device "up" (IFF_UP) check.
- Adjustment to handle bpf_redirect_peer() helper
Signed-off-by: Jesper Dangaard Brouer <brouer@redhat.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: John Fastabend <john.fastabend@gmail.com>
Link: https://lore.kernel.org/bpf/161287790971.790810.11785274340154740591.stgit@firesoul
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions