Commits · fc34acd36eecdec95171b98ef2516e3d4daa5c41 · linux / linux-davinci

26 Nov, 2008 40 commits

netns xfrm: xfrm_user module in netns · fc34acd3

Alexey Dobriyan authored Nov 25, 2008

Grab netns either from netlink socket, state or policy.

SA and SPD flush are in init_net for now, this requires little
attention, see below.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

fc34acd3

netns xfrm: per-netns NETLINK_XFRM socket · a6483b79

Alexey Dobriyan authored Nov 25, 2008

Stub senders to init_net's one temporarily.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

a6483b79

netns xfrm: xfrm_input() fixup · bd235e3c

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

bd235e3c

netns xfrm: dst garbage-collecting in netns · ddcfd796

Alexey Dobriyan authored Nov 25, 2008

Pass netns pointer to struct xfrm_policy_afinfo::garbage_collect()

	[This needs more thoughts on what to do with dst_ops]
	[Currently stub to init_net]
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

ddcfd796

netns xfrm: flushing/pruning bundles in netns · 3dd0b499

Alexey Dobriyan authored Nov 25, 2008

Allow netdevice notifier as result.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

3dd0b499

netns xfrm: xfrm_route_forward() in netns · 99a66657

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

99a66657

netns xfrm: xfrm_policy_check in netns · f6e1e25d

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

f6e1e25d

netns xfrm: lookup in netns · 52479b62

Alexey Dobriyan authored Nov 25, 2008

Pass netns to xfrm_lookup()/__xfrm_lookup(). For that pass netns
to flow_cache_lookup() and resolver callback.

Take it from socket or netdevice. Stub DECnet to init_net.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

52479b62

netns xfrm: policy walking in netns · cdcbca7c

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

cdcbca7c

netns xfrm: finding policy in netns · 8d1211a6

Alexey Dobriyan authored Nov 25, 2008

Add netns parameter to xfrm_policy_bysel_ctx(), xfrm_policy_byidx().
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

8d1211a6

netns xfrm: policy flushing in netns · 33ffbbd5

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

33ffbbd5

netns xfrm: policy insertion in netns · 1121994c

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

1121994c

netns xfrm: propagate netns into policy byidx hash · e92303f8

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

e92303f8

netns xfrm: state walking in netns · 284fa7da

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

284fa7da

netns xfrm: finding states in netns · 5447c5e4

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

5447c5e4

netns xfrm: fixup xfrm_alloc_spi() · 12604d8a

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

12604d8a

netns xfrm: state lookup in netns · 221df1ed

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

221df1ed

netns xfrm: state flush in netns · 0e602451

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

0e602451

netns xfrm: trivial netns propagations · 98806f75

Alexey Dobriyan authored Nov 25, 2008

Take netns from xfrm_state or xfrm_policy.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

98806f75

netns xfrm: propagate netns into bydst/bysrc/byspi hash functions · 64d0cd00
Alexey Dobriyan authored Nov 25, 2008
```
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
```
64d0cd00

netns xfrm: per-netns policy hash resizing work · 66caf628

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

66caf628

netns xfrm: per-netns policy counts · dc2caba7

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

dc2caba7

netns xfrm: per-netns xfrm_policy_bydst hash · a35f6c5d

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

a35f6c5d

netns xfrm: per-netns inexact policies · 8b18f8ea

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

8b18f8ea

netns xfrm: per-netns xfrm_policy_byidx hashmask · 8100bea7

Alexey Dobriyan authored Nov 25, 2008

Per-netns hashes are independently resizeable.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

8100bea7

netns xfrm: per-netns xfrm_policy_byidx hash · 93b851c1

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

93b851c1

netns xfrm: per-netns policy list · adfcf0b2

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

adfcf0b2

netns xfrm: add struct xfrm_policy::xp_net · 0331b1f3

Alexey Dobriyan authored Nov 25, 2008

Again, to avoid complications with passing netns when not necessary.
Again, ->xp_net is set-once field, once set it never changes.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

0331b1f3

netns xfrm: per-netns km_waitq · 50a30657

Alexey Dobriyan authored Nov 25, 2008

Disallow spurious wakeups in __xfrm_lookup().
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

50a30657

netns xfrm: per-netns state GC work · c7837144

Alexey Dobriyan authored Nov 25, 2008

State GC is per-netns, and this is part of it.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

c7837144

netns xfrm: per-netns state GC list · b8a0ae20

Alexey Dobriyan authored Nov 25, 2008

km_waitq is going to be made per-netns to disallow spurious wakeups
in __xfrm_lookup().

To not wakeup after every garbage-collected xfrm_state (which potentially
can be from different netns) make state GC list per-netns.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

b8a0ae20

netns xfrm: per-netns xfrm_hash_work · 63082733

Alexey Dobriyan authored Nov 25, 2008

All of this is implicit passing which netns's hashes should be resized.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

63082733

netns xfrm: per-netns xfrm_state counts · 0bf7c5b0

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

0bf7c5b0

netns xfrm: per-netns xfrm_state_hmask · 529983ec

Alexey Dobriyan authored Nov 25, 2008

Since hashtables are per-netns, they can be independently resized.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

529983ec

netns xfrm: per-netns xfrm_state_byspi hash · b754a4fd

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

b754a4fd

netns xfrm: per-netns xfrm_state_bysrc hash · d320bbb3

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

d320bbb3

netns xfrm: per-netns xfrm_state_bydst hash · 73d189dc

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

73d189dc

netns xfrm: per-netns xfrm_state_all list · 9d4139c7

Alexey Dobriyan authored Nov 25, 2008

This is done to get
a) simple "something leaked" check
b) cover possible DoSes when other netns puts many, many xfrm_states
   onto a list.
c) not miss "alien xfrm_state" check in some of list iterators in future.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

9d4139c7

netns xfrm: add struct xfrm_state::xs_net · 673c09be

Alexey Dobriyan authored Nov 25, 2008

To avoid unnecessary complications with passing netns around.

* set once, very early after allocating
* once set, never changes

For a while create every xfrm_state in init_net.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

673c09be

netns xfrm: add netns boilerplate · d62ddc21

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

d62ddc21