Received: by 2002:a25:8b91:0:0:0:0:0 with SMTP id j17csp6987297ybl; Wed, 15 Jan 2020 13:32:01 -0800 (PST) X-Google-Smtp-Source: APXvYqzh/mkiIeRJ7tiyeR2t7Ai741giSN+dWCADQ7NmEL7hPlF24qtiUZodBNQwSAbAgkUkbFNf X-Received: by 2002:aca:b1d5:: with SMTP id a204mr1573201oif.82.1579123920915; Wed, 15 Jan 2020 13:32:00 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1579123920; cv=none; d=google.com; s=arc-20160816; b=NUfgq57ZMn4bbfxz+LtGBfZ5llSk8tFLD1O6bCO18jcbznXGVzLtn1j+LeQRaKlnJW ogzEoQpb2Bd5Sriuu4peDQuEsAg31lnJ4HkHIRehONmTTQjVLuut4ESrsRjBrFXCF2W6 Eu57zxrT/FpiFRZQsybZ2j7muA8xjiEL+zh1QpcprFT10BzDqRDtfXPMCOP9cBatbS6G I/VOTWHM3Zg4dPHzf2V5mf00sJcJFCrWuftBWDfeT7To0WBEUhJEuH3Lhjc8QnQK11C5 JNxkBHspffmhdDD51yxiIn8O3JttZrkRgrm284sgnTl59F57VMUzdKePDXYJ7JC/p1va oUdw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-disposition :content-transfer-encoding:in-reply-to:mime-version:references :message-id:subject:cc:to:from:date; bh=JaUuj16lKyd6o2QOuqy4Zapr90fx9AbtTUpQ1XjSj1M=; b=kUU0fBoUuA7rdDLUS121aYmzUzaISEdtWLALiurQRvHTAoADrkjeIPZ+ApCmiwUJf1 gr6VEVhHcy1xk1VJTrXH0/zr9EHerhQlKfOvU+Lb2FXgElFe53JNyClrNoQDSFlEqyE+ HckZ5uc/5di3TIQlaca8MEXGVW3rBNmKn8KwxEIX61G39VBs2p58hA1Z8y1bzv9bn7gx WaxQhBtVZdDMfvXngBNZ77fbXtpKjRXIe7M2tnIfjWN5dHYJBUFgOHdr2oEJ7gHe/Dk2 aQQA7en5nJzAc7ZR4axVeEzrrGXdBSCQNsArlZdhho6TMY79ovBYNHgAtNSnHJJa+KtF xUyQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id 5si9978085oiy.102.2020.01.15.13.31.49; Wed, 15 Jan 2020 13:32:00 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729874AbgAOVQe convert rfc822-to-8bit (ORCPT + 99 others); Wed, 15 Jan 2020 16:16:34 -0500 Received: from us-smtp-delivery-1.mimecast.com ([205.139.110.120]:44396 "EHLO us-smtp-1.mimecast.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1729134AbgAOVQe (ORCPT ); Wed, 15 Jan 2020 16:16:34 -0500 Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-366-Pyrg7-VeMv2ESgq_KHQTCQ-1; Wed, 15 Jan 2020 16:16:28 -0500 Received: from smtp.corp.redhat.com (int-mx02.intmail.prod.int.phx2.redhat.com [10.5.11.12]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 7C471800D48; Wed, 15 Jan 2020 21:16:26 +0000 (UTC) Received: from bistromath.localdomain (ovpn-116-137.ams2.redhat.com [10.36.116.137]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 138D160BE0; Wed, 15 Jan 2020 21:16:22 +0000 (UTC) Date: Wed, 15 Jan 2020 22:16:21 +0100 From: Sabrina Dubroca To: Andrea Mayer Cc: "David S. Miller" , Petr Machata , Stefano Brivio , Eric Dumazet , Taehee Yoo , Litao jiao , Roopa Prabhu , netdev@vger.kernel.org, linux-kernel@vger.kernel.org, Paolo Lungaroni Subject: Re: [net] vxlan: fix vxlan6_get_route() adding a call to xfrm_lookup_route() Message-ID: <20200115211621.GA573446@bistromath.localdomain> References: <20200115192231.3005-1-andrea.mayer@uniroma2.it> MIME-Version: 1.0 In-Reply-To: <20200115192231.3005-1-andrea.mayer@uniroma2.it> X-Scanned-By: MIMEDefang 2.79 on 10.5.11.12 X-MC-Unique: Pyrg7-VeMv2ESgq_KHQTCQ-1 X-Mimecast-Spam-Score: 0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8BIT Content-Disposition: inline Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org 2020-01-15, 20:22:31 +0100, Andrea Mayer wrote: > currently IPSEC cannot be used to encrypt/decrypt IPv6 vxlan traffic. > The problem is that the vxlan module uses the vxlan6_get_route() > function to find out the route for transmitting an IPv6 packet, which in > turn uses ip6_dst_lookup() available in ip6_output.c. > Unfortunately ip6_dst_lookup() does not perform any xfrm route lookup, > so the xfrm framework cannot be used with vxlan6. That's not the case anymore, since commit 6c8991f41546 ("net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup"). Can you retest on the latest net tree? Thanks. -- Sabrina