Received: by 2002:a05:6358:3188:b0:123:57c1:9b43 with SMTP id q8csp16307634rwd; Mon, 26 Jun 2023 08:19:05 -0700 (PDT) X-Google-Smtp-Source: ACHHUZ7kEZG1e9WhhvZGN8EOBi209TEkjjCgw8CxSpLwtyOfYz974snhDyv1LlEISP78uwwSG+XQ X-Received: by 2002:a17:90a:3ee2:b0:25b:f273:84ca with SMTP id k89-20020a17090a3ee200b0025bf27384camr22953499pjc.12.1687792744966; Mon, 26 Jun 2023 08:19:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1687792744; cv=none; d=google.com; s=arc-20160816; b=u2ll6ovB2UU5/T6BnvlTO3aOA4+3Zyz+2rzJgGRuQgPEjIoRdefeni4cPpDXcNfZ0a p7fXru/Zx5/ptrFaskFUw4BZZSsMygRvqr4ZMxXNCcSVsiNxfLeg3guqcTrsYc7IYzE9 tiAM9xuh1uF95dcRWHBZKh5LvC4RHZ0Jchhtbpk+aglU3qyx1vs9l2fKQIPbi2Od7NxM nYm97aViTvy734vjMoIBH+L9dE4dK4QYAYtdSQUHqddAXBV2VCqFaK165iBEtv9pvL4h y060IgGAWtbB9rpEDf6mk2yrMcjbtTf2+3bRZrmrQMD4VBnTvVnw/jjJJECAksdvG0YN LBDg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:content-transfer-encoding:mime-version :message-id:date:subject:from:dkim-signature; bh=5ZOVpA71i/AmTOr0v+BW3r06CAsw8oH2AC2V9/+6+As=; fh=HvASqRgCETKXZS9QQH1MN1XzpCqyTqu5Lg3AJM2mNRU=; b=K8ECPP8gD9Q3xOkZkLsi/JVKl0BpUkofjxGKmozOLlnWcRTN/p24dqfx/DlKRnUWSB MrrGdq6vMAL60cC8Pji7iOETagdMrcEUGOyRWYmr06wSkGSoZiHwmCbafOtIBtL93a3J kfV09agKJ44QpUufh+sfFJ6srGgd2SuabhOziXuqd697CgKnRkrnMj9aryVq6i67TLpW 8cq8wOMPOitommBWjR6oiBAbkGf7dMr/KpeLFHdS2NXIWc1QogRy7sC3Tvxk6npplZOx usBRoLL4iAi/KgyickEs+dq+nWFsvwOk/UKz4C1ZnaJC+zxz0SpD1FKKWRrkjwcH/JWN HOAg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@isovalent.com header.s=google header.b=GdsYVkur; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=isovalent.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id x5-20020a654145000000b00542897dcc22si4888499pgp.516.2023.06.26.08.18.52; Mon, 26 Jun 2023 08:19:04 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@isovalent.com header.s=google header.b=GdsYVkur; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=isovalent.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230288AbjFZPJS (ORCPT + 99 others); Mon, 26 Jun 2023 11:09:18 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:36344 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229487AbjFZPJR (ORCPT ); Mon, 26 Jun 2023 11:09:17 -0400 Received: from mail-wr1-x436.google.com (mail-wr1-x436.google.com [IPv6:2a00:1450:4864:20::436]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id DE3DEE73 for ; Mon, 26 Jun 2023 08:09:13 -0700 (PDT) Received: by mail-wr1-x436.google.com with SMTP id ffacd0b85a97d-313e742a787so1634081f8f.1 for ; Mon, 26 Jun 2023 08:09:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isovalent.com; s=google; t=1687792152; x=1690384152; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:from:to:cc:subject:date:message-id:reply-to; bh=5ZOVpA71i/AmTOr0v+BW3r06CAsw8oH2AC2V9/+6+As=; b=GdsYVkur6vkSIf0v6Fb43unznX4XRRgVC0nO8m3/Wvzo43eywYYD8cZIE10xszPHYD qtL+X/ISsd3Nbz35oFyQxCqeKX8UiDW3l2JYhjuGxmEtE7QYDkJNOA5G52xZ6ovYdyxJ T4PNAA9bWvRyX1HUH+rYROW+GZ5SJ3ZaceXUxz4EcRCbNOq7/0HMoVIccaopzDgsS6ZT qUqFPFXp7cdwD/5KUM1U3Wa9d0hqaWF4EwNWUnTaPWFOOS3yW7eFl0to57i7wRWlpd0z gRu0/k26VreSnSLNRdz5smGVftdT87VaSVGsTU3loSxOK+rSn7V8oUbYSOcZKf3DH+aM bjoQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1687792152; x=1690384152; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=5ZOVpA71i/AmTOr0v+BW3r06CAsw8oH2AC2V9/+6+As=; b=MkEGndFetgGutXO9sZ0edKlZ5z7ECbUmSqQYj0NJ24OzLG3vQeGjkkk77rzH0qHrXf 0Fu84d0h+GmGRKXtwYDngOrDdSnEUnmCYfSaFyd1FjBRGaHqegAA+6bv32fV2gb/Se8U 1Z19Z52Jb5NejkBE0ImtPzjvNFQRSNDeh+NggmhrhQIyPFM0fLs48gqEFYiOuHd+L91v sF/sXeUkAGjYy6HLcrzhGdMh8dVcs1JAy/kKGnSLbNwXy5nly8XNDbOW+ZrH6dmZ/r39 LUh6a9a7DalHwIsGZreFAM9DZV8GsU0hU5VGeOqVzGZkFPIsoRhqqigIvj4nXfGmkoBf TvhA== X-Gm-Message-State: AC+VfDw6GUyFnZkojqkVm63DypnRNif225hpeOnOZrMm4F4GJuG8+dtI HoaYSmo9L1BWc6N6drx+scQ3ww== X-Received: by 2002:a5d:61c9:0:b0:313:f5ea:44f7 with SMTP id q9-20020a5d61c9000000b00313f5ea44f7mr1418213wrv.35.1687792152332; Mon, 26 Jun 2023 08:09:12 -0700 (PDT) Received: from [192.168.1.193] (f.c.7.0.0.0.0.0.0.0.0.0.0.0.0.0.f.f.6.2.a.5.a.7.0.b.8.0.1.0.0.2.ip6.arpa. [2001:8b0:7a5a:26ff::7cf]) by smtp.gmail.com with ESMTPSA id v1-20020adfe281000000b00311299df211sm7668710wri.77.2023.06.26.08.09.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Jun 2023 08:09:12 -0700 (PDT) From: Lorenz Bauer Subject: [PATCH bpf-next v3 0/7] Add SO_REUSEPORT support for TC bpf_sk_assign Date: Mon, 26 Jun 2023 16:08:57 +0100 Message-Id: <20230613-so-reuseport-v3-0-907b4cbb7b99@isovalent.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-B4-Tracking: v=1; b=H4sIAAmqmWQC/22OwQ6CMBBEf4Xs2TXQKgRP/ofh0NZFmmjbdGuDI fy7hZMHj5M3kzcLMEVLDJdqgUjZsvWuBHmowEzKPQjtvWQQtZB120hkj5HeTMHHhNQLcxZt00k iKBOtmFBH5cy0jX67Gw6RRjvvthvoMKKjOcFQyGQ5+fjZb2Sx8//GLLBG3Zm2V/JUzPJq2Wf1J JeOxr9gWNf1C0IJORzVAAAA To: "David S. Miller" , Eric Dumazet , Jakub Kicinski , Paolo Abeni , David Ahern , Willem de Bruijn , Alexei Starovoitov , Daniel Borkmann , Andrii Nakryiko , Martin KaFai Lau , Song Liu , Yonghong Song , John Fastabend , KP Singh , Stanislav Fomichev , Hao Luo , Jiri Olsa , Joe Stringer , Mykola Lysenko , Shuah Khan , Kuniyuki Iwashima Cc: Hemanth Malla , netdev@vger.kernel.org, linux-kernel@vger.kernel.org, bpf@vger.kernel.org, linux-kselftest@vger.kernel.org, Lorenz Bauer , Joe Stringer X-Mailer: b4 0.12.2 X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org We want to replace iptables TPROXY with a BPF program at TC ingress. To make this work in all cases we need to assign a SO_REUSEPORT socket to an skb, which is currently prohibited. This series adds support for such sockets to bpf_sk_assing. I did some refactoring to cut down on the amount of duplicate code. The key to this is to use INDIRECT_CALL in the reuseport helpers. To show that this approach is not just beneficial to TC sk_assign I removed duplicate code for bpf_sk_lookup as well. Changes from v1: - Correct commit abbrev length (Kuniyuki) - Reduce duplication (Kuniyuki) - Add checks on sk_state (Martin) - Split exporting inet[6]_lookup_reuseport into separate patch (Eric) Joint work with Daniel Borkmann. Signed-off-by: Lorenz Bauer --- Changes in v3: - Fix warning re udp_ehashfn and udp6_ehashfn (Simon) - Return higher scoring connected UDP reuseport sockets (Kuniyuki) - Fix ipv6 module builds - Link to v2: https://lore.kernel.org/r/20230613-so-reuseport-v2-0-b7c69a342613@isovalent.com --- Daniel Borkmann (1): selftests/bpf: Test that SO_REUSEPORT can be used with sk_assign helper Lorenz Bauer (6): udp: re-score reuseport groups when connected sockets are present net: export inet_lookup_reuseport and inet6_lookup_reuseport net: document inet[6]_lookup_reuseport sk_state requirements net: remove duplicate reuseport_lookup functions net: remove duplicate sk_lookup helpers bpf, net: Support SO_REUSEPORT sockets with bpf_sk_assign include/net/inet6_hashtables.h | 84 ++++++++- include/net/inet_hashtables.h | 77 +++++++- include/net/sock.h | 7 +- include/net/udp.h | 8 + include/uapi/linux/bpf.h | 3 - net/core/filter.c | 2 - net/ipv4/inet_hashtables.c | 70 +++++--- net/ipv4/udp.c | 88 ++++----- net/ipv6/inet6_hashtables.c | 73 +++++--- net/ipv6/udp.c | 98 ++++------ tools/include/uapi/linux/bpf.h | 3 - tools/testing/selftests/bpf/network_helpers.c | 3 + .../selftests/bpf/prog_tests/assign_reuse.c | 197 +++++++++++++++++++++ .../selftests/bpf/progs/test_assign_reuse.c | 142 +++++++++++++++ 14 files changed, 676 insertions(+), 179 deletions(-) --- base-commit: 970308a7b544fa1c7ee98a2721faba3765be8dd8 change-id: 20230613-so-reuseport-e92c526173ee Best regards, -- Lorenz Bauer