Received: by 2002:a05:6358:7058:b0:131:369:b2a3 with SMTP id 24csp9784318rwp; Thu, 20 Jul 2023 09:36:06 -0700 (PDT) X-Google-Smtp-Source: APBJJlHS4J6JvD9ruGtP2te86qdLeaurZlW1ZI+1nSnz+V1dBxfQ8cX+QnjjbH+qBEOwMrv82x1N X-Received: by 2002:a05:6a21:6d9a:b0:12c:2dc7:74bc with SMTP id wl26-20020a056a216d9a00b0012c2dc774bcmr31507110pzb.46.1689870966293; Thu, 20 Jul 2023 09:36:06 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1689870966; cv=none; d=google.com; s=arc-20160816; b=ghqMFsm0h6GdZVmJB1N9KWzqgJvXMn/qyJJt8JBu81a4Tr0S9g9Psclvt7AgHsrAYH +P82whQ3qFbQmtWmvAWQHCjCgBOiFlv7tPW+hKDIxCSaN5akGqJSP0hblsrbVL1e9a8e mIJmNKwz7RejB73zkBvfbRf6WPgGk0VlGxqEptOTDDMeq47pc9d76BJ9PeeLb5luqnoR gD+jZESstfpV2t0ctFDwxnglyJnga906eNDm2/F5ZAKfadgbJWD1gkYDmqjfg9Ntfw7r NedaZ3i6VAATvF/sKE1bJchw1RShW1495aWAJpSeCf4Om09S0pUpnPe2KYPs6CiJKsN9 WmgQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:in-reply-to:references:message-id :content-transfer-encoding:mime-version:subject:date:from :dkim-signature; bh=A1OV/Gg5jhKvjIdebEVDtlHxi2P2tNv/5e7W2/lf1TY=; fh=w114z2Y2QzsMHchxYyz1b43hlnKjfqFaAww0oN51ces=; b=vB7nwG+Lr0x+ye9yCuLe8xEv0kZzcraMxpAryTk+KeNMgCg1iULA+3KsRp+/SRKY8J dn/vJhX8tOwG3gVzvYo1lW6wkm4cnFD3QdV7euUit3z+/+j5TTldmHnLTvUyaoF2OsVy ngsUiYZ59Rce2o1RBqBMT9e9FAVIkMuUpKErAy5qIJh5ULzSZM1kw4k/fyAp3+zEfkbO qv8FMblD9XnHmo0tdUFfSFMjr4EED0irQWDCKiHoEeq1kYJSoZ0z7KaH7+4YS1PcC4Lt C8L3p86UEHuEfVQ5utuLq64PAX7go7uk57qEnLl0skdZTKsIIEt+7hnDWFpowqt4XnZg Td0Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@isovalent.com header.s=google header.b=KWmNNkPn; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=isovalent.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id a21-20020a63e855000000b005633d19281bsi1167430pgk.401.2023.07.20.09.35.53; Thu, 20 Jul 2023 09:36:06 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@isovalent.com header.s=google header.b=KWmNNkPn; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=isovalent.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232559AbjGTPbG (ORCPT + 99 others); Thu, 20 Jul 2023 11:31:06 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:36574 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232553AbjGTPbC (ORCPT ); Thu, 20 Jul 2023 11:31:02 -0400 Received: from mail-ej1-x632.google.com (mail-ej1-x632.google.com [IPv6:2a00:1450:4864:20::632]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 907282D54 for ; Thu, 20 Jul 2023 08:30:47 -0700 (PDT) Received: by mail-ej1-x632.google.com with SMTP id a640c23a62f3a-98dfb3f9af6so161003366b.2 for ; Thu, 20 Jul 2023 08:30:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isovalent.com; s=google; t=1689867046; x=1690471846; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :mime-version:subject:date:from:from:to:cc:subject:date:message-id :reply-to; bh=A1OV/Gg5jhKvjIdebEVDtlHxi2P2tNv/5e7W2/lf1TY=; b=KWmNNkPnYi34ViccPyP9omB6g3VYjIC+P5a6s3R9Zq6u27XIBTylnYDqSE/6QzsjTs c4BQNfgoTfurzpxPfd+rTn8+sHF5/3hals0R+SfDgHzqypyxIwn0CyQAwa6wASPY7dSC WSX3KiL+jD5rkhWpQMmdogXbeTaV6xpxCCb/PGp1nh+pz2q964TKvIrh7nu7of1oRsXy GyokRYBn9+JOIGMBjRK6HARA3XRPpt0CL69CznvVLzKRg4eurPEZWNCW6mGcXNy8BcxP qeOP6TwWpCx5xNk4BvN6p0tCYRY9XEUP5dePoU5V+TfZgVQ8xZyRgzGTYdxMXMg4bXSB JC9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1689867046; x=1690471846; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :mime-version:subject:date:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=A1OV/Gg5jhKvjIdebEVDtlHxi2P2tNv/5e7W2/lf1TY=; b=HnXFtZ32tXVi+T5Dg93JbVRXPqgTbzY8tiWE/4e1nNH0tPELR1ZKQwFX1tl18AS/Qa fPr+wwy+dimw+yvIVwBPr52npjhy7dYbQ+gvpwRuVE5GlgPVpZnH7yqflSGECe1UlYqj Cc1ASQiM0PN1aWOUlyDEMAA9+ypjiJsvSJwY6grqPLRueN+/2nUS8EBIP48Kw+DZrSAT bjCs0eb6CJGaTUGy3jfXCd6G7pf3o4vHviKjEdaB58OvlzQYw7wgcVONDYkPcL9ZODPK G20gxI71B1w4b+QIIQJESkLx7vSDsFk8kqzRWbV3qg1mHRkpRbEiIeJYQJH7k+VsoXps 94Ag== X-Gm-Message-State: ABy/qLZjwHfjKr4cpAA8dCkkhewr7EflHqI6/ve8Opd7vBIYjl3gk0pD knBJ1TVueax07OT8Ui3fOTrdhP6EN8lidGCRdZ58ww== X-Received: by 2002:a17:907:7888:b0:99b:5b07:64aa with SMTP id ku8-20020a170907788800b0099b5b0764aamr1054958ejc.35.1689867045943; Thu, 20 Jul 2023 08:30:45 -0700 (PDT) Received: from [192.168.188.151] (p200300c1c7176000b788d2ebe49c4b82.dip0.t-ipconnect.de. [2003:c1:c717:6000:b788:d2eb:e49c:4b82]) by smtp.gmail.com with ESMTPSA id x10-20020a170906804a00b009893b06e9e3sm851007ejw.225.2023.07.20.08.30.45 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 20 Jul 2023 08:30:45 -0700 (PDT) From: Lorenz Bauer Date: Thu, 20 Jul 2023 17:30:05 +0200 Subject: [PATCH bpf-next v6 1/8] udp: re-score reuseport groups when connected sockets are present MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-Id: <20230720-so-reuseport-v6-1-7021b683cdae@isovalent.com> References: <20230720-so-reuseport-v6-0-7021b683cdae@isovalent.com> In-Reply-To: <20230720-so-reuseport-v6-0-7021b683cdae@isovalent.com> To: "David S. Miller" , Eric Dumazet , Jakub Kicinski , Paolo Abeni , David Ahern , Willem de Bruijn , Alexei Starovoitov , Daniel Borkmann , Andrii Nakryiko , Martin KaFai Lau , Song Liu , Yonghong Song , John Fastabend , KP Singh , Stanislav Fomichev , Hao Luo , Jiri Olsa , Joe Stringer , Mykola Lysenko , Shuah Khan , Kuniyuki Iwashima Cc: Hemanth Malla , netdev@vger.kernel.org, linux-kernel@vger.kernel.org, bpf@vger.kernel.org, linux-kselftest@vger.kernel.org, Lorenz Bauer X-Mailer: b4 0.12.3 X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_BLOCKED, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Contrary to TCP, UDP reuseport groups can contain TCP_ESTABLISHED sockets. To support these properly we remember whether a group has a connected socket and skip the fast reuseport early-return. In effect we continue scoring all reuseport sockets and then choose the one with the highest score. The current code fails to re-calculate the score for the result of lookup_reuseport. According to Kuniyuki Iwashima: 1) SO_INCOMING_CPU is set -> selected sk might have +1 score 2) BPF prog returns ESTABLISHED and/or SO_INCOMING_CPU sk -> selected sk will have more than 8 Using the old score could trigger more lookups depending on the order that sockets are created. sk -> sk (SO_INCOMING_CPU) -> sk (ESTABLISHED) | | `-> select the next SO_INCOMING_CPU sk | `-> select itself (We should save this lookup) Fixes: efc6b6f6c311 ("udp: Improve load balancing for SO_REUSEPORT.") Reviewed-by: Kuniyuki Iwashima Signed-off-by: Lorenz Bauer --- net/ipv4/udp.c | 20 +++++++++++++++----- net/ipv6/udp.c | 19 ++++++++++++++----- 2 files changed, 29 insertions(+), 10 deletions(-) diff --git a/net/ipv4/udp.c b/net/ipv4/udp.c index 42a96b3547c9..c62d5e1c6675 100644 --- a/net/ipv4/udp.c +++ b/net/ipv4/udp.c @@ -451,14 +451,24 @@ static struct sock *udp4_lib_lookup2(struct net *net, score = compute_score(sk, net, saddr, sport, daddr, hnum, dif, sdif); if (score > badness) { - result = lookup_reuseport(net, sk, skb, - saddr, sport, daddr, hnum); + badness = score; + result = lookup_reuseport(net, sk, skb, saddr, sport, daddr, hnum); + if (!result) { + result = sk; + continue; + } + /* Fall back to scoring if group has connections */ - if (result && !reuseport_has_conns(sk)) + if (!reuseport_has_conns(sk)) return result; - result = result ? : sk; - badness = score; + /* Reuseport logic returned an error, keep original score. */ + if (IS_ERR(result)) + continue; + + badness = compute_score(result, net, saddr, sport, + daddr, hnum, dif, sdif); + } } return result; diff --git a/net/ipv6/udp.c b/net/ipv6/udp.c index b7c972aa09a7..dec69f0379e9 100644 --- a/net/ipv6/udp.c +++ b/net/ipv6/udp.c @@ -194,14 +194,23 @@ static struct sock *udp6_lib_lookup2(struct net *net, score = compute_score(sk, net, saddr, sport, daddr, hnum, dif, sdif); if (score > badness) { - result = lookup_reuseport(net, sk, skb, - saddr, sport, daddr, hnum); + badness = score; + result = lookup_reuseport(net, sk, skb, saddr, sport, daddr, hnum); + if (!result) { + result = sk; + continue; + } + /* Fall back to scoring if group has connections */ - if (result && !reuseport_has_conns(sk)) + if (!reuseport_has_conns(sk)) return result; - result = result ? : sk; - badness = score; + /* Reuseport logic returned an error, keep original score. */ + if (IS_ERR(result)) + continue; + + badness = compute_score(sk, net, saddr, sport, + daddr, hnum, dif, sdif); } } return result; -- 2.41.0