• John Fastabend's avatar
    tls: add bpf support to sk_msg handling · d3b18ad3
    John Fastabend authored
    This work adds BPF sk_msg verdict program support to kTLS
    allowing BPF and kTLS to be combined together. Previously kTLS
    and sk_msg verdict programs were mutually exclusive in the
    ULP layer which created challenges for the orchestrator when
    trying to apply TCP based policy, for example. To resolve this,
    leveraging the work from previous patches that consolidates
    the use of sk_msg, we can finally enable BPF sk_msg verdict
    programs so they continue to run after the kTLS socket is
    created. No change in behavior when kTLS is not used in
    combination with BPF, the kselftest suite for kTLS also runs
    successfully.
    
    Joint work with Daniel.
    Signed-off-by: default avatarJohn Fastabend <john.fastabend@gmail.com>
    Signed-off-by: default avatarDaniel Borkmann <daniel@iogearbox.net>
    Signed-off-by: default avatarAlexei Starovoitov <ast@kernel.org>
    d3b18ad3
tls_sw.c 49.5 KB