Commits · b27aeadb5948d400df83db4d29590fb9862ba49d · Kirill Smelkov / linux

26 Nov, 2008 40 commits

netns xfrm: per-netns sysctls · b27aeadb

Alexey Dobriyan authored Nov 25, 2008

Make
	net.core.xfrm_aevent_etime
	net.core.xfrm_acq_expires
	net.core.xfrm_aevent_rseqth
	net.core.xfrm_larval_drop

sysctls per-netns.

For that make net_core_path[] global, register it to prevent two
/proc/net/core antries and change initcall position -- xfrm_init() is called
from fs_initcall, so this one should be fs_initcall at least.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

b27aeadb

netns xfrm: /proc/net/xfrm_stat in netns · c68cd1a0

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

c68cd1a0

netns xfrm: per-netns MIBs · 59c9940e

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

59c9940e

netns xfrm: AH/ESP in netns! · 4fb236ba

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

4fb236ba

netns PF_KEY: per-netns /proc/pfkey · 7013ec30

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

7013ec30

netns PF_KEY: part 2 · 07fb0f17

Alexey Dobriyan authored Nov 25, 2008

* interaction with userspace -- take netns from userspace socket.
* in ->notify hook take netns either from SA or explicitly passed --
	we don't know if SA/SPD flush is coming.
* stub policy migration with init_net for now.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

07fb0f17

netns PF_KEY: part 1 · 3fa87a32

Alexey Dobriyan authored Nov 25, 2008

* netns boilerplate
* keep per-netns socket list
* keep per-netns number of sockets
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

3fa87a32

netns xfrm: flush SA/SPDs on netns stop · 7c2776ee

Alexey Dobriyan authored Nov 25, 2008

SA/SPD doesn't pin netns (and it shouldn't), so get rid of them by hand.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

7c2776ee

netns xfrm: ->get_saddr in netns · fbda33b2

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

fbda33b2

netns xfrm: ->dst_lookup in netns · c5b3cf46

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

c5b3cf46

netns xfrm: KM reporting in netns · db983c11

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

db983c11

netns xfrm: pass netns with KM notifications · 7067802e

Alexey Dobriyan authored Nov 25, 2008

SA and SPD flush are executed with NULL SA and SPD respectively, for
these cases pass netns explicitly from userspace socket.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

7067802e

netns xfrm: xfrm_user module in netns · fc34acd3

Alexey Dobriyan authored Nov 25, 2008

Grab netns either from netlink socket, state or policy.

SA and SPD flush are in init_net for now, this requires little
attention, see below.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

fc34acd3

netns xfrm: per-netns NETLINK_XFRM socket · a6483b79

Alexey Dobriyan authored Nov 25, 2008

Stub senders to init_net's one temporarily.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

a6483b79

netns xfrm: xfrm_input() fixup · bd235e3c

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

bd235e3c

netns xfrm: dst garbage-collecting in netns · ddcfd796

Alexey Dobriyan authored Nov 25, 2008

Pass netns pointer to struct xfrm_policy_afinfo::garbage_collect()

	[This needs more thoughts on what to do with dst_ops]
	[Currently stub to init_net]
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

ddcfd796

netns xfrm: flushing/pruning bundles in netns · 3dd0b499

Alexey Dobriyan authored Nov 25, 2008

Allow netdevice notifier as result.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

3dd0b499

netns xfrm: xfrm_route_forward() in netns · 99a66657

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

99a66657

netns xfrm: xfrm_policy_check in netns · f6e1e25d

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

f6e1e25d

netns xfrm: lookup in netns · 52479b62

Alexey Dobriyan authored Nov 25, 2008

Pass netns to xfrm_lookup()/__xfrm_lookup(). For that pass netns
to flow_cache_lookup() and resolver callback.

Take it from socket or netdevice. Stub DECnet to init_net.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

52479b62

netns xfrm: policy walking in netns · cdcbca7c

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

cdcbca7c

netns xfrm: finding policy in netns · 8d1211a6

Alexey Dobriyan authored Nov 25, 2008

Add netns parameter to xfrm_policy_bysel_ctx(), xfrm_policy_byidx().
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

8d1211a6

netns xfrm: policy flushing in netns · 33ffbbd5

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

33ffbbd5

netns xfrm: policy insertion in netns · 1121994c

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

1121994c

netns xfrm: propagate netns into policy byidx hash · e92303f8

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

e92303f8

netns xfrm: state walking in netns · 284fa7da

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

284fa7da

netns xfrm: finding states in netns · 5447c5e4

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

5447c5e4

netns xfrm: fixup xfrm_alloc_spi() · 12604d8a

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

12604d8a

netns xfrm: state lookup in netns · 221df1ed

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

221df1ed

netns xfrm: state flush in netns · 0e602451

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

0e602451

netns xfrm: trivial netns propagations · 98806f75

Alexey Dobriyan authored Nov 25, 2008

Take netns from xfrm_state or xfrm_policy.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

98806f75

netns xfrm: propagate netns into bydst/bysrc/byspi hash functions · 64d0cd00
Alexey Dobriyan authored Nov 25, 2008
```
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
```
64d0cd00

netns xfrm: per-netns policy hash resizing work · 66caf628

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

66caf628

netns xfrm: per-netns policy counts · dc2caba7

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

dc2caba7

netns xfrm: per-netns xfrm_policy_bydst hash · a35f6c5d

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

a35f6c5d

netns xfrm: per-netns inexact policies · 8b18f8ea

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

8b18f8ea

netns xfrm: per-netns xfrm_policy_byidx hashmask · 8100bea7

Alexey Dobriyan authored Nov 25, 2008

Per-netns hashes are independently resizeable.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

8100bea7

netns xfrm: per-netns xfrm_policy_byidx hash · 93b851c1

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

93b851c1

netns xfrm: per-netns policy list · adfcf0b2

Alexey Dobriyan authored Nov 25, 2008

Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

adfcf0b2

netns xfrm: add struct xfrm_policy::xp_net · 0331b1f3

Alexey Dobriyan authored Nov 25, 2008

Again, to avoid complications with passing netns when not necessary.
Again, ->xp_net is set-once field, once set it never changes.
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

0331b1f3