1. 09 Mar, 2018 30 commits
  2. 08 Mar, 2018 10 commits
    • David S. Miller's avatar
      Merge tag 'mlx5-updates-2018-02-28-2' of... · fd372a7a
      David S. Miller authored
      Merge tag 'mlx5-updates-2018-02-28-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mellanox/linux
      
      Saeed Mahameed says:
      
      ====================
      mlx5-updates-2018-02-28-2 (IPSec-2)
      
      This series follows our previous one to lay out the foundations for IPSec
      in user-space and extend current kernel netdev IPSec support. As noted in
      our previous pull request cover letter "mlx5-updates-2018-02-28-1 (IPSec-1)",
      the IPSec mechanism will be supported through our flow steering mechanism.
      Therefore, we need to change the initialization order. Furthermore, IPsec
      is also supported in both egress and ingress. Since our current flow
      steering is egress only, we add an empty (only implemented through FPGA
      steering ops) egress namespace to handle that case. We also implement
      the required flow steering callbacks and logic in our FPGA driver.
      
      We extend the FPGA support for ESN and modifying a xfrm too. Therefore, we
      add support for some new FPGA command interface that supports them. The
      other required bits are added too. The new features and requirements are
      advertised via cap bits.
      
      Last but not least, we revise our driver's accel_esp API. This API will be
      shared between our netdev and IB driver, so we need to have all the required
      functionality from both worlds.
      
      Regards,
      Aviad and Matan
      ====================
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      fd372a7a
    • David S. Miller's avatar
      Merge branch 'ibmvnic-Clean-up-net-close-and-fix-reset-bug' · 10c56b8d
      David S. Miller authored
      Thomas Falcon says:
      
      ====================
      ibmvnic: Clean up net close and fix reset bug
      
      This patch set cleans up and reorganizes the driver's net_device
      close function and leverages that to fix up a bug that can occur
      during some device resets. Some reset cases require the backing
      adapter to be disabled before continuing, but other cases, such as
      during a device failover or partition migration, do not require this
      step. Since the device will not be initialized at this stage and
      its command-processing queue is closed, do not send the request to
      disable the device as it could result in an error or timeout
      disrupting the reset.
      ====================
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      10c56b8d
    • Thomas Falcon's avatar
      ibmvnic: Do not disable device during failover or partition migration · 18b8d6bb
      Thomas Falcon authored
      During a device failover or partition migration reset, it is not
      necessary to disable the backing adapter since it should not be
      running yet and its Command-Response Queue is closed. Sending
      device commands during this time could result in an error or
      timeout disrupting the reset process. In these cases, just halt
      transmissions, clean up resources, and continue with reset.
      Signed-off-by: default avatarThomas Falcon <tlfalcon@linux.vnet.ibm.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      18b8d6bb
    • Thomas Falcon's avatar
      ibmvnic: Reorganize device close · 01d9bd79
      Thomas Falcon authored
      Introduce a function to halt network operations and clean up any
      unused or outstanding socket buffers. Then, during device close,
      disable backing adapter before halting all queues and performing
      cleanup. This ensures all backing device operations will be
      stopped before the driver cleans up shared resources.
      Signed-off-by: default avatarThomas Falcon <tlfalcon@linux.vnet.ibm.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      01d9bd79
    • Thomas Falcon's avatar
      ibmvnic: Clean up device close · f873866a
      Thomas Falcon authored
      Remove some dead code now that RX pools are being cleaned. This
      was included to wait until any pending RX queue interrupts are
      processed, but NAPI polling should be disabled by this point.
      
      Another minor change is to use the net device parameter for any
      print functions instead of accessing it from the adapter structure.
      Signed-off-by: default avatarThomas Falcon <tlfalcon@linux.vnet.ibm.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      f873866a
    • William Tu's avatar
      openvswitch: fix vport packet length check. · 46e371f0
      William Tu authored
      When sending a packet to a tunnel device, the dev's hard_header_len
      could be larger than the skb->len in function packet_length().
      In the case of ip6gretap/erspan, hard_header_len = LL_MAX_HEADER + t_hlen,
      which is around 180, and an ARP packet sent to this tunnel has
      skb->len = 42.  This causes the 'unsign int length' to become super
      large because it is negative value, causing the later ovs_vport_send
      to drop it due to over-mtu size.  The patch fixes it by setting it to 0.
      Signed-off-by: default avatarWilliam Tu <u9012063@gmail.com>
      Acked-by: default avatarPravin B Shelar <pshelar@ovn.org>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      46e371f0
    • David S. Miller's avatar
      Merge branch 'pernet-convert-part5' · 55a165a7
      David S. Miller authored
      Kirill Tkhai says:
      
      ====================
      Converting pernet_operations (part #5)
      
      this series continues to review and to convert pernet_operations
      to make them possible to be executed in parallel for several
      net namespaces in the same time. There are mostly netfilter
      operations (and they should be the last netfilter's), also
      there are two patches touching pktgen and xfrm.
      ====================
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      55a165a7
    • Kirill Tkhai's avatar
      net: Convet ipv6_net_ops · 1fd2c557
      Kirill Tkhai authored
      These pernet_operations are similar to ipv4_net_ops.
      They are safe to be async.
      Signed-off-by: default avatarKirill Tkhai <ktkhai@virtuozzo.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      1fd2c557
    • Kirill Tkhai's avatar
      net: Convert ipv4_net_ops · e8a95ad4
      Kirill Tkhai authored
      These pernet_operations register and unregister bunch
      of nf_conntrack_l4proto. Exit method unregisters related
      sysctl, init method calls init_net and get_net_proto.
      The whole builtin_l4proto4 array has pretty simple
      init_net and get_net_proto methods. The first one register
      sysctl table, the second one is just RO memory dereference.
      So, these pernet_operations are safe to be marked as async.
      Signed-off-by: default avatarKirill Tkhai <ktkhai@virtuozzo.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      e8a95ad4
    • Kirill Tkhai's avatar
      net: Convert iptable_security_net_ops · 8dbc6e2e
      Kirill Tkhai authored
      These pernet_operations unregister net::ipv4::iptable_security table.
      Another net/pernet_operations do not send ipv4 packets to foreign
      net namespaces. So, we mark them async.
      Signed-off-by: default avatarKirill Tkhai <ktkhai@virtuozzo.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      8dbc6e2e