diff options
| author | Jesper Dangaard Brouer <[email protected]> | 2021-02-09 13:38:29 +0000 |
|---|---|---|
| committer | Daniel Borkmann <[email protected]> | 2021-02-13 00:15:28 +0000 |
| commit | 5f7d57280c1982d993d5f4ff0edac310f820f607 (patch) | |
| tree | 2cc3d0e2753a3537c810d801775a84d980b454c3 /net/ipv6/tcp_ipv6.c | |
| parent | bpf: Add BPF-helper for MTU checking (diff) | |
| download | kernel-5f7d57280c1982d993d5f4ff0edac310f820f607.tar.gz kernel-5f7d57280c1982d993d5f4ff0edac310f820f607.zip | |
bpf: Drop MTU check when doing TC-BPF redirect to ingress
The use-case for dropping the MTU check when TC-BPF does redirect to
ingress, is described by Eyal Birger in email[0]. The summary is the
ability to increase packet size (e.g. with IPv6 headers for NAT64) and
ingress redirect packet and let normal netstack fragment packet as needed.
[0] https://lore.kernel.org/netdev/CAHsH6Gug-hsLGHQ6N0wtixdOa85LDZ3HNRHVd0opR=19Qo4W4Q@mail.gmail.com/
V15:
- missing static for function declaration
V9:
- Make net_device "up" (IFF_UP) check explicit in skb_do_redirect
V4:
- Keep net_device "up" (IFF_UP) check.
- Adjustment to handle bpf_redirect_peer() helper
Signed-off-by: Jesper Dangaard Brouer <[email protected]>
Signed-off-by: Daniel Borkmann <[email protected]>
Acked-by: John Fastabend <[email protected]>
Link: https://lore.kernel.org/bpf/161287790971.790810.11785274340154740591.stgit@firesoul
Diffstat (limited to 'net/ipv6/tcp_ipv6.c')
0 files changed, 0 insertions, 0 deletions