aboutsummaryrefslogtreecommitdiff
path: root/net/xfrm
AgeCommit message (Collapse)AuthorFilesLines
2008-11-25netns xfrm: /proc/net/xfrm_stat in netnsAlexey Dobriyan2-18/+19
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns MIBsAlexey Dobriyan4-54/+67
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: flush SA/SPDs on netns stopAlexey Dobriyan2-0/+22
SA/SPD doesn't pin netns (and it shouldn't), so get rid of them by hand. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: ->get_saddr in netnsAlexey Dobriyan1-3/+4
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: ->dst_lookup in netnsAlexey Dobriyan1-3/+4
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: KM reporting in netnsAlexey Dobriyan2-5/+4
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: pass netns with KM notificationsAlexey Dobriyan1-2/+4
SA and SPD flush are executed with NULL SA and SPD respectively, for these cases pass netns explicitly from userspace socket. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: xfrm_user module in netnsAlexey Dobriyan1-31/+45
Grab netns either from netlink socket, state or policy. SA and SPD flush are in init_net for now, this requires little attention, see below. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns NETLINK_XFRM socketAlexey Dobriyan3-41/+77
Stub senders to init_net's one temporarily. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: xfrm_input() fixupAlexey Dobriyan1-1/+2
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: dst garbage-collecting in netnsAlexey Dobriyan1-2/+2
Pass netns pointer to struct xfrm_policy_afinfo::garbage_collect() [This needs more thoughts on what to do with dst_ops] [Currently stub to init_net] Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: flushing/pruning bundles in netnsAlexey Dobriyan1-11/+8
Allow netdevice notifier as result. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: xfrm_route_forward() in netnsAlexey Dobriyan1-1/+2
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: xfrm_policy_check in netnsAlexey Dobriyan1-2/+3
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: lookup in netnsAlexey Dobriyan1-18/+20
Pass netns to xfrm_lookup()/__xfrm_lookup(). For that pass netns to flow_cache_lookup() and resolver callback. Take it from socket or netdevice. Stub DECnet to init_net. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: policy walking in netnsAlexey Dobriyan2-4/+4
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: finding policy in netnsAlexey Dobriyan2-11/+11
Add netns parameter to xfrm_policy_bysel_ctx(), xfrm_policy_byidx(). Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: policy flushing in netnsAlexey Dobriyan2-12/+12
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: policy insertion in netnsAlexey Dobriyan1-22/+24
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: propagate netns into policy byidx hashAlexey Dobriyan1-6/+6
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: state walking in netnsAlexey Dobriyan2-4/+4
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: finding states in netnsAlexey Dobriyan2-37/+40
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: fixup xfrm_alloc_spi()Alexey Dobriyan1-2/+2
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: state lookup in netnsAlexey Dobriyan3-22/+26
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: state flush in netnsAlexey Dobriyan2-10/+10
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: trivial netns propagationsAlexey Dobriyan2-31/+43
Take netns from xfrm_state or xfrm_policy. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: propagate netns into bydst/bysrc/byspi hash functionsAlexey Dobriyan1-21/+23
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns policy hash resizing workAlexey Dobriyan1-26/+26
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns policy countsAlexey Dobriyan1-18/+16
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_policy_bydst hashAlexey Dobriyan1-24/+33
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns inexact policiesAlexey Dobriyan1-8/+12
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_policy_byidx hashmaskAlexey Dobriyan1-8/+7
Per-netns hashes are independently resizeable. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_policy_byidx hashAlexey Dobriyan1-10/+18
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns policy listAlexey Dobriyan1-6/+6
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: add struct xfrm_policy::xp_netAlexey Dobriyan2-4/+5
Again, to avoid complications with passing netns when not necessary. Again, ->xp_net is set-once field, once set it never changes. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns km_waitqAlexey Dobriyan2-11/+9
Disallow spurious wakeups in __xfrm_lookup(). Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns state GC workAlexey Dobriyan1-5/+5
State GC is per-netns, and this is part of it. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns state GC listAlexey Dobriyan1-3/+3
km_waitq is going to be made per-netns to disallow spurious wakeups in __xfrm_lookup(). To not wakeup after every garbage-collected xfrm_state (which potentially can be from different netns) make state GC list per-netns. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_hash_workAlexey Dobriyan1-18/+17
All of this is implicit passing which netns's hashes should be resized. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_state countsAlexey Dobriyan1-7/+7
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_state_hmaskAlexey Dobriyan1-16/+15
Since hashtables are per-netns, they can be independently resized. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_state_byspi hashAlexey Dobriyan1-8/+13
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_state_bysrc hashAlexey Dobriyan1-9/+14
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_state_bydst hashAlexey Dobriyan1-24/+26
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: per-netns xfrm_state_all listAlexey Dobriyan1-6/+8
This is done to get a) simple "something leaked" check b) cover possible DoSes when other netns puts many, many xfrm_states onto a list. c) not miss "alien xfrm_state" check in some of list iterators in future. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: add struct xfrm_state::xs_netAlexey Dobriyan2-6/+7
To avoid unnecessary complications with passing netns around. * set once, very early after allocating * once set, never changes For a while create every xfrm_state in init_net. Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25netns xfrm: add netns boilerplateAlexey Dobriyan2-6/+46
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-25xfrm: initialise xfrm_policy_gc_work staticallyAlexey Dobriyan1-2/+1
Signed-off-by: Alexey Dobriyan <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-12net: Remove unused parameter of xfrm_gen_index()Arnaud Ebalard1-3/+3
In commit 2518c7c2b3d7f0a6b302b4efe17c911f8dd4049f ("[XFRM]: Hash policies when non-prefixed."), the last use of xfrm_gen_policy() first argument was removed, but the argument was left behind in the prototype. Signed-off-by: Arnaud Ebalard <[email protected]> Acked-by: Herbert Xu <[email protected]> Signed-off-by: David S. Miller <[email protected]>
2008-11-06Merge branch 'master' of ↵David S. Miller2-3/+3
master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 Conflicts: drivers/net/wireless/ath5k/base.c net/8021q/vlan_core.c