Jason Baron
9092a76d3c
tcp: add backup TFO key infrastructure ...
We would like to be able to rotate TFO keys while minimizing the number of
client cookies that are rejected. Currently, we have only one key which can
be used to generate and validate cookies, thus if we simply replace this
key clients can easily have cookies rejected upon rotation.
We propose having the ability to have both a primary key and a backup key.
The primary key is used to generate as well as to validate cookies.
The backup is only used to validate cookies. Thus, keys can be rotated as:
1) generate new key
2) add new key as the backup key
3) swap the primary and backup key, thus setting the new key as the primary
We don't simply set the new key as the primary key and move the old key to
the backup slot because the ip may be behind a load balancer and we further
allow for the fact that all machines behind the load balancer will not be
updated simultaneously.
We make use of this infrastructure in subsequent patches.
Suggested-by: Igor Lubashev <ilubashe@akamai.com>
Signed-off-by: Jason Baron <jbaron@akamai.com>
Signed-off-by: Christoph Paasch <cpaasch@apple.com>
Acked-by: Yuchung Cheng <ycheng@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-05-30 13:41:26 -07:00
9p: Add refcount to p9_req_t
2018-09-08 01:39:47 +09:00
Bluetooth: Ignore CC events not matching the last HCI command
2019-05-05 19:29:04 +02:00
net/af_iucv: locate IUCV header via skb_network_header()
2018-09-26 09:56:07 -07:00
netfilter: add API to manage NAT helpers.
2019-04-30 14:19:55 +02:00
net: Initial nexthop code
2019-05-28 21:37:30 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13
2019-05-21 11:28:45 +02:00
phonet: fix building with clang
2019-02-21 16:23:56 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-05-02 22:14:21 -04:00
net: sched: Introduce act_ctinfo action
2019-05-29 21:43:54 -07:00
net/sched: let actions use RCU to access 'goto_chain'
2019-03-21 13:26:42 -07:00
ipv6: Move ipv6 stubs to a separate header file
2019-03-29 10:53:45 -07:00
ieee802154: add rx LQI from userspace
2018-07-13 12:18:18 -04:00
rxrpc: Allow the kernel to mark a call as being non-interruptible
2019-05-16 16:25:20 +01:00
net: split out functions related to registering inflight socket files
2019-02-28 08:24:23 -07:00
vsock: split dwork to avoid reinitializations
2018-08-07 12:39:13 -07:00
ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
2019-05-05 11:25:49 -07:00
ax25: fix possible use-after-free
2019-01-23 11:18:00 -08:00
net-next: ax88796: add interrupt status callback to platform data
2018-04-19 16:11:11 -04:00
bonding: count master 3ad stats separately
2019-01-24 22:18:48 -08:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 5
2019-05-21 11:28:40 +02:00
bonding: avoid possible dead-lock
2018-09-26 20:22:19 -07:00
bpf: Introduce bpf sk local storage
2019-04-27 09:07:04 -07:00
net: remove sock_poll_busy_flag
2018-07-30 09:10:25 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13
2019-05-21 11:28:45 +02:00
Various updates, notably:
2019-04-26 16:05:52 -04:00
Remove 'type' argument from access_ok() function
2019-01-03 18:57:57 -08:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13
2019-05-21 11:28:45 +02:00
net: rework SIOCGSTAMP ioctl handling
2019-04-19 14:07:40 -07:00
net: dcb: Add priority-to-DSCP map getters
2018-07-27 13:17:50 -07:00
devlink: add warning in case driver does not set port type
2019-05-23 09:18:43 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 24
2019-05-21 11:52:39 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 24
2019-05-21 11:52:39 +02:00
net: phylink: Add struct phylink_config to PHYLINK API
2019-05-29 21:48:53 -07:00
net: dst: remove gc leftovers
2019-03-21 13:39:25 -07:00
erspan: set bso bit based on mirrored packet's len
2018-05-20 18:31:42 -04:00
net: Introduce generic failover module
2018-05-28 22:59:54 -04:00
net: fib: drop include of module.h from fib_notifier.h
2019-04-22 21:50:53 -07:00
net: Set strict_start_type for routes and rules
2019-05-22 17:50:24 -07:00
route: Add multipath_hash in flowi_common to make user-define hash
2019-02-27 12:50:17 -08:00
flow_dissector: switch kernel context to struct bpf_flow_dissector
2019-04-23 18:36:33 +02:00
flow_offload: support CVLAN match
2019-05-16 12:02:42 -07:00
mac80211: calculate hash for fq without holding fq->lock in itxq enqueue
2019-04-26 13:02:11 +02:00
net: align gnet_stats_basic_cpu struct
2018-11-17 21:37:29 -08:00
genetlink: optionally validate strictly/dumps
2019-04-27 17:07:22 -04:00
net: Move the definition of the default Geneve udp port to public header file
2019-03-22 12:09:31 -07:00
net: Add netif_is_gretap()/netif_is_ip6gretap()
2018-12-10 15:53:04 -08:00
net: Add __icmp_send helper.
2019-02-25 14:32:35 -08:00
wireless-drivers-next patches for 5.1
2019-02-22 12:56:24 -08:00
net/ipv6: Add anycast addresses to a global hashtable
2018-11-02 23:54:56 -07:00
net: ife: drop include of module.h from net/ife.h
2019-04-22 21:50:53 -07:00
net: allow binding socket in a VRF when there's an unbound socket
2018-11-07 16:12:38 -08:00
net: use indirect call wrappers at GRO transport layer
2018-12-15 13:23:02 -08:00
tcp: change pingpong threshold to 3
2019-01-27 13:29:43 -08:00
inet: Refactor INET_ECN_decapsulate()
2018-10-17 17:45:07 -07:00
inet: frags: fix use-after-free read in inet_frag_destroy_rcu
2019-05-28 17:22:15 -07:00
net: dccp: fix kernel crash on module load
2018-12-24 15:27:56 -08:00
net: ensure unbound stream socket to be chosen when not in a VRF
2018-11-07 16:12:38 -08:00
net-tcp: remove useless tw_timeout field
2018-06-05 10:45:24 -04:00
net: ipv4: use a dedicated counter for icmp_v4 redirect packets
2019-02-08 21:50:15 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-04-05 14:14:19 -07:00
ipv6: Make fib6_nh optional at the end of fib6_info
2019-05-24 13:26:44 -07:00
ipv6: Make fib6_nh optional at the end of fib6_info
2019-05-24 13:26:44 -07:00
udp: Support for error handlers of tunnels with arbitrary destination port
2018-11-08 17:13:08 -08:00
ipv4: Rename and export nh_update_mtu
2019-05-22 17:48:44 -07:00
route: Add multipath_hash in flowi_common to make user-define hash
2019-02-27 12:50:17 -08:00
ipvs: allow tunneling with gue encapsulation
2019-04-08 22:57:59 +02:00
ipv6: factor out protocol delivery helper
2018-11-07 16:23:05 -08:00
ip6: fix skb leak in ip6frag_expire_frag_queue()
2019-05-05 10:40:24 -07:00
ipv6: export function to send route updates
2019-05-22 17:48:43 -07:00
ipvlan, l3mdev: fix broken l3s mode wrt local routes
2019-01-30 22:13:34 -08:00
net: Add lag.h, net_lag_port_dev_txable()
2018-07-11 23:10:19 -07:00
llc: avoid blocking in llc_sap_close()
2018-09-13 09:04:58 -07:00
llc: delete timers synchronously in llc_sk_free()
2018-04-22 14:55:03 -04:00
lwtunnel: Pass encap and encap type attributes to lwtunnel_fill_encap
2019-04-23 19:42:29 -07:00
Various updates, notably:
2019-04-26 16:05:52 -04:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13
2019-05-21 11:28:45 +02:00
ipv6: Add neighbor helpers that use the ipv6 stub
2019-04-08 15:22:40 -07:00
net ipv6: Prevent neighbor add if protocol is disabled on device
2019-04-17 23:19:07 -07:00
net: Introduce net_failover driver
2018-05-28 22:59:54 -04:00
net: Initial nexthop code
2019-05-28 21:37:30 -07:00
net: ipv4: Notify about changes to ip_forward_update_priority
2018-08-01 09:52:30 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13
2019-05-21 11:28:45 +02:00
netlink: add validation of NLA_F_NESTED flag
2019-05-04 01:27:11 -04:00
net: netrom: Fix error cleanup path of nr_proto_init
2019-04-11 13:59:49 -07:00
nexthop: Add support for nexthop groups
2019-05-28 21:37:30 -07:00
xdp: introduce xdp_return_frame_rx_napi
2018-05-24 18:36:15 -07:00
ipv{4,6}/ping: simplify proc file creation
2018-05-16 07:23:35 +02:00
net/sched: remove block pointer from common offload structure
2019-05-07 12:23:40 -07:00
net: sched: extend Qdisc with rcu
2018-09-25 20:17:35 -07:00
net: Convert protocol error handlers from void to int
2018-11-08 17:13:08 -08:00
net: psample: drop include of module.h from psample.h
2019-04-22 21:50:53 -07:00
net: fix raw socket lookup device bind matching with VRFs
2018-11-07 16:12:39 -08:00
cfg80211: make wmm_rule part of the reg_rule structure
2018-08-28 11:11:47 +02:00
tcp: free request sock directly upon TFO or syncookies error
2019-03-19 14:13:01 -07:00
proc: introduce proc_create_seq{,_data}
2018-05-16 07:23:35 +02:00
ipv4: Add helpers for neigh lookup for nexthop
2019-04-08 15:22:41 -07:00
net: Add extack argument to rtnl_create_link
2018-11-06 15:00:45 -08:00
net: Rename net/nexthop.h net/rtnh.h
2019-04-22 21:47:25 -07:00
flow_dissector: switch kernel context to struct bpf_flow_dissector
2019-04-23 18:36:33 +02:00
pids: Compute task_tgid using signal->leader_pid
2018-07-21 10:43:12 -05:00
net: seg6.h: remove an unused #include
2018-12-20 16:56:04 -08:00
rhashtable: split rhashtable.h
2018-06-22 13:43:27 +09:00
bpf: add End.DT6 action to bpf_lwt_seg6_action helper
2018-07-31 09:22:48 +02:00
slip: Check if rstate is initialized before uncompressing
2018-04-11 10:33:46 -04:00
net/smc: add smcd support to the pnet table
2019-02-21 10:34:37 -08:00
tcp: do not recycle cloned skbs
2019-05-15 09:22:41 -07:00
bpf: Enable BPF_PROG_TYPE_SK_REUSEPORT bpf prog in reuseport selection
2018-08-11 01:58:46 +02:00
strparser: Add __strp_unpause and use it in ktls.
2018-06-06 14:07:53 -04:00
switchdev: Remove unused transaction item queue
2019-03-01 21:35:19 -08:00
tcp: add backup TFO key infrastructure
2019-05-30 13:41:26 -07:00
flow_dissector: do not rely on implicit casts
2018-05-08 00:02:41 -04:00
net/tls: byte swap device req TCP seq no upon setting
2019-04-27 16:52:21 -04:00
ipv6: fold sockcm_cookie into ipcm6_cookie
2018-07-07 10:58:49 +09:00
datagram: remove rendundant 'peeked' argument
2019-04-08 09:51:54 -07:00
ipv6: Move ipv6 stubs to a separate header file
2019-03-29 10:53:45 -07:00
net: Add IANA_VXLAN_UDP_PORT definition to vxlan header file
2019-03-22 12:09:31 -07:00
xdp: export xdp_rxq_info_unreg_mem_model
2018-08-29 12:25:53 -07:00
xsk: fix umem memory leak on cleanup
2019-03-16 01:27:51 +01:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2019-05-07 22:03:58 -07:00
9092a76d3c