stephen hemminger
eccc1bb8d4
tunnel: drop packet if ECN present with not-ECT ...
Linux tunnels were written before RFC6040 and therefore never
implemented the corner case of ECN getting set in the outer header
and the inner header not being ready for it.
Section 4.2. Default Tunnel Egress Behaviour.
o If the inner ECN field is Not-ECT, the decapsulator MUST NOT
propagate any other ECN codepoint onwards. This is because the
inner Not-ECT marking is set by transports that rely on dropped
packets as an indication of congestion and would not understand or
respond to any other ECN codepoint [RFC4774]. Specifically:
* If the inner ECN field is Not-ECT and the outer ECN field is
CE, the decapsulator MUST drop the packet.
* If the inner ECN field is Not-ECT and the outer ECN field is
Not-ECT, ECT(0), or ECT(1), the decapsulator MUST forward the
outgoing packet with the ECN field cleared to Not-ECT.
This patch moves the ECN decap logic out of the individual tunnels
into a common place.
It also adds logging to allow detecting broken systems that
set ECN bits incorrectly when tunneling (or an intermediate
router might be changing the header).
Overloads rx_frame_error to keep track of ECN related error.
Thanks to Chris Wright who caught this while reviewing the new VXLAN
tunnel.
This code was tested by injecting faulty logic in other end GRE
to send incorrectly encapsulated packets.
Signed-off-by: Stephen Hemminger <shemminger@vyatta.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2012-09-27 18:12:37 -04:00
9p: Reduce object size with CONFIG_NET_9P_DEBUG
2012-01-05 10:51:44 -06:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2012-09-15 11:43:53 -04:00
caif-hsi: Remove use of module parameters
2012-06-25 16:44:12 -07:00
af_iucv: add shutdown for HS transport
2012-03-07 22:52:24 -08:00
netlink: Rename pid to portid to avoid confusion
2012-09-10 15:30:41 -04:00
ipv6: add a new namespace for nf_conntrack_reasm
2012-09-19 17:23:28 -04:00
netlink: Rename pid to portid to avoid confusion
2012-09-10 15:30:41 -04:00
net: remove my future former mail address
2012-06-17 16:29:38 -07:00
sctp: fix a compile error in sctp.h
2012-08-15 03:43:43 -07:00
netfilter: ip6tables: add MASQUERADE target
2012-08-30 03:00:18 +02:00
af_unix: speedup /proc/net/unix
2012-06-08 14:27:23 -07:00
net: Dont use ifindices in hash fns
2012-08-09 16:18:06 -07:00
atm: clip: Use device neigh support on top of "arp_tbl".
2011-11-30 18:51:03 -05:00
userns: Convert net/ax25 to use kuid_t where appropriate
2012-08-14 21:49:42 -07:00
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next into for-davem
2012-09-14 13:53:49 -04:00
net: core: add function for incremental IPv6 pseudo header checksum updates
2012-08-30 03:00:16 +02:00
cipso: handle CIPSO options correctly when NetLabel is disabled
2012-06-01 14:18:29 -04:00
codel: refine one condition to avoid a nul rec_inv_sqrt
2012-08-10 16:52:54 -07:00
net: cleanup unsigned to unsigned int
2012-04-15 12:44:40 -04:00
net/dcb: Add an optional max rate attribute
2012-04-05 05:08:04 -04:00
net: cleanup unsigned to unsigned int
2012-04-15 12:44:40 -04:00
net: cleanup unsigned to unsigned int
2012-04-15 12:44:40 -04:00
decnet: Use neighbours privately in dn_route struct.
2012-07-05 01:12:14 -07:00
dsa: Include linux/if_ether.h to fix build error
2011-12-01 11:41:06 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2012-08-22 14:21:38 -07:00
net: Fix warnings in dst_ops.h
2012-07-19 10:43:03 -07:00
ipv4: Elide fib_validate_source() completely when possible.
2012-06-29 01:36:36 -07:00
ipv4: Kill FLOWI_FLAG_RT_NOCACHE and associated code.
2012-07-20 13:36:54 -07:00
flow_dissector: use a 64bit load/store
2011-11-29 13:17:03 -05:00
netlink: Rename pid to portid to avoid confusion
2012-09-10 15:30:41 -04:00
net: cleanup unsigned to unsigned int
2012-04-15 12:44:40 -04:00
wireless: add radiotap A-MPDU status field
2012-08-20 13:53:09 +02:00
6LoWPAN: add fragmentation support
2011-11-14 00:19:42 -05:00
mac802154: declare reduced mlme operations
2012-05-16 15:16:56 -04:00
net: delete all instances of special processing for token ring
2012-05-15 20:14:35 -04:00
ipv6: Add helper inet6_csk_update_pmtu().
2012-07-16 03:44:56 -07:00
ipv6: Early TCP socket demux
2012-07-26 15:50:39 -07:00
net-tcp: Fast Open client - sendmsg(MSG_FASTOPEN)
2012-07-19 11:02:03 -07:00
net: ipv6: fix TCP early demux
2012-08-06 13:33:21 -07:00
tunnel: drop packet if ECN present with not-ECT
2012-09-27 18:12:37 -04:00
ipv6: unify fragment thresh handling code
2012-09-19 17:23:28 -04:00
ipv4: Early TCP socket demux.
2012-06-19 21:22:05 -07:00
net: use a per task frag allocator
2012-09-24 16:31:37 -04:00
inet: remove rcu protection on tw_net
2011-12-14 13:34:55 -05:00
ipv4: Maintain redirect and PMTU info in struct rtable again.
2012-07-10 22:40:14 -07:00
ipv4: fix path MTU discovery with connection tracking
2012-08-26 19:13:55 +02:00
ipv6: fix handling of blackhole and prohibit routes
2012-09-05 17:49:28 -04:00
ipv6: fix inet6_csk_xmit()
2012-07-18 08:59:58 -07:00
gre: Support GRE over IPv6
2012-08-14 14:28:32 -07:00
ipv4: Cache routes in nexthop exception entries.
2012-07-31 15:02:02 -07:00
ipvs: add pmtu_disc option to disable IP DF for TUN packets
2012-08-10 10:35:07 +09:00
tunnel: implement 64 bits statistics
2012-04-14 14:47:05 -04:00
ipv6: make ip6_frag_nqueues() and ip6_frag_mem() static inline
2012-09-19 17:23:28 -04:00
lapb: Neaten debugging
2012-05-17 18:45:20 -04:00
include: replace linux/module.h with "struct module" wherever possible
2011-10-31 19:32:32 -04:00
llc: Remove stray reference to sysctl_llc_station_ack_timeout.
2012-09-17 13:13:24 -04:00
net: cleanup unsigned to unsigned int
2012-04-15 12:44:40 -04:00
net: delete all instances of special processing for token ring
2012-05-15 20:14:35 -04:00
mac80211: add IEEE80211_HW_P2P_DEV_ADDR_FOR_INTF
2012-08-20 13:58:23 +02:00
mac802154: add wpan device-class support
2012-06-26 21:06:11 -07:00
net: Dont use ifindices in hash fns
2012-08-09 16:18:06 -07:00
net: output path optimizations
2012-08-07 16:24:55 -07:00
ipv6: add a new namespace for nf_conntrack_reasm
2012-09-19 17:23:28 -04:00
net: Pass neighbours and dest address into NETEVENT_REDIRECT events.
2012-07-05 02:21:55 -07:00
netlink: Rename pid to portid to avoid confusion
2012-09-10 15:30:41 -04:00
net: netprio_cgroup: rework update socket logic
2012-07-22 12:44:01 -07:00
net: cleanup unsigned to unsigned int
2012-04-15 12:44:40 -04:00
ipv6: Early TCP socket demux
2012-07-26 15:50:39 -07:00
ipv6: bool/const conversions phase2
2012-05-19 01:08:16 -04:00
net_sched: red: Make minor corrections to comments
2012-04-16 23:53:11 -04:00
cfg80211: add cellular base station regulatory hint support
2012-07-17 12:16:39 +02:00
tcp: TCP Fast Open Server - support TFO listeners
2012-08-31 20:02:19 -04:00
ipv4/route: arg delay is useless in rt_cache_flush()
2012-09-07 14:44:08 -04:00
rtnl: allow to specify different num for rx and tx queue count
2012-07-20 11:06:59 -07:00
net sched: Pass the skb into change so it can access NETLINK_CB
2012-08-14 21:55:28 -07:00
net: Remove unnecessary NULL check in scm_destroy().
2012-09-24 15:52:33 -04:00
net: avoid reloads in SNMP_UPD_PO_STATS
2012-08-06 13:40:47 -07:00
net: use a per task frag allocator
2012-09-24 16:31:37 -04:00
tcp: TCP Fast Open Server - take SYNACK RTT after completing 3WHS
2012-09-22 15:47:10 -04:00
cgroup: pass struct mem_cgroup instead of struct cgroup to socket memcg
2012-04-10 10:04:07 -07:00
[PATCH] tcp: Cache inetpeer in timewait socket, and only when necessary.
2012-06-09 14:56:12 -07:00
net/ipv6/udp: UDP encapsulation: introduce encap_rcv hook into IPv6
2012-04-28 22:21:51 -04:00
net: ipv4: Standardize prefixes for message logging
2012-03-12 17:05:21 -07:00
net: cleanup unsigned to unsigned int
2012-04-15 12:44:40 -04:00
mac802154: monitor device support
2012-05-16 15:17:08 -04:00
net: cleanup unsigned to unsigned int
2012-04-15 12:44:40 -04:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2012-09-15 11:43:53 -04:00
eccc1bb8d4