Jakub Sitnicki
c4937609e1
UPSTREAM: bpf: Introduce SK_LOOKUP program type with a dedicated attach point ...
Add a new program type BPF_PROG_TYPE_SK_LOOKUP with a dedicated attach type
BPF_SK_LOOKUP. The new program kind is to be invoked by the transport layer
when looking up a listening socket for a new connection request for
connection oriented protocols, or when looking up an unconnected socket for
a packet for connection-less protocols.
When called, SK_LOOKUP BPF program can select a socket that will receive
the packet. This serves as a mechanism to overcome the limits of what
bind() API allows to express. Two use-cases driving this work are:
(1) steer packets destined to an IP range, on fixed port to a socket
192.0.2.0/24, port 80 -> NGINX socket
(2) steer packets destined to an IP address, on any port to a socket
198.51.100.1, any port -> L7 proxy socket
In its run-time context program receives information about the packet that
triggered the socket lookup. Namely IP version, L4 protocol identifier, and
address 4-tuple. Context can be further extended to include ingress
interface identifier.
To select a socket BPF program fetches it from a map holding socket
references, like SOCKMAP or SOCKHASH, and calls bpf_sk_assign(ctx, sk, ...)
helper to record the selection. Transport layer then uses the selected
socket as a result of socket lookup.
In its basic form, SK_LOOKUP acts as a filter and hence must return either
SK_PASS or SK_DROP. If the program returns with SK_PASS, transport should
look for a socket to receive the packet, or use the one selected by the
program if available, while SK_DROP informs the transport layer that the
lookup should fail.
This patch only enables the user to attach an SK_LOOKUP program to a
network namespace. Subsequent patches hook it up to run on local delivery
path in ipv4 and ipv6 stacks.
Suggested-by: Marek Majkowski <marek@cloudflare.com>
Change-Id: I4a245236f759b4789883365ffea7ef1e793c3ac8
Signed-off-by: Jakub Sitnicki <jakub@cloudflare.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/20200717103536.397595-3-jakub@cloudflare.com
2026-01-14 18:12:05 -08:00
scripts: add dummy report mode to add_namespace.cocci
2020-08-11 15:33:35 +02:00
Merge android11-5.4.180+ ( 598165f) into msm-5.4
2022-04-21 10:51:21 +05:30
Merge tag 'ASB-2025-10-06_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-10-08 15:17:54 +03:00
Revert "PM: domains: Fix up terminology with parent/child"
2023-06-16 09:26:26 +00:00
genksyms: fix memory leak when the same symbol is read from *.symref file
2025-03-13 12:43:00 +01:00
scripts: gki: Disable DEBUG_FS for user variant builds
2020-07-21 15:30:57 -07:00
Merge branch 'android11-5.4-lts' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-12-11 01:41:51 -08:00
Merge tag 'LA.UM.9.14.r1-25800-LAHAINA.QSSI15.0' of https://git.codelinaro.org/clo/la/kernel/msm-5.4 into android13-5.4-lahaina
2025-02-14 02:42:56 +02:00
kbuild: fix broken builds because of GZIP,BZIP2,LZOP variables
2020-09-03 11:27:10 +02:00
selinux: Chain up tool resolving errors in install_policy.sh
2025-04-10 14:29:39 +02:00
ftrace/scripts: Update the instructions for ftrace-bisect.sh
2023-02-06 07:52:44 +01:00
Merge android11-5.4.86+ ( 7d99cf8) into msm-5.4
2021-06-07 15:17:29 +05:30
ASN.1: Fix check for strdup() success
2023-04-26 11:24:06 +02:00
scripts: switch explicitly to Python 3
2021-05-22 11:38:30 +02:00
UPSTREAM: bpf: Introduce SK_LOOKUP program type with a dedicated attach point
2026-01-14 18:12:05 -08:00
Merge android11-5.4.259+ ( 70db018) into msm-5.4
2024-01-31 01:01:26 -08:00
kbuild: fix argument parsing in scripts/config
2025-06-04 14:32:31 +02:00
scripts/decode_stacktrace: strip basepath from all paths
2020-07-29 10:18:35 +02:00
scripts/decodecode: fix trapping instruction formatting
2020-05-14 07:58:29 +02:00
depmod: handle the case of /sbin/depmod without /sbin in PATH
2021-01-12 20:16:10 +01:00
scripts: switch explicitly to Python 3
2021-05-22 11:38:30 +02:00
modpost: move the namespace field in Module.symvers last
2020-03-25 08:25:55 +01:00
Merge tag 'ASB-2023-02-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2023-02-08 18:28:38 +02:00
scripts/faddr2line: Fix regression in name resolution on ppc64le
2022-12-08 11:23:02 +01:00
kbuild: Fix '-S -c' in x86 stack protector scripts
2024-08-19 05:33:53 +02:00
kbuild: Fix '-S -c' in x86 stack protector scripts
2024-08-19 05:33:53 +02:00
ABI: Update section name in script and internal allowed list
2020-09-30 13:12:21 -07:00
kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
2021-09-22 12:26:26 +02:00
ANDROID: generate_initcall_order.pl: Use two dash long options for llvm-nm
2021-07-21 20:41:37 -07:00
tweewide: Fix most Shebang lines
2021-05-22 11:38:30 +02:00
Merge android-5.4-stable.50 ( a200ad5) into msm-5.4
2020-07-20 19:22:16 -07:00
ANDROID: kallsyms: increase KSYM_NAME_LEN
2020-08-04 19:33:41 +00:00
Merge tag 'ASB-2025-10-06_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-10-08 15:17:54 +03:00
UPSTREAM: kbuild: Add support for 'as-instr' to be used in Kconfig files
2022-11-14 03:04:02 +02:00
leaking_addresses: Always print a trailing newline
2021-11-17 09:48:31 +01:00
BACKPORT: bpf: Resolve BTF IDs in vmlinux image
2026-01-14 18:12:02 -08:00
scripts: set proper OpenSSL include dir also for sign-file
2021-02-26 10:10:27 +01:00
kbuild: add infrastructure to build userspace programs
2025-09-28 10:00:32 +02:00
kbuild: add infrastructure to build userspace programs
2025-09-28 10:00:32 +02:00
kbuild: Move -Wenum-enum-conversion to W=2
2025-03-13 12:43:09 +01:00
gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
2022-08-25 11:18:31 +02:00
kbuild: move headers_check rule to usr/include/Makefile
2020-03-05 16:43:47 +01:00
kbuild: use -MMD instead of -MD to exclude system headers from dependency
2025-07-17 18:24:51 +02:00
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
2025-09-12 18:48:05 +03:00
This is the 5.4.212 stable release
2022-09-21 12:34:35 +02:00
kbuild: fix broken builds because of GZIP,BZIP2,LZOP variables
2020-09-03 11:27:10 +02:00
kbuild: add infrastructure to build userspace programs
2025-09-28 10:00:32 +02:00
Merge 5.4.287 into android11-5.4-lts
2024-12-16 10:50:16 +00:00
mksysmap: Fix the mismatch of 'L0' symbols in System.map
2022-09-28 11:03:59 +02:00
ANDROID: kbuild: don't preprocess module-lto.lds
2020-08-19 09:15:50 -07:00
scripts: add dummy report mode to add_namespace.cocci
2020-08-11 15:33:35 +02:00
parse-maintainers: Mark as executable
2020-03-25 08:25:49 +01:00
This is the 5.4.244 stable release
2023-06-20 11:07:18 +00:00
Linux 5.4.129
2021-06-30 19:19:07 +02:00
recordmcount.pl: fix typo in s390 mcount regex
2022-01-05 12:37:44 +01:00
ANDROID: setlocalversion: make KMI_GENERATION optional
2021-11-17 22:45:14 +00:00
tweewide: Fix most Shebang lines
2021-05-22 11:38:30 +02:00
sign-file: Fix incorrect return values check
2023-12-20 15:41:17 +01:00
tweewide: Fix most Shebang lines
2021-05-22 11:38:30 +02:00
tweewide: Fix most Shebang lines
2021-05-22 11:38:30 +02:00
scripts/tags.sh: Resolve gtags empty index generation
2023-07-27 08:37:03 +02:00
Makefile: fix GDB warning with CONFIG_RELR
2021-07-14 16:53:12 +02:00
kbuild: add variables for compression tools
2020-09-03 11:27:10 +02:00
c4937609e1