-
-
Notifications
You must be signed in to change notification settings - Fork 46
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge tag 'nf-next-24-05-12' of git://git.kernel.org/pub/scm/linux/ke…
…rnel/git/netfilter/nf-next Pablo Neira Ayuso says: ==================== Netfilter updates for net-next The following patchset contains Netfilter updates for net-next: Patch #1 skips transaction if object type provides no .update interface. Patch #2 skips NETDEV_CHANGENAME which is unused. Patch #3 enables conntrack to handle Multicast Router Advertisements and Multicast Router Solicitations from the Multicast Router Discovery protocol (RFC4286) as untracked opposed to invalid packets. From Linus Luessing. Patch #4 updates DCCP conntracker to mark invalid as invalid, instead of dropping them, from Jason Xing. Patch #5 uses NF_DROP instead of -NF_DROP since NF_DROP is 0, also from Jason. Patch #6 removes reference in netfilter's sysctl documentation on pickup entries which were already removed by Florian Westphal. Patch #7 removes check for IPS_OFFLOAD flag to disable early drop which allows to evict entries from the conntrack table, also from Florian. Patches #8 to #16 updates nf_tables pipapo set backend to allocate the datastructure copy on-demand from preparation phase, to better deal with OOM situations where .commit step is too late to fail. Series from Florian Westphal. Patch #17 adds a selftest with packetdrill to cover conntrack TCP state transitions, also from Florian. Patch #18 use GFP_KERNEL to clone elements from control plane to avoid quick atomic reserves exhaustion with large sets, reporter refers to million entries magnitude. * tag 'nf-next-24-05-12' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next: netfilter: nf_tables: allow clone callbacks to sleep selftests: netfilter: add packetdrill based conntrack tests netfilter: nft_set_pipapo: remove dirty flag netfilter: nft_set_pipapo: move cloning of match info to insert/removal path netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone netfilter: nft_set_pipapo: merge deactivate helper into caller netfilter: nft_set_pipapo: prepare walk function for on-demand clone netfilter: nft_set_pipapo: prepare destroy function for on-demand clone netfilter: nft_set_pipapo: make pipapo_clone helper return NULL netfilter: nft_set_pipapo: move prove_locking helper around netfilter: conntrack: remove flowtable early-drop test netfilter: conntrack: documentation: remove reference to non-existent sysctl netfilter: use NF_DROP instead of -NF_DROP netfilter: conntrack: dccp: try not to drop skb in conntrack netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery netfilter: nf_tables: remove NETDEV_CHANGENAME from netdev chain event handler netfilter: nf_tables: skip transaction if update object is not implemented ==================== Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Jakub Kicinski <[email protected]>
- patchew/2024090405-condiment-viewer-237c@gregkh
- patchew/2024081200-reward-washing-4d15@gregkh
- patchew/1716543865-37448-1-git-send-email-liyonglong@chinatelecom.cn
- patchew/1716450994-5145-1-git-send-email-liyonglong@chinatelecom.cn
- patchew/58464660b9d2f74d45c0c91663fd71132749db90.1717119915.git.geliang@kernel.org
- patchew/20250228-mptcp-pm-reorg-code-v2-0-fa8b2542b7a5@kernel.org
- patchew/20250227-mptcp-pm-reorg-code-v1-0-cb4677096709@kernel.org
- patchew/20250226-mptcp-userspace-avoid-worker-v2-1-4b144f314353@kernel.org
- patchew/20250226-mptcp-tcp-ulp-diag-cap-v1-1-e1a003ad0606@kernel.org
- patchew/20250224-mptcp-userspace-avoid-worker-v1-1-127325d3e9a4@kernel.org
- patchew/20250224-mptcp-sft-diag-squash-v1-1-81eb3843fa53@kernel.org
- patchew/20250221-mptcp-sched-data-ptr-v1-0-dbaec476fa6b@kernel.org
- patchew/20250218-mptcp-dss-drop-mpj-v2-0-0c6caa10ec52@kernel.org
- patchew/20250217-mptcp-dss-drop-mpj-v1-0-d671d6b9a153@kernel.org
- patchew/20250204-net-mptcp-sft-conn-f-v1-1-6b470c72fffa@kernel.org
- patchew/20250127-selftests-mptcp-fastclose-tests-v1-1-787609c66612@kernel.org
- patchew/20250122-mptcp-issue-540-v3-0-4aeed3022f23@kernel.org
- patchew/20250122-mpc-no-blackhole-v2-0-13e6670d512f@kernel.org
- patchew/20250117-net-next-mptcp-syn._5Fretrans._5Fbefore._5Ftcp._5Ffallback-v1-1-ab4b187099b0@kernel.org
- patchew/20250117-mptcp-issue-540-v2-0-a194740fb380@kernel.org
- patchew/20250116-mptcp-issue-540-v1-1-b0ba2c126eb8@kernel.org
- patchew/20250114-net-next-mptcp-fix-remote-addr-v1-1-debcd84ea86f@kernel.org
- patchew/20250114-mpc-no-blackhole-v1-0-994bd2a357fb@kernel.org
- patchew/20250113-net-mptcp-connect-st-flakes-v1-0-0d986ee7b1b6@kernel.org
- patchew/20250108-slft-mptcp-conn-misc-impr-v1-0-bdfbdba48a1f@kernel.org
- patchew/20250107-mptcp-sysfs-netns-v1-0-2fa7075d9970@kernel.org
- patchew/20241230-genl._5Freq._5Fattr._5Fcheck-v6-0-3ec9103559e7@kernel.org
- patchew/20241216-mptcp-pm-nl-spec-doc-attr-v2-0-68807f55d42c@kernel.org
- patchew/20241213-mptcp-pm-nl-spec-doc-attr-v1-0-e43165c94e81@kernel.org
- patchew/20241209-net-mptcp-check-space-syn-v1-1-2da992bb6f74@kernel.org
- patchew/20241115-net-next-mptcp-pm-lockless-dump-v1-0-f4a1bcb4ca2c@kernel.org
- patchew/20241113-tcp-md5-diag-prep-v2-0-00a2a7feb1fa@gmail.com
- patchew/20241112-net-mptcp-misc-6-12-pm-v1-0-b835580cefa8@kernel.org
- patchew/20241107-mptcp-pm-lookup._5Faddr._5Frcu-v3-0-3c458d025de4@kernel.org
- patchew/20241106-tcp-md5-diag-prep-v1-0-d62debf3dded@gmail.com
- patchew/20241104-net-next-selftests-lib-sh-deps-v1-1-7c9f7d939fc2@kernel.org
- patchew/20241104-net-next-mptcp-sched-unneeded-lock-v2-1-2ccc1e0c750c@kernel.org
- patchew/20241104-net-mptcp-misc-6-12-v1-0-c13f2ff1656f@kernel.org
- patchew/20241025-mptcp-pm-lookup._5Faddr._5Frcu-v2-0-1478f6c4b205@kernel.org
- patchew/20241022-mptcp-pm-lookup._5Faddr._5Frcu-v1-1-19d45f26c872@kernel.org
- patchew/20241022-mptcp-pm-dump-addr-admin-v1-1-9ad328d01817@kernel.org
- patchew/20241021-net-next-mptcp-misc-6-13-v1-0-1ef02746504a@kernel.org
- patchew/20241021-net-mptcp-sched-lock-v1-0-637759cf061c@kernel.org
- patchew/20241017-mptcp-sched-avail-lock-v1-0-028ef592c6f4@kernel.org
- patchew/20241016-mptcp-sched-find-rcu-v1-0-5e9af4fbce11@kernel.org
- patchew/20241015-net-mptcp-uaf-pm-rm-v1-1-c4ee5d987a64@kernel.org
- patchew/20241008-net-mptcp-fallback-fixes-v1-0-c6fb8e93e551@kernel.org
- patchew/20241008-mpc-hs-port-v3-0-cec1363f0353@kernel.org
- patchew/20241007-mpc-hs-port-v2-0-0c9e7827bd0f@kernel.org
- patchew/20241003-mptcp-gh-518-v1-1-e79e1f6434ad@kernel.org
- patchew/20240926-doc-fix-lcov-link-v1-1-46f250cb7173@kernel.org
- patchew/20240924-mptcp-gcov-v1-1-b259d5dc5fa6@kernel.org
- patchew/20240912-net-next-fix-get._5Fnetdev._5Frx._5Fqueue._5Findex-v1-1-d73a1436be8c@kernel.org
- patchew/20240910-selftests-mptcp-fix-install-v1-0-ed1fdb92aa02@kernel.org
- patchew/20240906-selftests-mptcp-trailing-ws-v1-0-03421b02c48e@kernel.org
- patchew/20240906-net-next-mptcp-ksft-subtest-time-v2-0-31d5ee4f3bdf@kernel.org
- patchew/20240902-net-next-mptcp-ksft-subtest-time-v1-0-f1ed499a11b1@kernel.org
- patchew/20240902-mptcp-fallback-x-mpc-v1-0-86d9170ddff7@kernel.org
- patchew/20240830-mptcp-pm-minor-fixes-v1-1-89737b847a8d@kernel.org
- patchew/20240827-selftests-mptcp-longer-tests-v1-0-ec11c05fe980@kernel.org
- patchew/20240821-mptcp-ksft-time-v1-0-c4ea94f41244@kernel.org
- patchew/20240819-mptcp-pr._5Fdebug._5Fn-v2-1-97cbe3f7d975@kernel.org
- patchew/20240819-mptcp-pm-events-v1-1-c31d472471be@kernel.org
- patchew/20240816-ups-bpf-next-selftests-use-khdr-v1-0-1e19f3d5b17a@kernel.org
- patchew/20240816-mptcp-dup-close-evt-v2-0-8a33f6617f5c@kernel.org
- patchew/20240815-mptcp-dup-close-evt-v1-0-5a551d3a66cc@kernel.org
- patchew/20240813-upstream-net-20240813-selftests-net-lib-kill-v1-1-27b689b248b8@kernel.org
- patchew/20240813-mptcp-sched-retrans-bkp-v1-1-78914a88c2c6@kernel.org
- patchew/20240813-mptcp-pr._5Fdebug._5Fn-v1-1-ab706c0cbe60@kernel.org
- patchew/20240809-mptcp-pm-avail-v7-0-3d0916ba39b4@kernel.org
- patchew/20240809-mptcp-join-tx-mib-v4-0-98b0b0e098c5@kernel.org
- patchew/20240806-mptcp-join-tx-mib-v3-0-c3b54d2099e9@kernel.org
- patchew/20240802-selftests-net-lib-cleanup-kill-v1-1-66220a8b6911@kernel.org
- patchew/20240802-mptcp-pm-avail-v6-0-964ba9ce279f@kernel.org
- patchew/20240801-upstream-net-next-20240801-tcp-limit-wake-up-x-syn-v1-1-3a87f977ad5f@kernel.org
- patchew/20240731-upstream-net-20240731-mptcp-dup-data-v1-0-bde833fa628a@kernel.org
- patchew/20240729-mptcp-join-tx-mib-v2-0-8ace70fd407a@kernel.org
- patchew/20240726-mptcp-pm-avail-v5-0-fb1117ddeef6@kernel.org
- patchew/20240726-mptcp-join-tx-mib-v1-0-7f2149ba0dcf@kernel.org
- patchew/20240722-mptcp-pm-avail-v4-0-15bfd73de384@kernel.org
- patchew/20240719-mptcp-pm-refact-connect-v1-1-1027d648a65f@kernel.org
- patchew/20240719-mptcp-pm-avail-v3-0-e96b5591ced3@kernel.org
- patchew/20240718-mptcp-backup-mpj-v3-0-1f6cd9b89ee4@kernel.org
- patchew/20240716-mptcp-backup-mpj-v2-0-4d50247405fb@kernel.org
- patchew/20240715-mptcp-process-4th-ack-mpj-v1-1-d44fc90245e2@kernel.org
- patchew/20240715-mptcp-pm-avail-v2-0-fc5153bd1f6e@kernel.org
- patchew/20240712-upstream-net-next-20240712-selftests-mptcp-fix-shellcheck-v1-1-1cb7180db40a@kernel.org
- patchew/20240711-mptcp-backup-mpj-v1-0-d45506182a9e@kernel.org
- patchew/20240621-mptcp-pm-avail-v1-0-b692d5eb89b5@kernel.org
- patchew/20240614-upstream-net-20240614-selftests-mptcp-uspace-pm-fixed-test-names-v1-1-460ad3edb429@kernel.org
- patchew/20240614-selftests-mptcp-uspace-pm-fixed-test-names-v1-1-b5cb8274627d@kernel.org
- patchew/20240606-mptcp-pm-inc-cnt-sf-create-v2-1-67c4759a4885@kernel.org
- patchew/20240605-upstream-net-next-20240604-misc-cleanup-v1-0-ae2e35c3ecc5@kernel.org
- patchew/20240527-selftests-net-lib-fixes-v6-0-72411ff2460e@kernel.org
- patchew/20240527-sched._5Fper._5Fpacket-v1-0-09a41d405f7c@gmail.com
- patchew/20240527-mptcp-rmaddr-counter-once-v2-1-3e61360a90ac@kernel.org
- patchew/20240524-upstream-net-20240524-selftests-mptcp-flaky-v1-0-a352362f3f8e@kernel.org
- patchew/20240524-selftests-net-lib-fixes-v5-0-b9e0968571a3@kernel.org
- patchew/20240522-selftests-mptcp-disable-flaky-v3-0-a10c68bf2680@kernel.org
- patchew/20240521-selftests-mptcp-disable-flaky-v2-0-eba143bcbad0@kernel.org
- patchew/20240520-selftests-mptcp-disable-flaky-v1-0-02e23ba0bc3b@kernel.org
- patchew/20240518-mptcp-doc-v2-0-68304a17cd7d@kernel.org
- patchew/20240517-mptcp-doc-v1-0-fc1ef063584e@kernel.org
- patchew/829272fc031f542c7a3d8e446eba19ee0f78dffb.1715794371.git.dcaratti@redhat.com
- patchew/35436a387650236cce065f198b89bb5afb23f708.1735205514.git.tanggeliang@kylinos.cn
- patchew/833cae5982ac5d5b3236845c6db4315e634f5705.1727974826.git.pabeni@redhat.com
- patchew/99e57c7470ac338da18f02ef3af5936c8b21f5a7.1729757268.git.tanggeliang@kylinos.cn
- patchew/70c1f95bae8ec4884be50e08053364c1d152170c.1730262704.git.tanggeliang@kylinos.cn
- patchew/61cded134e753976259b48a4269f203dcae6c8fa.1739969092.git.pabeni@redhat.com
- patchew/61aae3730b8c35c2e0b8b70f5f2fe5170067f5c8.1717512099.git.pabeni@redhat.com
- patchew/51cd83cb7690d756e9a71797b133bdd9f286de76.1721921695.git.pabeni@redhat.com
- patchew/38e34a835050f35b7f14f7938b20f86a97ac0836.1736926065.git.tanggeliang@kylinos.cn
- patchew/025d9df8cde3c9a557befc47e9bc08fbbe3476e5.1734771049.git.pabeni@redhat.com
- patchew/11a224e1bade27689271af77cd47c6a49852a2cf.1725543947.git.tanggeliang@kylinos.cn
- patchew/9dafce3091d30a8446897813d2a9d302625c09d0.1722327628.git.tanggeliang@kylinos.cn
- patchew/9cde7341aac14f85ba9741e70e2d542edae5a1ad.1728911803.git.tanggeliang@kylinos.cn
- patchew/8e5cdb8e4eb6d964ec3ffe961ab8e65b8788584f.1715815795.git.tanggeliang@kylinos.cn
- patchew/7c8a258328ed6d235a100e3fa13c2da355119951.1736974476.git.pabeni@redhat.com
- patchew/7abc701da9df39c2d6cd15bc3cf9e6cee445cb96.1737621162.git.jstancek@redhat.com
- patchew/6a3e3dd94642cf24f3d6f97fb869d77d7315d5af.1730360928.git.tanggeliang@kylinos.cn
- patchew/5ff48cd1eed9a8b4c51a9ba5d7f9e0d0e8b0389b.1736477880.git.tanggeliang@kylinos.cn
- patchew/4b2cee91613e597a172b46bb0d9d3143053c52da.1728408247.git.dcaratti@redhat.com
- patchew/3f7656f9232ac4a36017babc0eabf5059c283a63.1734313517.git.tanggeliang@kylinos.cn
- patchew/1a05890e3e65de00b45b2453232eed12fe55ad14.1722138313.git.tanggeliang@kylinos.cn
- patchew/tencent._5FF85DEC5DED99554FB28DEF258F8DB8120D07@qq.com
- patchew/tencent._5FEE06C3EF8440C6905D8EC0B94E3E4A589905@qq.com
- patchew/tencent._5FCD94B9310E4F3464B4D83B0942EA0EA28409@qq.com
- patchew/tencent._5F7142963A37944B4A74EF76CD66EA3C253609@qq.com
- patchew/tencent._5F472581BA11BB2533E79EA21B964B2A1BC408@qq.com
- patchew/tencent._5F604F30643CD92D084CEB0AA3BE951B30C009@qq.com
- patchew/tencent._5F274B82754376EF66A23C0D37029644374609@qq.com
- patchew/tencent._5F48C13AF02833651C8CEA9329191D76628207@qq.com
- patchew/tencent._5F24C00657C9AC2EC62EF90C8E27F446C69206@qq.com
- patchew/tencent._5F0FE3ED0442E69C9D86C0AEEE338A49F90305@qq.com
- patchew/ff9a10bb4359ec77fc0b7499f44b388d737abe0f.1736477907.git.tanggeliang@kylinos.cn
- patchew/fccaccd2e7a1ce8518782c85965a6e26d37a87f9.1721872694.git.tanggeliang@kylinos.cn
- patchew/f27360078ccfc5c9324d2f2fbd3207e3bc553b3c.1725959373.git.tanggeliang@kylinos.cn
- patchew/ef87c8dd40c8dac4b946bf77e272d01ca64cc9dd.1734941967.git.tanggeliang@kylinos.cn
- patchew/e8371ec8065e09317dcf7d7aabc6c54e63634bbb.1737222305.git.pabeni@redhat.com
- patchew/e96b1f70660ffd750c09c051991e2b65a7d1b492.1737398231.git.pabeni@redhat.com
- patchew/e2c96390fa3980d3aca9c41671b90f645eab6523.1727254866.git.pabeni@redhat.com
- patchew/dfce01586ff42d63cffce0a2ca10149e30ec71fe.1727881810.git.pabeni@redhat.com
- patchew/dc502b1b45cb27fda48d72d73e3267a32db023d8.1717722648.git.tanggeliang@kylinos.cn
- patchew/d5598209aecfc8fe58f9a93dc802817b041785a9.1725680751.git.tanggeliang@kylinos.cn
- patchew/d9c76c6c008c770046f665a4a4e93735fd121399.1734337790.git.tanggeliang@kylinos.cn
- patchew/d3b644bf82543591f2f59b37d1c1b26a2b9f88e0.1724145512.git.tanggeliang@kylinos.cn
- patchew/cover.1740735165.git.tanggeliang@kylinos.cn
- patchew/cover.1740643844.git.tanggeliang@kylinos.cn
- patchew/cover.1740638334.git.tanggeliang@kylinos.cn
- patchew/cover.1740385876.git.yangang@kylinos.cn
- patchew/cover.1740384564.git.tanggeliang@kylinos.cn
- patchew/cover.1740368110.git.tanggeliang@kylinos.cn
- patchew/cover.1740320007.git.tanggeliang@kylinos.cn
- patchew/cover.1740115494.git.yangang@kylinos.cn
- patchew/cover.1740047738.git.tanggeliang@kylinos.cn
- patchew/cover.1740035000.git.yangang@kylinos.cn
- patchew/cover.1740019794.git.tanggeliang@kylinos.cn
- patchew/cover.1739787744.git.tanggeliang@kylinos.cn
- patchew/cover.1739083793.git.tanggeliang@kylinos.cn
- patchew/cover.1738924875.git.tanggeliang@kylinos.cn
- patchew/cover.1738924354.git.tanggeliang@kylinos.cn
- patchew/cover.1738919954.git.tanggeliang@kylinos.cn
- patchew/cover.1738832147.git.tanggeliang@kylinos.cn
- patchew/cover.1738470660.git.tanggeliang@kylinos.cn
- patchew/cover.1737714424.git.tanggeliang@kylinos.cn
- patchew/cover.1737702298.git.tanggeliang@kylinos.cn
- patchew/cover.1737012662.git.tanggeliang@kylinos.cn
- patchew/cover.1737012165.git.tanggeliang@kylinos.cn
- patchew/cover.1736935433.git.tanggeliang@kylinos.cn
- patchew/cover.1736935086.git.tanggeliang@kylinos.cn
- patchew/cover.1736924314.git.tanggeliang@kylinos.cn
- patchew/cover.1736845893.git.tanggeliang@kylinos.cn
- patchew/cover.1736527092.git.pabeni@redhat.com
- patchew/cover.1736494320.git.tanggeliang@kylinos.cn
- patchew/cover.1736493803.git.tanggeliang@kylinos.cn
- patchew/cover.1736325184.git.tanggeliang@kylinos.cn
- patchew/cover.1736308884.git.tanggeliang@kylinos.cn
- patchew/cover.1736299989.git.tanggeliang@kylinos.cn
- patchew/cover.1736150983.git.tanggeliang@kylinos.cn
- patchew/cover.1734947922.git.tanggeliang@kylinos.cn
- patchew/cover.1734942318.git.tanggeliang@kylinos.cn
- patchew/cover.1734022547.git.pabeni@redhat.com
- patchew/cover.1733886326.git.tanggeliang@kylinos.cn
- patchew/cover.1733800334.git.tanggeliang@kylinos.cn
- patchew/cover.1733737459.git.tanggeliang@kylinos.cn
- patchew/cover.1733733573.git.tanggeliang@kylinos.cn
- patchew/cover.1733724383.git.tanggeliang@kylinos.cn
- patchew/cover.1733533215.git.geliang@kernel.org
- patchew/cover.1733486870.git.pabeni@redhat.com
- patchew/cover.1733382222.git.tanggeliang@kylinos.cn
- patchew/cover.1732902181.git.pabeni@redhat.com
- patchew/cover.1732181419.git.tanggeliang@kylinos.cn
- patchew/cover.1732172851.git.tanggeliang@kylinos.cn
- patchew/cover.1732153672.git.tanggeliang@kylinos.cn
- patchew/cover.1731060874.git.pabeni@redhat.com
- patchew/cover.1730961809.git.tanggeliang@kylinos.cn
- patchew/cover.1730953242.git.tanggeliang@kylinos.cn
- patchew/cover.1730864444.git.tanggeliang@kylinos.cn
- patchew/cover.1730799589.git.tanggeliang@kylinos.cn
- patchew/cover.1730268415.git.tanggeliang@kylinos.cn
- patchew/cover.1730260715.git.tanggeliang@kylinos.cn
- patchew/cover.1729765157.git.tanggeliang@kylinos.cn
- patchew/cover.1729738008.git.tanggeliang@kylinos.cn
- patchew/cover.1729676320.git.tanggeliang@kylinos.cn
- patchew/cover.1729588019.git.tanggeliang@kylinos.cn
- patchew/cover.1729583414.git.tanggeliang@kylinos.cn
- patchew/cover.1729582332.git.tanggeliang@kylinos.cn
- patchew/cover.1729267039.git.tanggeliang@kylinos.cn
- patchew/cover.1729248083.git.tanggeliang@kylinos.cn
- patchew/cover.1729242644.git.tanggeliang@kylinos.cn
- patchew/cover.1729162349.git.tanggeliang@kylinos.cn
- patchew/cover.1729159086.git.tanggeliang@kylinos.cn
- patchew/cover.1729070999.git.tanggeliang@kylinos.cn
- patchew/cover.1729069853.git.tanggeliang@kylinos.cn
- patchew/cover.1729063444.git.tanggeliang@kylinos.cn
- patchew/cover.1728742591.git.tanggeliang@kylinos.cn
- patchew/cover.1728738219.git.tanggeliang@kylinos.cn
- patchew/cover.1728638310.git.tanggeliang@kylinos.cn
- patchew/cover.1728538975.git.tanggeliang@kylinos.cn
- patchew/cover.1728530836.git.tanggeliang@kylinos.cn
- patchew/cover.1728469555.git.tanggeliang@kylinos.cn
- patchew/cover.1728466623.git.tanggeliang@kylinos.cn
- patchew/cover.1728298100.git.tanggeliang@kylinos.cn
- patchew/cover.1728046021.git.tanggeliang@kylinos.cn
- patchew/cover.1727881073.git.tanggeliang@kylinos.cn
- patchew/cover.1727764822.git.tanggeliang@kylinos.cn
- patchew/cover.1727662123.git.tanggeliang@kylinos.cn
- patchew/cover.1727180731.git.tanggeliang@kylinos.cn
- patchew/cover.1727168628.git.tanggeliang@kylinos.cn
- patchew/cover.1726966638.git.tanggeliang@kylinos.cn
- patchew/cover.1726647599.git.tanggeliang@kylinos.cn
- patchew/cover.1726217806.git.tanggeliang@kylinos.cn
- patchew/cover.1726132802.git.tanggeliang@kylinos.cn
- patchew/cover.1726023577.git.tanggeliang@kylinos.cn
- patchew/cover.1725946276.git.tanggeliang@kylinos.cn
- patchew/cover.1725853370.git.tanggeliang@kylinos.cn
- patchew/cover.1725846806.git.tanggeliang@kylinos.cn
- patchew/cover.1725845619.git.tanggeliang@kylinos.cn
- patchew/cover.1725546472.git.tanggeliang@kylinos.cn
- patchew/cover.1725544210.git.tanggeliang@kylinos.cn
- patchew/cover.1725502822.git.tanggeliang@kylinos.cn
- patchew/cover.1725350462.git.tanggeliang@kylinos.cn
- patchew/cover.1725000687.git.tanggeliang@kylinos.cn
- patchew/cover.1724899785.git.tanggeliang@kylinos.cn
- patchew/cover.1724415435.git.tanggeliang@kylinos.cn
- patchew/cover.1724318341.git.tanggeliang@kylinos.cn
- patchew/cover.1724142917.git.tanggeliang@kylinos.cn
- patchew/cover.1722517019.git.tanggeliang@kylinos.cn
- patchew/cover.1722502941.git.tanggeliang@kylinos.cn
- patchew/cover.1720618186.git.tanggeliang@kylinos.cn
- patchew/cover.1720211515.git.pabeni@redhat.com
- patchew/cover.1719589916.git.pabeni@redhat.com
- patchew/cover.1716641976.git.tanggeliang@kylinos.cn
- patchew/cover.1716533107.git.tanggeliang@kylinos.cn
- patchew/cover.1716519897.git.tanggeliang@kylinos.cn
- patchew/cover.1716451525.git.tanggeliang@kylinos.cn
- patchew/cover.1716287732.git.tanggeliang@kylinos.cn
- patchew/cover.1715848543.git.tanggeliang@kylinos.cn
- patchew/cover.1715822527.git.tanggeliang@kylinos.cn
- patchew/cover.1715821541.git.tanggeliang@kylinos.cn
- patchew/cover.1715769419.git.tanggeliang@kylinos.cn
- patchew/c32cac999a1e87b93d48d42e6eb9dea8d51f61e6.1727685608.git.pabeni@redhat.com
- patchew/c02fda3177b34f9e74a044833fda9761627f4d07.1730338692.git.tanggeliang@kylinos.cn
- patchew/bb54c97dcc2b2d4ca80d03127b9b0e9a610929a8.1727255036.git.pabeni@redhat.com
- patchew/bae090f6945a2621f9ed4de2cb0e29d772a0e760.1725948163.git.tanggeliang@kylinos.cn
- patchew/b408bd6c62d50c91e02b995c1a09aae9d2fc619e.1724226530.git.tanggeliang@kylinos.cn
- patchew/b61be1bd6c70121fee3c6e183fb224b41d9dac90.1722138514.git.tanggeliang@kylinos.cn
- patchew/aeca45ea8522298327715230f45d718338906732.1731055793.git.tanggeliang@kylinos.cn
- patchew/ab62e7d2f50512594416acb973dcaf3d4ec85fe3.1730708911.git.geliang@kernel.org
- patchew/a92cdca650b2e3e6ea40e783331d1fe83ac9aae6.1726026758.git.tanggeliang@kylinos.cn
- patchew/a5dc0d188ebb30b3d541178a821b08f1124246ba.1734330271.git.tanggeliang@kylinos.cn
- patchew/a2efcb64bcd072611eac0dff346af2392b3bcb96.1734684556.git.tanggeliang@kylinos.cn
- patchew/20250228095148.4003065-1-yuehaibing@huawei.com
- patchew/20250226180727.2499531-2-matttbe@kernel.org
- patchew/20250224232012.GA7359@templeofstupid.com
- patchew/20250221222146.GA1896@templeofstupid.com
- patchew/20250113085228.121778-1-liucong2@kylinos.cn
- patchew/20250113003456.3904110-1-kuba@kernel.org
- patchew/20241206075504.24153-1-kuniyu@amazon.com
- patchew/20241107103657.1560536-1-d.kandybka@gmail.com
- patchew/20241106071035.2591-1-moyuanhao3676@163.com
- patchew/20241030100108.2443371-1-chen.dylane@gmail.com
- patchew/20241017143218.1428691-2-matttbe@kernel.org
- patchew/20241017094704.3222173-1-ast@fiberby.net
- patchew/20241015151737.4111686-2-matttbe@kernel.org
- patchew/20240930162345.3938790-2-matttbe@kernel.org
- patchew/20240913085555.134788-1-ast@fiberby.net
- patchew/20240911091003.1112179-1-ast@fiberby.net
- patchew/20240911042425.978665-1-xiyou.wangcong@gmail.com
- patchew/20240910152907.2538-2-matttbe@kernel.org
- patchew/20240908180620.822579-1-xiyou.wangcong@gmail.com
- patchew/20240816100404.879598-1-yuehaibing@huawei.com
- patchew/20240812153133.574382-2-matttbe@kernel.org
- patchew/20240812065024.GA19719@asgard.redhat.com
- patchew/20240809094321.GA8122@asgard.redhat.com
- patchew/20240807143438.1471057-2-matttbe@kernel.org
- patchew/20240712235150.99175-1-jhubbard@nvidia.com
- patchew/20240702040518.11058-1-liujing@cmss.chinamobile.com
- patchew/20240701181646.252683-2-matttbe@kernel.org
- patchew/20240603170217.6243-1-kerneljasonxing@gmail.com
- patchew/20240531091753.75930-1-kerneljasonxing@gmail.com
- patchew/20240530233616.85897-1-kuba@kernel.org
- patchew/20240530131308.59737-1-kerneljasonxing@gmail.com
- patchew/20240528125253.1966136-1-edumazet@google.com
- patchew/20240527213641.299458-1-jhubbard@nvidia.com
- export-net/20250228T055318
- export-net/20250227T055224
- export-net/20250226T093557
- export-net/20250226T055946
- export-net/20250225T212811
- export-net/20250225T055213
- export-net/20250224T110347
- export-net/20250221T055340
- export-net/20250220T055411
- export-net/20250219T184345
- export-net/20250219T183851
- export-net/20250219T055319
- export-net/20250218T055338
- export-net/20250217T055419
- export-net/20250214T055305
- export-net/20250213T055235
- export-net/20250212T055519
- export-net/20250211T055424
- export-net/20250210T055347
- export-net/20250207T055437
- export-net/20250206T055441
- export-net/20250205T055357
- export-net/20250204T055041
- export-net/20250203T115712
- export-net/20250203T055001
- export-net/20250131T055809
- export-net/20250130T054924
- export-net/20250129T174026
- export-net/20250129T054901
- export-net/20250128T152722
- export-net/20250128T054929
- export-net/20250124T094131
- export-net/20250124T054858
- export-net/20250123T130616
- export-net/20250123T055554
- export-net/20250122T121808
- export-net/20250121T055123
- export-net/20250120T055229
- export-net/20250117T142936
- export-net/20250117T142414
- export-net/20250117T055110
- export-net/20250116T055134
- export-net/20250115T055216
- export-net/20250114T140620
- export-net/20250111T124805
- export-net/20250111T064324
- export-net/20250110T055238
- export-net/20250109T055050
- export-net/20250108T115423
- export-net/20250108T055127
- export-net/20250107T055120
- export-net/20250106T055315
- export-net/20250103T055252
- export-net/20241231T054906
- export-net/20241230T182258
- export-net/20241228T115622
- export-net/20241224T055132
- export-net/20241223T055137
- export-net/20241221T111227
- export-net/20241221T103448
- export-net/20241221T100847
- export-net/20241221T093641
- export-net/20241220T055158
- export-net/20241219T055237
- export-net/20241218T181006
- export-net/20241218T055216
- export-net/20241217T055318
- export-net/20241216T055439
- export-net/20241213T055410
- export-net/20241212T055319
- export-net/20241211T055321
- export-net/20241210T055339
- export-net/20241209T055349
- export-net/20241206T055449
- export-net/20241205T055305
- export-net/20241204T111049
- export-net/20241204T055252
- export-net/20241203T055302
- export-net/20241202T055137
- export-net/20241129T194116
- export-net/20241129T055527
- export-net/20241127T055050
- export-net/20241125T112151
- export-net/20241125T111607
- export-net/20241125T055049
- export-net/20241122T055417
- export-net/20241119T084607
- export-net/20241118T085213
- export-net/20241115T055147
- export-net/20241114T094853
- export-net/20241113T055211
- export-net/20241112T173634
- export-net/20241112T084838
- export-net/20241111T055149
- export-net/20241108T123638
- export-net/20241108T103543
- export-net/20241107T111156
- export-net/20241107T110529
- export-net/20241107T055040
- export-net/20241106T145006
- export-net/20241106T094850
- export-net/20241104T163559
- export-net/20241104T095308
- export-net/20241104T055207
- export-net/20241101T055201
- export-net/20241031T163556
- export-net/20241031T055303
- export-net/20241030T085236
- export-net/20241029T091055
- export-net/20241029T055159
- export-net/20241028T181936
- export-net/20241028T055340
- export-net/20241025T055303
- export-net/20241024T093257
- export-net/20241024T055202
- export-net/20241023T105417
- export-net/20241023T055211
- export-net/20241022T133058
- export-net/20241022T132411
- export-net/20241022T055154
- export-net/20241021T055157
- export-net/20241019T103109
- export-net/20241018T101415
- export-net/20241017T145128
- export-net/20241017T090159
- export-net/20241016T055231
- export-net/20241015T055230
- export-net/20241014T164521
- export-net/20241014T162615
- export-net/20241014T055211
- export-net/20241011T055224
- export-net/20241010T055145
- export-net/20241009T152558
- export-net/20241009T090806
- export-net/20241009T055215
- export-net/20241008T083921
- export-net/20241008T055109
- export-net/20241007T183000
- export-net/20241007T091745
- export-net/20241007T091038
- export-net/20241007T055217
- export-net/20241004T055303
- export-net/20241003T055132
- export-net/20241002T055145
- export-net/20240930T174638
- export-net/20240930T163746
- export-net/20240930T055501
- export-net/20240927T054928
- export-net/20240926T142204
- export-net/20240926T123211
- export-net/20240926T105008
- export-net/20240925T175046
- export-net/20240925T163907
- export-net/20240925T152559
- export-net/20240925T141811
- export-net/20240925T121730
- export-net/20240925T111133
- export-net/20240925T105934
- export-net/20240925T103352
- export-net/20240925T090612
- export-net/20240925T054910
- export-net/20240924T175723
- export-net/20240924T054856
- export-net/20240923T055337
- export-net/20240920T055006
- export-net/20240917T054912
- export-net/20240916T055158
- export-net/20240913T055028
- export-net/20240912T091945
- export-net/20240911T150833
- export-net/20240911T055058
- export-net/20240910T190345
- export-net/20240910T145554
- export-net/20240910T055048
- export-net/20240909T131520
- export-net/20240906T055106
- export-net/20240905T055005
- export-net/20240904T112558
- export-net/20240903T055015
- export-net/20240902T054954
- export-net/20240830T055028
- export-net/20240829T100136
- export-net/20240828T063355
- export-net/20240828T062602
- export-net/20240827T055011
- export-net/20240826T055012
- export-net/20240824T122632
- export-net/20240824T120719
- export-net/20240824T115727
- export-net/20240823T054941
- export-net/20240822T150806
- export-net/20240822T054930
- export-net/20240821T103626
- export-net/20240821T102447
- export-net/20240821T100731
- export-net/20240821T054917
- export-net/20240820T054924
- export-net/20240819T164201
- export-net/20240819T054854
- export-net/20240816T101713
- export-net/20240815T054911
- export-net/20240814T085834
- export-net/20240813T112906
- export-net/20240813T095249
- export-net/20240812T104201
- export-net/20240812T060053
- export-net/20240809T121429
- export-net/20240809T055015
- export-net/20240808T054926
- export-net/20240807T054906
- export-net/20240806T054843
- export-net/20240805T055002
- export-net/20240802T181057
- export-net/20240802T055044
- export-net/20240801T054845
- export-net/20240731T090050
- export-net/20240731T054729
- export-net/20240730T054655
- export-net/20240729T054700
- export-net/20240726T103611
- export-net/20240726T102251
- export-net/20240726T083359
- export-net/20240726T055107
- export-net/20240725T054628
- export-net/20240724T103919
- export-net/20240724T054620
- export-net/20240723T152022
- export-net/20240723T142026
- export-net/20240722T055238
- export-net/20240719T054621
- export-net/20240718T104238
- export-net/20240718T054550
- export-net/20240717T054935
- export-net/20240716T054744
- export-net/20240715T083351
- export-net/20240712T054730
- export-net/20240711T054921
- export-net/20240710T054756
- export-net/20240709T091116
- export-net/20240709T054753
- export-net/20240708T054904
- export-net/20240705T070702
- export-net/20240704T054741
- export-net/20240703T173324
- export-net/20240703T162712
- export-net/20240702T054728
- export-net/20240701T062012
- export-net/20240628T054911
- export-net/20240627T054943
- export-net/20240626T054748
- export-net/20240625T054812
- export-net/20240624T054751
- export-net/20240621T054806
- export-net/20240620T054712
- export-net/20240619T055512
- export-net/20240618T054801
- export-net/20240617T080426
- export-net/20240617T055015
- export-net/20240614T165739
- export-net/20240614T054857
- export-net/20240613T054818
- export-net/20240612T054802
- export-net/20240611T054902
- export-net/20240610T055120
- export-net/20240607T134125
- export-net/20240607T054833
- export-net/20240606T054816
- export-net/20240605T071917
- export-net/20240605T054740
- export-net/20240604T054916
- export-net/20240603T160158
- export-net/20240603T155437
- export-net/20240603T155024
- export-net/20240603T080956
- export-net/20240531T093407
- export-net/20240530T054648
- export-net/20240529T054727
- export-net/20240528T054715
- export-net/20240527T143526
- export-net/20240527T054837
- export-net/20240524T152236
- export-net/20240524T054828
- export-net/20240523T100434
- export-net/20240523T054511
- export-net/20240522T054556
- export-net/20240521T054447
- export-net/20240520T055010
- export-net/20240519T085134
- export-net/20240517T054729
- export-net/20240516T054912
- export/20250228T055318
- export/20250227T085832
- export/20250227T055224
- export/20250226T163216
- export/20250226T162803
- export/20250226T093557
- export/20250226T055946
- export/20250225T212811
- export/20250225T055213
- export/20250224T122206
- export/20250224T110347
- export/20250221T155526
- export/20250221T055340
- export/20250220T055411
- export/20250219T184345
- export/20250219T183851
- export/20250219T055319
- export/20250218T055338
- export/20250217T055419
- export/20250214T055305
- export/20250213T055235
- export/20250212T055519
- export/20250211T055424
- export/20250210T055347
- export/20250207T055437
- export/20250206T055441
- export/20250205T055357
- export/20250204T055041
- export/20250203T115712
- export/20250203T055001
- export/20250131T055809
- export/20250130T105848
- export/20250130T054924
- export/20250129T174026
- export/20250129T054901
- export/20250128T152722
- export/20250128T054929
- export/20250124T100356
- export/20250124T094541
- export/20250124T093750
- export/20250124T054858
- export/20250123T130616
- export/20250123T055554
- export/20250122T121808
- export/20250122T115910
- export/20250122T054826
- export/20250121T055123
- export/20250120T055229
- export/20250118T074715
- export/20250117T143232
- export/20250117T142414
- export/20250117T124402
- export/20250117T095427
- export/20250117T055110
- export/20250116T055134
- export/20250115T055216
- export/20250114T140620
- export/20250113T054937
- export/20250112T130836
- export/20250112T125647
- export/20250112T123611
- export/20250111T124805
- export/20250111T064324
- export/20250110T055238
- export/20250109T055050
- export/20250108T115423
- export/20250108T055127
- export/20250107T055120
- export/20250106T055315
- export/20250103T055252
- export/20241231T054906
- export/20241230T182258
- export/20241228T121828
- export/20241228T115622
- export/20241224T055132
- export/20241223T055137
- export/20241221T112134
- export/20241221T111603
- export/20241221T103448
- export/20241221T100847
- export/20241221T093641
- export/20241220T055158
- export/20241219T055237
- export/20241218T181006
- export/20241218T055216
- export/20241217T153956
- export/20241217T055318
- export/20241216T122619
- export/20241216T055439
- export/20241213T055410
- export/20241212T055319
- export/20241211T055321
- export/20241210T055339
- export/20241209T055349
- export/20241206T055449
- export/20241205T095550
- export/20241205T055305
- export/20241204T111049
- export/20241204T055252
- export/20241203T055302
- export/20241202T055137
- export/20241129T194116
- export/20241129T055527
- export/20241127T055050
- export/20241125T112151
- export/20241125T111607
- export/20241125T055049
- export/20241122T055417
- export/20241120T054858
- export/20241119T084607
- export/20241118T085213
- export/20241115T055147
- export/20241114T094853
- export/20241113T055211
- export/20241112T174158
- export/20241112T173930
- export/20241112T084838
- export/20241111T055149
- export/20241108T123638
- export/20241108T103543
- export/20241107T111156
- export/20241107T110529
- export/20241107T055040
- export/20241106T145006
- export/20241106T135814
- export/20241106T094850
- export/20241104T163559
- export/20241104T095308
- export/20241104T055207
- export/20241101T055201
- export/20241031T163556
- export/20241031T055303
- export/20241030T085236
- export/20241029T091055
- export/20241029T055159
- export/20241028T181936
- export/20241028T055340
- export/20241025T055303
- export/20241024T093257
- export/20241024T055202
- export/20241023T105417
- export/20241023T055211
- export/20241022T133058
- export/20241022T132411
- export/20241022T055154
- export/20241021T172345
- export/20241021T055157
- export/20241019T103109
- export/20241018T101415
- export/20241017T145128
- export/20241017T090159
- export/20241017T084217
- export/20241016T055231
- export/20241015T055230
- export/20241014T164521
- export/20241014T162615
- export/20241014T150557
- export/20241014T055211
- export/20241011T055224
- export/20241010T055145
- export/20241009T152558
- export/20241009T090806
- export/20241009T055215
- export/20241008T083921
- export/20241008T055109
- export/20241007T183000
- export/20241007T091745
- export/20241007T091038
- export/20241007T055217
- export/20241004T055303
- export/20241003T055132
- export/20241002T055145
- export/20240930T174638
- export/20240930T163746
- export/20240930T055501
- export/20240927T054928
- export/20240926T142204
- export/20240926T123211
- export/20240926T105008
- export/20240925T175046
- export/20240925T163907
- export/20240925T152559
- export/20240925T141811
- export/20240925T121730
- export/20240925T111133
- export/20240925T105934
- export/20240925T103352
- export/20240925T090612
- export/20240925T054910
- export/20240924T175723
- export/20240924T054856
- export/20240923T160720
- export/20240923T055337
- export/20240920T055006
- export/20240917T054912
- export/20240916T055158
- export/20240913T155945
- export/20240913T055028
- export/20240912T102920
- export/20240912T091945
- export/20240911T150833
- export/20240911T055058
- export/20240910T190345
- export/20240910T152917
- export/20240910T145554
- export/20240910T075000
- export/20240910T055048
- export/20240909T165158
- export/20240909T164317
- export/20240909T162409
- export/20240909T160100
- export/20240909T151936
- export/20240909T131520
- export/20240909T054729
- export/20240906T172309
- export/20240906T055106
- export/20240905T134256
- export/20240905T102244
- export/20240905T055005
- export/20240904T112558
- export/20240903T055015
- export/20240902T054954
- export/20240830T055028
- export/20240829T100136
- export/20240828T063355
- export/20240828T062602
- export/20240827T055011
- export/20240826T055012
- export/20240824T122712
- export/20240824T121825
- export/20240824T120719
- export/20240823T054941
- export/20240822T150806
- export/20240822T054930
- export/20240821T103626
- export/20240821T102447
- export/20240821T100947
- export/20240821T100731
- export/20240821T095153
- export/20240821T054917
- export/20240820T103103
- export/20240820T054924
- export/20240819T164201
- export/20240819T054854
- export/20240816T101713
- export/20240815T054911
- export/20240814T085834
- export/20240813T112906
- export/20240813T095249
- export/20240812T114139
- export/20240812T060053
- export/20240809T121429
- export/20240809T055015
- export/20240808T054926
- export/20240807T054906
- export/20240806T054843
- export/20240805T055002
- export/20240803T073107
- export/20240803T071257
- export/20240802T181057
- export/20240802T055044
- export/20240801T054845
- export/20240731T090925
- export/20240731T054729
- export/20240730T054655
- export/20240729T104309
- export/20240729T054700
- export/20240726T103611
- export/20240726T102251
- export/20240726T083359
- export/20240726T055107
- export/20240725T054628
- export/20240724T103919
- export/20240724T054620
- export/20240723T152022
- export/20240723T142747
- export/20240722T055238
- export/20240719T054621
- export/20240718T104238
- export/20240718T054550
- export/20240717T054935
- export/20240716T054744
- export/20240715T211514
- export/20240715T083351
- export/20240712T101205
- export/20240712T054730
- export/20240711T054921
- export/20240710T054756
- export/20240709T091408
- export/20240709T054753
- export/20240708T054904
- export/20240705T070702
- export/20240704T054741
- export/20240703T173324
- export/20240703T162712
- export/20240702T054728
- export/20240701T062012
- export/20240628T054911
- export/20240627T054943
- export/20240626T054748
- export/20240625T054812
- export/20240624T054751
- export/20240621T054806
- export/20240620T054712
- export/20240619T055512
- export/20240618T054801
- export/20240617T080426
- export/20240617T055015
- export/20240614T165739
- export/20240614T054857
- export/20240613T054818
- export/20240612T054802
- export/20240611T073425
- export/20240611T054902
- export/20240610T055120
- export/20240607T134125
- export/20240607T054833
- export/20240606T054816
- export/20240605T071917
- export/20240605T054740
- export/20240604T054916
- export/20240603T160158
- export/20240603T155912
- export/20240603T155024
- export/20240603T080956
- export/20240531T093407
- export/20240530T054648
- export/20240529T054727
- export/20240528T054715
- export/20240527T143526
- export/20240527T054837
- export/20240524T152236
- export/20240524T054828
- export/20240523T100434
- export/20240523T054511
- export/20240522T054556
- export/20240521T054447
- export/20240520T055010
- export/20240519T085134
- export/20240517T054729
- export/20240516T082652
- export/20240516T054912
- export/20240515T165205
- export/20240515T162924
- export/20240515T110454
- export/20240515T093405
Showing
28 changed files
with
639 additions
and
175 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -86,3 +86,4 @@ CONFIG_VLAN_8021Q=m | |
CONFIG_XFRM_USER=m | ||
CONFIG_XFRM_STATISTICS=y | ||
CONFIG_NET_PKTGEN=m | ||
CONFIG_TUN=m |
71 changes: 71 additions & 0 deletions
71
tools/testing/selftests/net/netfilter/nf_conntrack_packetdrill.sh
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,71 @@ | ||
#!/bin/bash | ||
# SPDX-License-Identifier: GPL-2.0 | ||
|
||
source lib.sh | ||
|
||
checktool "conntrack --version" "run test without conntrack" | ||
checktool "iptables --version" "run test without iptables" | ||
checktool "ip6tables --version" "run test without ip6tables" | ||
|
||
modprobe -q tun | ||
modprobe -q nf_conntrack | ||
# echo 1 > /proc/sys/net/netfilter/nf_log_all_netns | ||
|
||
PDRILL_TIMEOUT=10 | ||
|
||
files=" | ||
conntrack_ack_loss_stall.pkt | ||
conntrack_inexact_rst.pkt | ||
conntrack_syn_challenge_ack.pkt | ||
conntrack_synack_old.pkt | ||
conntrack_synack_reuse.pkt | ||
conntrack_rst_invalid.pkt | ||
" | ||
|
||
if ! packetdrill --dry_run --verbose "packetdrill/conntrack_ack_loss_stall.pkt";then | ||
echo "SKIP: packetdrill not installed" | ||
exit ${ksft_skip} | ||
fi | ||
|
||
ret=0 | ||
|
||
run_packetdrill() | ||
{ | ||
filename="$1" | ||
ipver="$2" | ||
local mtu=1500 | ||
|
||
export NFCT_IP_VERSION="$ipver" | ||
|
||
if [ "$ipver" = "ipv4" ];then | ||
export xtables="iptables" | ||
elif [ "$ipver" = "ipv6" ];then | ||
export xtables="ip6tables" | ||
mtu=1520 | ||
fi | ||
|
||
timeout "$PDRILL_TIMEOUT" unshare -n packetdrill --ip_version="$ipver" --mtu=$mtu \ | ||
--tolerance_usecs=1000000 --non_fatal packet "$filename" | ||
} | ||
|
||
run_one_test_file() | ||
{ | ||
filename="$1" | ||
|
||
for v in ipv4 ipv6;do | ||
printf "%-50s(%s)%-20s" "$filename" "$v" "" | ||
if run_packetdrill packetdrill/"$f" "$v";then | ||
echo OK | ||
else | ||
echo FAIL | ||
ret=1 | ||
fi | ||
done | ||
} | ||
|
||
echo "Replaying packetdrill test cases:" | ||
for f in $files;do | ||
run_one_test_file packetdrill/"$f" | ||
done | ||
|
||
exit $ret |
33 changes: 33 additions & 0 deletions
33
tools/testing/selftests/net/netfilter/packetdrill/common.sh
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,33 @@ | ||
#!/bin/bash | ||
# SPDX-License-Identifier: GPL-2.0 | ||
|
||
# for debugging set net.netfilter.nf_log_all_netns=1 in init_net | ||
# or do not use net namespaces. | ||
modprobe -q nf_conntrack | ||
sysctl -q net.netfilter.nf_conntrack_log_invalid=6 | ||
|
||
# Flush old cached data (fastopen cookies). | ||
ip tcp_metrics flush all > /dev/null 2>&1 | ||
|
||
# TCP min, default, and max receive and send buffer sizes. | ||
sysctl -q net.ipv4.tcp_rmem="4096 540000 $((15*1024*1024))" | ||
sysctl -q net.ipv4.tcp_wmem="4096 $((256*1024)) 4194304" | ||
|
||
# TCP congestion control. | ||
sysctl -q net.ipv4.tcp_congestion_control=cubic | ||
|
||
# TCP slow start after idle. | ||
sysctl -q net.ipv4.tcp_slow_start_after_idle=0 | ||
|
||
# TCP Explicit Congestion Notification (ECN) | ||
sysctl -q net.ipv4.tcp_ecn=0 | ||
|
||
sysctl -q net.ipv4.tcp_notsent_lowat=4294967295 > /dev/null 2>&1 | ||
|
||
# Override the default qdisc on the tun device. | ||
# Many tests fail with timing errors if the default | ||
# is FQ and that paces their flows. | ||
tc qdisc add dev tun0 root pfifo | ||
|
||
# Enable conntrack | ||
$xtables -A INPUT -m conntrack --ctstate NEW -p tcp --syn |
118 changes: 118 additions & 0 deletions
118
tools/testing/selftests/net/netfilter/packetdrill/conntrack_ack_loss_stall.pkt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,118 @@ | ||
// check that already-acked (retransmitted) packet is let through rather | ||
// than tagged as INVALID. | ||
|
||
`packetdrill/common.sh` | ||
|
||
// should set -P DROP but it disconnects VM w.o. extra netns | ||
+0 `$xtables -A INPUT -m conntrack --ctstate INVALID -j DROP` | ||
|
||
+0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3 | ||
+0 setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 | ||
+0 bind(3, ..., ...) = 0 | ||
+0 listen(3, 10) = 0 | ||
|
||
+0 < S 0:0(0) win 32792 <mss 1000> | ||
+0 > S. 0:0(0) ack 1 <mss 1460> | ||
+.01 < . 1:1(0) ack 1 win 65535 | ||
+0 accept(3, ..., ...) = 4 | ||
|
||
+0.0001 < P. 1:1461(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 1461 win 65535 | ||
+0.0001 < P. 1461:2921(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 2921 win 65535 | ||
+0.0001 < P. 2921:4381(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 4381 win 65535 | ||
+0.0001 < P. 4381:5841(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 5841 win 65535 | ||
+0.0001 < P. 5841:7301(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 7301 win 65535 | ||
+0.0001 < P. 7301:8761(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 8761 win 65535 | ||
+0.0001 < P. 8761:10221(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 10221 win 65535 | ||
+0.0001 < P. 10221:11681(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 11681 win 65535 | ||
+0.0001 < P. 11681:13141(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 13141 win 65535 | ||
+0.0001 < P. 13141:14601(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 14601 win 65535 | ||
+0.0001 < P. 14601:16061(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 16061 win 65535 | ||
+0.0001 < P. 16061:17521(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 17521 win 65535 | ||
+0.0001 < P. 17521:18981(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 18981 win 65535 | ||
+0.0001 < P. 18981:20441(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 20441 win 65535 | ||
+0.0001 < P. 20441:21901(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 21901 win 65535 | ||
+0.0001 < P. 21901:23361(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 23361 win 65535 | ||
+0.0001 < P. 23361:24821(1460) ack 1 win 257 | ||
0.055 > . 1:1(0) ack 24821 win 65535 | ||
+0.0001 < P. 24821:26281(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 26281 win 65535 | ||
+0.0001 < P. 26281:27741(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 27741 win 65535 | ||
+0.0001 < P. 27741:29201(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 29201 win 65535 | ||
+0.0001 < P. 29201:30661(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 30661 win 65535 | ||
+0.0001 < P. 30661:32121(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 32121 win 65535 | ||
+0.0001 < P. 32121:33581(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 33581 win 65535 | ||
+0.0001 < P. 33581:35041(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 35041 win 65535 | ||
+0.0001 < P. 35041:36501(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 36501 win 65535 | ||
+0.0001 < P. 36501:37961(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 37961 win 65535 | ||
+0.0001 < P. 37961:39421(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 39421 win 65535 | ||
+0.0001 < P. 39421:40881(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 40881 win 65535 | ||
+0.0001 < P. 40881:42341(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 42341 win 65535 | ||
+0.0001 < P. 42341:43801(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 43801 win 65535 | ||
+0.0001 < P. 43801:45261(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 45261 win 65535 | ||
+0.0001 < P. 45261:46721(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 46721 win 65535 | ||
+0.0001 < P. 46721:48181(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 48181 win 65535 | ||
+0.0001 < P. 48181:49641(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 49641 win 65535 | ||
+0.0001 < P. 49641:51101(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 51101 win 65535 | ||
+0.0001 < P. 51101:52561(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 52561 win 65535 | ||
+0.0001 < P. 52561:54021(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 54021 win 65535 | ||
+0.0001 < P. 54021:55481(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 55481 win 65535 | ||
+0.0001 < P. 55481:56941(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 56941 win 65535 | ||
+0.0001 < P. 56941:58401(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 58401 win 65535 | ||
+0.0001 < P. 58401:59861(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 59861 win 65535 | ||
+0.0001 < P. 59861:61321(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 61321 win 65535 | ||
+0.0001 < P. 61321:62781(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 62781 win 65535 | ||
+0.0001 < P. 62781:64241(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 64241 win 65535 | ||
+0.0001 < P. 64241:65701(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 65701 win 65535 | ||
+0.0001 < P. 65701:67161(1460) ack 1 win 257 | ||
+.0 > . 1:1(0) ack 67161 win 65535 | ||
|
||
// nf_ct_proto_6: SEQ is under the lower bound (already ACKed data retransmitted) IN=tun0 OUT= MAC= SRC=192.0.2.1 DST=192.168.24.72 LEN=1500 TOS=0x00 PREC=0x00 TTL=255 ID=0 PROTO=TCP SPT=34375 DPT=8080 SEQ=1 ACK=4162510439 WINDOW=257 RES=0x00 ACK PSH URGP=0 | ||
+0.0001 < P. 1:1461(1460) ack 1 win 257 | ||
|
||
// only sent if above packet isn't flagged as invalid | ||
+.0 > . 1:1(0) ack 67161 win 65535 | ||
|
||
+0 `$xtables -D INPUT -m conntrack --ctstate INVALID -j DROP` |
62 changes: 62 additions & 0 deletions
62
tools/testing/selftests/net/netfilter/packetdrill/conntrack_inexact_rst.pkt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,62 @@ | ||
// check RST packet that doesn't exactly match expected next sequence | ||
// number still transitions conntrack state to CLOSE iff its already in | ||
// FIN/CLOSE_WAIT. | ||
|
||
`packetdrill/common.sh` | ||
|
||
// 5.771921 server_ip > client_ip TLSv1.2 337 [Packet size limited during capture] | ||
// 5.771994 server_ip > client_ip TLSv1.2 337 [Packet size limited during capture] | ||
// 5.772212 client_ip > server_ip TCP 66 45020 > 443 [ACK] Seq=1905874048 Ack=781810658 Win=36352 Len=0 TSval=3317842872 TSecr=675936334 | ||
// 5.787924 server_ip > client_ip TLSv1.2 1300 [Packet size limited during capture] | ||
// 5.788126 server_ip > client_ip TLSv1.2 90 Application Data | ||
// 5.788207 server_ip > client_ip TCP 66 443 > 45020 [FIN, ACK] Seq=781811916 Ack=1905874048 Win=31104 Len=0 TSval=675936350 TSecr=3317842872 | ||
// 5.788447 client_ip > server_ip TLSv1.2 90 Application Data | ||
// 5.788479 client_ip > server_ip TCP 66 45020 > 443 [RST, ACK] Seq=1905874072 Ack=781811917 Win=39040 Len=0 TSval=3317842889 TSecr=675936350 | ||
// 5.788581 server_ip > client_ip TCP 54 8443 > 45020 [RST] Seq=781811892 Win=0 Len=0 | ||
|
||
+0 `iptables -A INPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
+0 `iptables -A OUTPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
|
||
+0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3 | ||
+0 fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 | ||
|
||
0.1 connect(3, ..., ...) = -1 EINPROGRESS (Operation now in progress) | ||
|
||
0.1 > S 0:0(0) win 65535 <mss 1460,sackOK,TS val 1 ecr 0,nop,wscale 8> | ||
|
||
+0.1 < S. 1:1(0) ack 1 win 65535 <mss 1460> | ||
|
||
+0 > . 1:1(0) ack 1 win 65535 | ||
+0 < . 1:1001(1000) ack 1 win 65535 | ||
+0 < . 1001:2001(1000) ack 1 win 65535 | ||
+0 < . 2001:3001(1000) ack 1 win 65535 | ||
|
||
+0 > . 1:1(0) ack 1001 win 65535 | ||
+0 > . 1:1(0) ack 2001 win 65535 | ||
+0 > . 1:1(0) ack 3001 win 65535 | ||
|
||
+0 write(3, ..., 1000) = 1000 | ||
|
||
+0.0 > P. 1:1001(1000) ack 3001 win 65535 | ||
|
||
+0.1 read(3, ..., 1000) = 1000 | ||
|
||
// Conntrack should move to FIN_WAIT, then CLOSE_WAIT. | ||
+0 < F. 3001:3001(0) ack 1001 win 65535 | ||
+0 > . 1001:1001(0) ack 3002 win 65535 | ||
|
||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null |grep -q CLOSE_WAIT` | ||
|
||
+1 close(3) = 0 | ||
// RST: unread data. FIN was seen, hence ack + 1 | ||
+0 > R. 1001:1001(0) ack 3002 win 65535 | ||
// ... and then, CLOSE. | ||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null |grep -q CLOSE\ ` | ||
|
||
// Spurious RST from peer -- no sk state. Should NOT get | ||
// marked INVALID, because conntrack is already closing. | ||
+0.1 < R 2001:2001(0) win 0 | ||
|
||
// No packets should have been marked INVALID | ||
+0 `iptables -v -S INPUT | grep INVALID | grep -q -- "-c 0 0"` | ||
+0 `iptables -v -S OUTPUT | grep INVALID | grep -q -- "-c 0 0"` |
59 changes: 59 additions & 0 deletions
59
tools/testing/selftests/net/netfilter/packetdrill/conntrack_rst_invalid.pkt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,59 @@ | ||
// check that out of window resets are marked as INVALID and conntrack remains | ||
// in ESTABLISHED state. | ||
|
||
`packetdrill/common.sh` | ||
|
||
+0 `$xtables -A INPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
+0 `$xtables -A OUTPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
|
||
+0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3 | ||
+0 fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 | ||
|
||
0.1 connect(3, ..., ...) = -1 EINPROGRESS (Operation now in progress) | ||
|
||
0.1 > S 0:0(0) win 65535 <mss 1460,sackOK,TS val 1 ecr 0,nop,wscale 8> | ||
|
||
+0.1 < S. 1:1(0) ack 1 win 65535 <mss 1460> | ||
|
||
+0 > . 1:1(0) ack 1 win 65535 | ||
+0 < . 1:1001(1000) ack 1 win 65535 | ||
+0 < . 1001:2001(1000) ack 1 win 65535 | ||
+0 < . 2001:3001(1000) ack 1 win 65535 | ||
|
||
+0 > . 1:1(0) ack 1001 win 65535 | ||
+0 > . 1:1(0) ack 2001 win 65535 | ||
+0 > . 1:1(0) ack 3001 win 65535 | ||
|
||
+0 write(3, ..., 1000) = 1000 | ||
|
||
// out of window | ||
+0.0 < R 0:0(0) win 0 | ||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null |grep -q ESTABLISHED` | ||
|
||
// out of window | ||
+0.0 < R 1000000:1000000(0) win 0 | ||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null |grep -q ESTABLISHED` | ||
|
||
// in-window but not exact match | ||
+0.0 < R 42:42(0) win 0 | ||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null |grep -q ESTABLISHED` | ||
|
||
+0.0 > P. 1:1001(1000) ack 3001 win 65535 | ||
|
||
+0.1 read(3, ..., 1000) = 1000 | ||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null |grep -q ESTABLISHED` | ||
|
||
+0 < . 3001:3001(0) ack 1001 win 65535 | ||
|
||
+0.0 < R. 3000:3000(0) ack 1001 win 0 | ||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null |grep -q ESTABLISHED` | ||
|
||
// exact next sequence | ||
+0.0 < R. 3001:3001(0) ack 1001 win 0 | ||
// Conntrack should move to CLOSE | ||
|
||
// Expect four invalid RSTs | ||
+0 `$xtables -v -S INPUT | grep INVALID | grep -q -- "-c 4 "` | ||
+0 `$xtables -v -S OUTPUT | grep INVALID | grep -q -- "-c 0 0"` | ||
|
||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null |grep -q CLOSE\ ` |
44 changes: 44 additions & 0 deletions
44
tools/testing/selftests/net/netfilter/packetdrill/conntrack_syn_challenge_ack.pkt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,44 @@ | ||
// Check connection re-use, i.e. peer that receives the SYN answers with | ||
// a challenge-ACK. | ||
// Check that conntrack lets all packets pass, including the challenge ack, | ||
// and that a new connection is established. | ||
|
||
`packetdrill/common.sh` | ||
|
||
// S > | ||
// . < (challnge-ack) | ||
// R. > | ||
// S > | ||
// S. < | ||
// Expected outcome: established connection. | ||
|
||
+0 `$xtables -A INPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
+0 `$xtables -A OUTPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
|
||
+0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3 | ||
+0 fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 | ||
|
||
0.1 connect(3, ..., ...) = -1 EINPROGRESS (Operation now in progress) | ||
0.1 > S 0:0(0) win 65535 <mss 1460,sackOK,TS val 1 ecr 0,nop,wscale 8> | ||
|
||
// Challenge ACK, old incarnation. | ||
0.1 < . 145824453:145824453(0) ack 643160523 win 240 <mss 1460,nop,nop,TS val 1 ecr 1,nop,wscale 0> | ||
|
||
+0.01 > R 643160523:643160523(0) win 0 | ||
|
||
+0.01 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null | grep UNREPLIED | grep -q SYN_SENT` | ||
|
||
// Must go through. | ||
+0.01 > S 0:0(0) win 65535 <mss 1460,sackOK,TS val 1 ecr 0,nop,wscale 8> | ||
|
||
// correct synack | ||
+0.1 < S. 0:0(0) ack 1 win 250 <mss 1460,nop,nop,TS val 1 ecr 1,nop,wscale 0> | ||
|
||
// 3whs completes. | ||
+0.01 > . 1:1(0) ack 1 win 256 <nop,nop,TS val 1 ecr 1> | ||
|
||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null | grep ESTABLISHED | grep -q ASSURED` | ||
|
||
// No packets should have been marked INVALID | ||
+0 `$xtables -v -S INPUT | grep INVALID | grep -q -- "-c 0 0"` | ||
+0 `$xtables -v -S OUTPUT | grep INVALID | grep -q -- "-c 0 0"` |
51 changes: 51 additions & 0 deletions
51
tools/testing/selftests/net/netfilter/packetdrill/conntrack_synack_old.pkt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,51 @@ | ||
// Check conntrack copes with syn/ack reply for a previous, old incarnation. | ||
|
||
// tcpdump with buggy sequence | ||
// 10.176.25.8.829 > 10.192.171.30.2049: Flags [S], seq 2375731741, win 29200, options [mss 1460,sackOK,TS val 2083107423 ecr 0,nop,wscale 7], length 0 | ||
// OLD synack, for old/previous S | ||
// 10.192.171.30.2049 > 10.176.25.8.829: Flags [S.], seq 145824453, ack 643160523, win 65535, options [mss 8952,nop,wscale 5,TS val 3215437785 ecr 2082921663,nop,nop], length 0 | ||
// This reset never makes it to the endpoint, elided in the packetdrill script | ||
// 10.192.171.30.2049 > 10.176.25.8.829: Flags [R.], seq 1, ack 1, win 65535, options [mss 8952,nop,wscale 5,TS val 3215443451 ecr 2082921663,nop,nop], length 0 | ||
// Syn retransmit, no change | ||
// 10.176.25.8.829 > 10.192.171.30.2049: Flags [S], seq 2375731741, win 29200, options [mss 1460,sackOK,TS val 2083115583 ecr 0,nop,wscale 7], length 0 | ||
// CORRECT synack, should be accepted, but conntrack classified this as INVALID: | ||
// SEQ is over the upper bound (over the window of the receiver) IN=tun0 OUT= MAC= SRC=192.0.2.1 DST=192.168.37.78 LEN=40 TOS=0x00 PREC=0x00 TTL=255 ID=0 PROTO=TCP SPT=8080 DPT=34500 SEQ=162602411 ACK=2124350315 .. | ||
// 10.192.171.30.2049 > 10.176.25.8.829: Flags [S.], seq 162602410, ack 2375731742, win 65535, options [mss 8952,nop,wscale 5,TS val 3215445754 ecr 2083115583,nop,nop], length 0 | ||
|
||
`packetdrill/common.sh` | ||
|
||
+0 `$xtables -A INPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
+0 `$xtables -A OUTPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
|
||
+0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3 | ||
+0 fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 | ||
|
||
0.1 connect(3, ..., ...) = -1 EINPROGRESS (Operation now in progress) | ||
0.1 > S 0:0(0) win 65535 <mss 1460,sackOK,TS val 1 ecr 0,nop,wscale 8> | ||
|
||
// bogus/outdated synack, invalid ack value | ||
0.1 < S. 145824453:145824453(0) ack 643160523 win 240 <mss 1440,nop,nop,TS val 1 ecr 1,nop,wscale 0> | ||
|
||
// syn retransmitted | ||
1.01 > S 0:0(0) win 65535 <mss 1460,sackOK,TS val 1015 ecr 0,nop,wscale 8> | ||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null | grep UNREPLIED | grep -q SYN_SENT` | ||
|
||
// correct synack | ||
+0 < S. 145758918:145758918(0) ack 1 win 250 <mss 1460,nop,nop,TS val 1 ecr 1,nop,wscale 0> | ||
+0 write(3, ..., 1) = 1 | ||
|
||
// with buggy conntrack above packet is dropped, so SYN rtx is seen: | ||
// script packet: 1.054007 . 1:1(0) ack 16777958 win 256 <nop,nop,TS val 1033 ecr 1> | ||
// actual packet: 3.010000 S 0:0(0) win 65535 <mss 1460,sackOK,TS val 1015 ecr 0,nop,wscale 8> | ||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null | grep ESTABLISHED | grep -q ASSURED` | ||
|
||
+0 > P. 1:2(1) ack 4294901762 win 256 <nop,nop,TS val 1067 ecr 1> | ||
|
||
+0 `conntrack -f $NFCT_IP_VERSION -L -p tcp --dport 8080 2>/dev/null | grep ASSURED | grep -q ESTABLISHED` | ||
|
||
// No packets should have been marked INVALID in OUTPUT direction, 1 in INPUT | ||
+0 `$xtables -v -S OUTPUT | grep INVALID | grep -q -- "-c 0 0"` | ||
+0 `$xtables -v -S INPUT | grep INVALID | grep -q -- "-c 1 "` | ||
|
||
+0 `$xtables -D INPUT -p tcp -m conntrack --ctstate INVALID -j DROP` | ||
+0 `$xtables -D OUTPUT -p tcp -m conntrack --ctstate INVALID -j DROP` |
34 changes: 34 additions & 0 deletions
34
tools/testing/selftests/net/netfilter/packetdrill/conntrack_synack_reuse.pkt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,34 @@ | ||
// Check reception of another SYN while we have an established conntrack state. | ||
// Challenge ACK is supposed to pass through, RST reply should clear conntrack | ||
// state and SYN retransmit should give us new 'SYN_RECV' connection state. | ||
|
||
`packetdrill/common.sh` | ||
|
||
// should show a match if bug is present: | ||
+0 `iptables -A INPUT -m conntrack --ctstate INVALID -p tcp --tcp-flags SYN,ACK SYN,ACK` | ||
|
||
+0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3 | ||
+0 setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 | ||
+0 bind(3, ..., ...) = 0 | ||
+0 listen(3, 10) = 0 | ||
|
||
+0 < S 0:0(0) win 32792 <mss 1000,nop,wscale 7, TS val 1 ecr 0,nop,nop> | ||
+0 > S. 0:0(0) ack 1 <mss 1460,nop,nop,TS val 100 ecr 1,nop,wscale 8> | ||
+.01 < . 1:1(0) ack 1 win 257 <TS val 1 ecr 100,nop,nop> | ||
+0 accept(3, ..., ...) = 4 | ||
|
||
+0 < P. 1:101(100) ack 1 win 257 <TS val 2 ecr 100,nop,nop> | ||
+.001 > . 1:1(0) ack 101 win 256 <nop,nop,TS val 110 ecr 2> | ||
+0 read(4, ..., 101) = 100 | ||
|
||
1.0 < S 2000:2000(0) win 32792 <mss 1000,nop,wscale 7, TS val 233 ecr 0,nop,nop> | ||
// Won't expect this: challenge ack. | ||
|
||
+0 > . 1:1(0) ack 101 win 256 <nop,nop,TS val 112 ecr 2> | ||
+0 < R. 101:101(0) ack 1 win 257 | ||
+0 close(4) = 0 | ||
|
||
1.5 < S 2000:2000(0) win 32792 <mss 1000,nop,wscale 0, TS val 233 ecr 0,nop,nop> | ||
|
||
+0 `conntrack -L -p tcp --dport 8080 2>/dev/null | grep -q SYN_RECV` | ||
+0 `iptables -v -S INPUT | grep INVALID | grep -q -- "-c 0 0"` |