Re: [PATCH net-next 0/5] fib_rules: support sport, dport and ip proto match

2018-02-25 Thread Roopa Prabhu
On Sun, Feb 25, 2018 at 7:20 PM, David Ahern  wrote:
> On 2/24/18 10:44 PM, Roopa Prabhu wrote:
>> From: Roopa Prabhu 
>>
>> This series extends fib rule match support to include sport, dport
>> and ip proto match (to complete the 5-tuple match support).
>> Common use-cases of Policy based routing in the data center require
>> 5-tuple match. The last 2 patches in the series add a call to flow dissect
>> in the fwd path if required by the installed fib rules (controlled by a 
>> flag).
>>
>> v1:
>>   - Fix errors reported by kbuild and feedback on RFC series
>>   - extend port match uapi to accomodate port ranges
>
> Would be good to have a test script under tools/testing/selftests/net
> that covers expectations for good and bad cases. Can create one based on
> tools/testing/selftests/net/fib-onlink-tests.sh

yep, that would help. Let me see if I can change my current bash test
script to selftests


Re: [PATCH net-next 0/5] fib_rules: support sport, dport and ip proto match

2018-02-25 Thread David Ahern
On 2/24/18 10:44 PM, Roopa Prabhu wrote:
> From: Roopa Prabhu 
> 
> This series extends fib rule match support to include sport, dport
> and ip proto match (to complete the 5-tuple match support).
> Common use-cases of Policy based routing in the data center require
> 5-tuple match. The last 2 patches in the series add a call to flow dissect
> in the fwd path if required by the installed fib rules (controlled by a flag).
> 
> v1:
>   - Fix errors reported by kbuild and feedback on RFC series
>   - extend port match uapi to accomodate port ranges

Would be good to have a test script under tools/testing/selftests/net
that covers expectations for good and bad cases. Can create one based on
tools/testing/selftests/net/fib-onlink-tests.sh


[PATCH net-next 0/5] fib_rules: support sport, dport and ip proto match

2018-02-24 Thread Roopa Prabhu
From: Roopa Prabhu 

This series extends fib rule match support to include sport, dport
and ip proto match (to complete the 5-tuple match support).
Common use-cases of Policy based routing in the data center require
5-tuple match. The last 2 patches in the series add a call to flow dissect
in the fwd path if required by the installed fib rules (controlled by a flag).

v1:
  - Fix errors reported by kbuild and feedback on RFC series
  - extend port match uapi to accomodate port ranges

Roopa Prabhu (5):
  net: fib_rules: support for match on ip_proto, sport and dport
  ipv4: fib_rules: support match on sport, dport and ip proto
  ipv6: fib6_rules: support for match on sport, dport and ip proto
  ipv4: route: dissect flow in input path if fib rules need it
  ipv6: route: dissect flow in input path if fib rules need it

 include/net/fib_rules.h| 31 +-
 include/net/ip6_route.h|  3 +-
 include/net/ip_fib.h   |  2 +-
 include/net/netns/ipv4.h   |  1 +
 include/net/netns/ipv6.h   |  1 +
 include/uapi/linux/fib_rules.h |  8 
 net/core/fib_rules.c   | 95 +-
 net/ipv4/fib_rules.c   | 15 +++
 net/ipv4/fib_semantics.c   |  2 +-
 net/ipv4/route.c   | 52 ---
 net/ipv6/fib6_rules.c  | 14 +++
 net/ipv6/icmp.c|  2 +-
 net/ipv6/route.c   | 45 
 13 files changed, 241 insertions(+), 30 deletions(-)

-- 
2.1.4