Makefile | 3 README | 25 ++- README.devel | 15 + doc/Makefile | 8 + doc/ip-cref.tex | 35 ++++ etc/iproute2/group | 2 genl/Makefile | 2 include/SNAPSHOT.h | 2 include/linux/can/netlink.h | 2 include/linux/if.h | 9 - include/linux/if_ether.h | 1 include/linux/if_link.h | 29 +++ include/linux/netdevice.h | 3 include/linux/netfilter.h | 17 +- include/linux/netfilter/x_tables.h | 5 include/linux/netfilter_ipv4/ip_tables.h | 82 ++++------ include/linux/netlink.h | 2 include/linux/pkt_cls.h | 1 include/linux/pkt_sched.h | 109 +++++++++++++ include/linux/tc_act/tc_csum.h | 32 ++++ include/linux/tc_ematch/tc_em_meta.h | 1 include/linux/types.h | 10 + include/linux/xfrm.h | 14 + include/rt_names.h | 1 include/utils.h | 6 ip/Makefile | 2 ip/ip.c | 11 + ip/ip6tunnel.c | 7 ip/ipaddress.c | 38 +++- ip/iplink.c | 60 ++++++- ip/iplink_macvlan.c | 7 ip/iplink_macvtap.c | 93 +++++++++++ ip/ipmaddr.c | 5 ip/ipmroute.c | 6 ip/ipneigh.c | 2 ip/iproute.c | 199 +++++++++++++++++-------- ip/iptunnel.c | 18 +- ip/ipxfrm.c | 97 ++++++++++++ ip/link_veth.c | 3 ip/xfrm.h | 3 ip/xfrm_policy.c | 69 ++++++++ ip/xfrm_state.c | 74 +++++++-- lib/ll_map.c | 73 +++++---- lib/ll_proto.c | 17 -- lib/rt_names.c | 50 ++++++ lib/utils.c | 36 +--- man/man8/ip.8 | 115 +++++++++++--- man/man8/ss.8 | 21 +- man/man8/tc-red.8 | 2 misc/rtacct.c | 7 tc/Makefile | 4 tc/f_flow.c | 3 tc/m_csum.c | 246 +++++++++++++++++++++++++++++++ tc/m_xt.c | 2 tc/q_choke.c | 215 +++++++++++++++++++++++++++ tc/q_mqprio.c | 124 +++++++++++++++ tc/q_netem.c | 2 tc/q_sfb.c | 200 +++++++++++++++++++++++++ tc/q_sfq.c | 9 + 59 files changed, 1927 insertions(+), 309 deletions(-)
New commits: commit 242b8da71be73204500cc85613a399d6968f23af Author: Stephen Hemminger <[email protected]> Date: Tue Apr 12 14:40:14 2011 -0700 Use INIT_NETDEV_GROUP Now that headers are sanitized, use the define. commit c0635644cd0a4471c09f665f7098713f3157c170 Author: Ulrich Weber <[email protected]> Date: Thu Apr 7 09:37:05 2011 +0200 iproute2: parse flag XFRM_POLICY_ICMP parse flag XFRM_POLICY_ICMP Signed-off-by: Ulrich Weber <[email protected]> commit 7b032a1f773ed5f17e16c1feff8b0a124d5db98d Author: Stephen Hemminger <[email protected]> Date: Wed Mar 23 12:29:17 2011 -0700 Update README information Change url's and describe current kernel header values. commit 914953046aac346b16143eee1c04b8a49bec8c8e Author: John Fastabend <[email protected]> Date: Tue Apr 12 08:57:27 2011 -0700 iproute2: tc add mqprio qdisc support Add mqprio qdisc support. Output matches the following, qdisc mq 0: dev eth1 root qdisc mq 0: dev eth2 root qdisc mqprio 8001: dev eth3 root tc 8 map 0 1 2 3 4 5 6 7 1 1 1 1 1 1 1 1 queues:(0:7) (8:15) (16:23) (24:31) (32:39) (40:47) (48:55) (56:63) And usage is, Usage: ... mclass [num_tc NUMBER] [map P0 P1...] [offset txq0 txq1 ...] [count cnt0 cnt1 ...] [hw 1|0] Signed-off-by: John Fastabend <[email protected]> commit 27b3f524443ec617b125fcecb36ad1bc25268b72 Author: Brandon Philips <[email protected]> Date: Fri Mar 25 14:43:44 2011 -0700 doc: add pdf targets Hello Stephen- Here is one more patch that SUSE has been carrying. Cheers, Brandon commit d7f3299d591e31f84ea3b8d4549d4019da1f9a7b Author: Juliusz Chroboczek <[email protected]> Date: Thu Mar 24 18:44:09 2011 +0100 tc : SFB flow scheduler Supports SFB qdisc (included in linux-2.6.39) 1) Setup phase : accept non default parameters 2) dump information qdisc sfb 11: parent 1:11 limit 1 max 25 target 20 increment 0.00050 decrement 0.00005 penalty rate 10 burst 20 (600000ms 60000ms) Sent 47991616 bytes 521648 pkt (dropped 549245, overlimits 549245 requeues 0) rate 7193Kbit 9774pps backlog 0b 0p requeues 0 earlydrop 0 penaltydrop 0 bucketdrop 0 queuedrop 549245 childdrop 0 marked 0 maxqlen 0 maxprob 0.00000 avgprob 0.00000 Signed-off-by: Juliusz Chroboczek <[email protected]> Signed-off-by: Eric Dumazet <[email protected]> commit 876cd7fa1001c538f6d2211745ac396d32659b2b Author: Stephen Hemminger <[email protected]> Date: Wed Mar 23 12:34:21 2011 -0700 Add README.devel commit 59a935d2045b233539a2d0be00310d355a9e0ebd Author: Stephen Hemminger <[email protected]> Date: Wed Mar 23 12:29:06 2011 -0700 Update email address of netem commit 1f7190db3920f76cca7fdcd1bb318c6cfa4a3266 Author: Brandon Philips <[email protected]> Date: Wed Mar 23 12:03:49 2011 -0700 ip: fix memory leak in ipmaddr.c If the continue is taken, then there is a memory leak. https://bugzilla.novell.com/show_bug.cgi?idS8996 Reported-by: David Binderman <[email protected]> Signed-off-by: Brandon Philips <[email protected]> commit d7ac9ad4f480d6e162165ec3f2c8e1bf50003ec3 Author: Stephen Hemminger <[email protected]> Date: Wed Mar 9 10:42:35 2011 -0800 Fix warning in u32 from assignment in conditional commit 8988b02ee1d04fdf07b913454b8d4e7b5e3092e5 Author: Stephen Hemminger <[email protected]> Date: Wed Mar 9 10:41:44 2011 -0800 Fix snprintf with non format snprintf was being called with environment variable. If variable had format string (like %s) then program would crash. commit 38c867d2a82d6f2b60450550fbaaadc5d9c77579 Author: Stephen Hemminger <[email protected]> Date: Wed Mar 9 10:41:09 2011 -0800 Add checks for fgets() when reading proc If expected proc headers are missing, catch and print error. commit 46dc73a57d569bc036c36d922f2699e725b5c1aa Author: Stephen Hemminger <[email protected]> Date: Wed Mar 9 10:39:17 2011 -0800 Add no-strict-aliasing to genl The genl code uses constructs which violate the strict aliasing constraints of gcc 4.4. Disable the optimization to avoid warnings and potential breakage. commit 21cfb5e1d9dfce7612ba622bcaf8e301268a35c8 Author: Stephen Hemminger <[email protected]> Date: Tue Apr 12 14:20:01 2011 -0700 update to 2.6.39-rc3 headers commit ac694c333fc543e3ff4b9bc672811a83c3223658 Author: Vlad Dogaru <[email protected]> Date: Wed Feb 2 20:23:40 2011 +0200 iproute2: support listing devices by group User can specify device group to list by using the group keyword: ip link show group test If no group is specified, 0 (default) is implied. Signed-off-by: Vlad Dogaru <[email protected]> commit 77d1e6ab8426c2067616e193800cc201a5dbef47 Author: Stephen Hemminger <[email protected]> Date: Thu Mar 17 10:05:47 2011 -0700 v2.6.38.1 commit aba383448c2e0c5442c14937b03b02fbbb5be3d1 Author: Nicolas Dichtel <[email protected]> Date: Tue Jan 11 06:32:46 2011 +0000 iproute2: allow to specify truncation bits on auth algo Hi, here is a patch against iproute2 to allow user to set a state with a specific auth length. Example: $ ip xfrm state add src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000 auth-trunc "sha256" "azertyuiopqsdfghjklmwxcvbn123456" 96 mode tunnel $ ip xfrm state src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000 reqid 0 mode tunnel replay-window 0 auth-trunc hmac(sha256) 0x617a6572747975696f707173646667686a6b6c6d77786376626e313233343536 96 sel src 0.0.0.0/0 dst 0.0.0.0/0 Regards, Nicolas >From 522ed7348cdf3b6f501af2a5a5d989de1696565a Mon Sep 17 00:00:00 2001 From: Nicolas Dichtel <[email protected]> Date: Thu, 23 Dec 2010 06:48:12 -0500 Subject: [PATCH] iproute2: allow to specify truncation bits on auth algo Attribute XFRMA_ALG_AUTH_TRUNC can be used to specify truncation bits, so we add a new algo type: auth-trunc. Signed-off-by: Nicolas Dichtel <[email protected]> commit 2c19bf6aafc4e4d58de2baab7e0a90cec1f8adc0 Author: Vlad Dogaru <[email protected]> Date: Wed Jan 26 07:35:27 2011 +0000 iproute2: fix man page whitespace Signed-off-by: Vlad Dogaru <[email protected]> commit db6b0cfa518de3b27c05bdf3efe05a7f77c4d97d Author: Gerrit Renker <[email protected]> Date: Fri Feb 25 12:54:37 2011 -0800 iproute: rename 'get_jiffies' since it uses msecs The get_jiffies() function retrieves rtt-type values in units of milliseconds. This patch updates the function name accordingly, following the pattern given by dst_metric() <=> dst_metric_rtt(). commit fca1dae821d627101914c36c9282fc244cd92744 Author: Gerrit Renker <[email protected]> Date: Fri Feb 25 12:51:48 2011 -0800 iproute: fix unit conversion of rtt/rttvar/rto_min Since July 2008 (2.6.27, c1e20f7c8b9), the kernel stores the values for RTAX_{RTT{,VAR},RTO_MIN} in milliseconds. When using a kernel > 2.6.27 with the current iproute2, conversion of these values is broken in either way. This patch * updates the code to pass and retrieve milliseconds; * since values < 1msec would be rounded up, also drops the usec/nsec variants; * since there is no way to query kernel HZ, also drops the jiffies variant. Arguments such as rtt 3.23sec rto_min 0xff rto_min 0.200s rttvar 25ms now all work as expected when reading back previously set values. commit 897fb84fd9b872a544076f88430bc35fc12b7cc8 Author: Gerrit Renker <[email protected]> Date: Tue Dec 21 12:54:09 2010 +0100 utils: get_jiffies always uses base=0 get_jiffies() is in all places called in the same manner, with base=0; simplify argument list by putting the constant value into the function. commit 4bb75da2d02ff16af775de0b2d12d07240c73eab Author: Joy Latten <[email protected]> Date: Wed Feb 2 17:32:59 2011 -0600 xfrm security context support Adds security context support to ip xfrm state. Signed-off-by: Joy Latten <[email protected]> commit e5055b591b60e8627fcb18035ef80cf88c48fb7c Author: Joy Latten <[email protected]> Date: Wed Feb 2 17:32:18 2011 -0600 xfrm security context support Adds security context support to ip xfrm policy. Signed-off-by: Joy Latten <[email protected]> commit 2c319e1ab7ebd371c0230f549890ae6c8ba49c8e Author: Joy Latten <[email protected]> Date: Wed Feb 2 17:31:39 2011 -0600 xfrm security context support In the Linux kernel, ipsec policy and SAs can include a security context to support MAC networking. This feature is often referred to as "labeled ipsec". This patchset adds security context support into ip xfrm such that a security context can be included when add/delete/display SAs and policies with the ip command. The user provides the security context when adding SAs and policies. If a policy or SA contains a security context, the changes allow the security context to be displayed. For example, ip xfrm state src 10.1.1.6 dst 10.1.1.2 proto esp spi 0x00000301 reqid 0 mode transport replay-window 0 auth hmac(digest_null) 0x3078 enc cbc(des3_ede) 0x6970763672656164796c6f676f33646573636263696e3031 security context root:system_r:unconfined_t:s0 Please let me know if all is ok with the patchset. Thanks!! regards, Joy Signed-off-by: Joy Latten <[email protected]> commit f0612d566b8bb76866fa772076412d290ed4cf5e Author: Sridhar Samudrala <[email protected]> Date: Wed Mar 16 17:01:58 2011 -0700 macvlan/macvtap: support 'passthru' mode Add support for 'passthru' mode when creating a macvlan/macvtap device which allows takeover of the underlying device and passing it to a KVM guest using virtio with macvtap backend. Only one macvlan device is allowed in passthru mode and it inherits the mac address from the underlying device and sets it in promiscuous mode to receive and forward all the packets. Signed-off-by: Sridhar Samudrala <[email protected]> commit fcae78992cab7bd267785b392b438306c621e583 Author: Stephen Hemminger <[email protected]> Date: Tue Mar 15 19:27:36 2011 -0700 v2.6.38 commit 2230ac1d1871b121284cb163fdf54062663d1ceb Author: Diego Elio Pettenò <[email protected]> Date: Wed Mar 9 10:18:03 2011 -0800 Remove -L flags from link While the previous code was supposed to work nonetheless, it could be messed up if further -L were used in LDFLAGS to list the path where glibc's libutil was to be found. References: https://bugs.gentoo.org/347489 Signed-off-by: Diego Elio Pettenò <[email protected]> commit 98f5519cd9db9d1ca58c49af27698101c8fff373 Author: Nicolas Dichtel <[email protected]> Date: Tue Feb 1 07:29:54 2011 -0500 iproute2: add support of flag XFRM_STATE_ALIGN4 Signed-off-by: Nicolas Dichtel <[email protected]> commit d5b7420a269e6e220e00cfbd69546d157fac1332 Author: Stephen Hemminger <[email protected]> Date: Fri Feb 25 20:00:54 2011 -0800 Remove #ifdef's The iproute package keeps its own headers so there is no need of polluting code with #ifdef's commit a1e191b90c35f5ef5d7dfba5ad8b5b7a7f57a421 Author: Jiri Pirko <[email protected]> Date: Fri Feb 25 19:55:19 2011 -0800 iplink: implement setting of master devic commit f323f2a32c3b9c29fb91c812472b7fd663f9ae73 Author: Nicolas Dichtel <[email protected]> Date: Tue Jan 11 06:32:46 2011 +0000 iproute2: allow to specify truncation bits on auth algo Hi, here is a patch against iproute2 to allow user to set a state with a specific auth length. Example: $ ip xfrm state add src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000 auth-trunc "sha256" "azertyuiopqsdfghjklmwxcvbn123456" 96 mode tunnel $ ip xfrm state src 10.16.0.72 dst 10.16.0.121 proto ah spi 0x10000000 reqid 0 mode tunnel replay-window 0 auth-trunc hmac(sha256) 0x617a6572747975696f707173646667686a6b6c6d77786376626e313233343536 96 sel src 0.0.0.0/0 dst 0.0.0.0/0 Regards, Nicolas >From 522ed7348cdf3b6f501af2a5a5d989de1696565a Mon Sep 17 00:00:00 2001 From: Nicolas Dichtel <[email protected]> Date: Thu, 23 Dec 2010 06:48:12 -0500 Subject: [PATCH] iproute2: allow to specify truncation bits on auth algo Attribute XFRMA_ALG_AUTH_TRUNC can be used to specify truncation bits, so we add a new algo type: auth-trunc. Signed-off-by: Nicolas Dichtel <[email protected]> commit 678b99ee6d80a1e80a3ee404dfb32c4bb3202827 Author: Vlad Dogaru <[email protected]> Date: Wed Jan 26 07:35:27 2011 +0000 iproute2: fix man page whitespace Signed-off-by: Vlad Dogaru <[email protected]> commit f3f28c2126343fea70a697fc61392c433e0dc9e1 Author: Eric Dumazet <[email protected]> Date: Sun Jan 23 00:09:06 2011 +0000 sfq: add divisor support In 2.6.39, we can build SFQ queues with a given hash table size, commit 81d03dc356df24d55443535eace247b93ff47b4e Author: Gerrit Renker <[email protected]> Date: Fri Feb 25 12:54:37 2011 -0800 iproute: rename 'get_jiffies' since it uses msecs The get_jiffies() function retrieves rtt-type values in units of milliseconds. This patch updates the function name accordingly, following the pattern given by dst_metric() <=> dst_metric_rtt(). commit 9b2cdc00dab7b601938901e20b5e1e66188d388b Author: Gerrit Renker <[email protected]> Date: Fri Feb 25 12:51:48 2011 -0800 iproute: fix unit conversion of rtt/rttvar/rto_min Since July 2008 (2.6.27, c1e20f7c8b9), the kernel stores the values for RTAX_{RTT{,VAR},RTO_MIN} in milliseconds. When using a kernel > 2.6.27 with the current iproute2, conversion of these values is broken in either way. This patch * updates the code to pass and retrieve milliseconds; * since values < 1msec would be rounded up, also drops the usec/nsec variants; * since there is no way to query kernel HZ, also drops the jiffies variant. Arguments such as rtt 3.23sec rto_min 0xff rto_min 0.200s rttvar 25ms now all work as expected when reading back previously set values. commit 94089ef7726cc25bffbd133fe5e1e16e0fd4654e Author: Gerrit Renker <[email protected]> Date: Tue Dec 21 12:54:09 2010 +0100 utils: get_jiffies always uses base=0 get_jiffies() is in all places called in the same manner, with base=0; simplify argument list by putting the constant value into the function. commit 0c7a594541df84d3497681a8ecc09b05c1449dd0 Author: Joy Latten <[email protected]> Date: Wed Feb 2 17:32:59 2011 -0600 xfrm security context support Adds security context support to ip xfrm state. Signed-off-by: Joy Latten <[email protected]> commit e4f054f017d0daa7ff9bba6027c5df264999ff1a Author: Joy Latten <[email protected]> Date: Wed Feb 2 17:32:18 2011 -0600 xfrm security context support Adds security context support to ip xfrm policy. Signed-off-by: Joy Latten <[email protected]> commit b2bb289a57fe7be63ebe0d1fe6ff94555bf6c936 Author: Joy Latten <[email protected]> Date: Wed Feb 2 17:31:39 2011 -0600 xfrm security context support In the Linux kernel, ipsec policy and SAs can include a security context to support MAC networking. This feature is often referred to as "labeled ipsec". This patchset adds security context support into ip xfrm such that a security context can be included when add/delete/display SAs and policies with the ip command. The user provides the security context when adding SAs and policies. If a policy or SA contains a security context, the changes allow the security context to be displayed. For example, ip xfrm state src 10.1.1.6 dst 10.1.1.2 proto esp spi 0x00000301 reqid 0 mode transport replay-window 0 auth hmac(digest_null) 0x3078 enc cbc(des3_ede) 0x6970763672656164796c6f676f33646573636263696e3031 security context root:system_r:unconfined_t:s0 Please let me know if all is ok with the patchset. Thanks!! regards, Joy Signed-off-by: Joy Latten <[email protected]> commit db02608b6f408998ea8c823fb791cead3e574f50 Author: Vlad Dogaru <[email protected]> Date: Wed Feb 2 20:23:41 2011 +0200 iproute2: support device group semantics Add the group keyword to ip link set, which has the following meaning: If both a group and a device name are pressent, we change the device's group to the specified one. If only a group is present, then the operation specified by the rest of the command should apply on an entire group, not a single device. So, to set eth0 to the default group, one would use ip link set dev eth0 group default Conversely, to set all the devices in the default group down, use ip link set group default down Signed-off-by: Vlad Dogaru <[email protected]> commit 26ad3aecfeeb93cd396a199a5e664e749bcabc8d Author: Vlad Dogaru <[email protected]> Date: Wed Feb 2 20:23:41 2011 +0200 iproute2: support device group semantics Add the group keyword to ip link set, which has the following meaning: If both a group and a device name are pressent, we change the device's group to the specified one. If only a group is present, then the operation specified by the rest of the command should apply on an entire group, not a single device. So, to set eth0 to the default group, one would use ip link set dev eth0 group default Conversely, to set all the devices in the default group down, use ip link set group default down Signed-off-by: Vlad Dogaru <[email protected]> commit f960c92aac1838e0f336c0ca0f657bb55a42d8e9 Author: Vlad Dogaru <[email protected]> Date: Wed Feb 2 20:23:40 2011 +0200 iproute2: support listing devices by group User can specify device group to list by using the group keyword: ip link show group test If no group is specified, 0 (default) is implied. Signed-off-by: Vlad Dogaru <[email protected]> commit 08dc32e13065a182551f3e034db8ad6ad3390c62 Author: Stephen Hemminger <[email protected]> Date: Fri Feb 25 12:31:36 2011 -0800 update to net-next (2.6.39) headers commit a4eca97cff0391d73b4ad4d5598cdc9a35771fa4 Author: Stephen Hemminger <[email protected]> Date: Thu Jan 13 09:23:17 2011 -0800 CHOKe scheduler TC commands for CHOKe qdisc commit 1598b9ef7b6704af5126d632e324323703ca8112 Author: Stephen Hemminger <[email protected]> Date: Thu Jan 13 14:53:02 2011 -0800 Revert "iproute2: add VF_PORT support" This reverts commit 632110aa0db4518b33fc09189ffcdd1b2e2e1762. There seem to be some recent changes in the 802.1Qbh/bg specs which may result in changes to this patch in the near future. It seems like its best to ignore this patch for now. I will re-spin at a later time when the changes in the specs converge. BTW, Please let me know if I should CC netdev list and others on the original email. I can resend this email. Thanks, Roopa commit 632110aa0db4518b33fc09189ffcdd1b2e2e1762 Author: Roopa Prabhu <[email protected]> Date: Tue Nov 9 14:47:52 2010 +0000 iproute2: add VF_PORT support Resubmitting Scott Feldmans original patch with below changes - Fix port profile strlen which was off by 1 - Added function to convert IFLA_PORT_RESPONSE codes to string Add support for IFLA_VF_PORTS. VF port netlink msg layout is [IFLA_NUM_VF] [IFLA_VF_PORTS] [IFLA_VF_PORT] [IFLA_PORT_*], ... [IFLA_VF_PORT] [IFLA_PORT_*], ... ... [IFLA_PORT_SELF] [IFLA_PORT_*], ... The iproute2 cmd line for link set is now: Usage: ip link add link DEV [ name ] NAME [ txqueuelen PACKETS ] [ address LLADDR ] [ broadcast LLADDR ] [ mtu MTU ] type TYPE [ ARGS ] ip link delete DEV type TYPE [ ARGS ] ip link set DEVICE [ { up | down } ] [ arp { on | off } ] [ dynamic { on | off } ] [ multicast { on | off } ] [ allmulticast { on | off } ] [ promisc { on | off } ] [ trailers { on | off } ] [ txqueuelen PACKETS ] [ name NEWNAME ] [ address LLADDR ] [ broadcast LLADDR ] [ mtu MTU ] [ netns PID ] [ alias NAME ] [ port MODE { PROFILE | VSI } ] [ vf NUM [ mac LLADDR ] [ vlan VLANID [ qos VLAN-QOS ] ] [ rate TXRATE ] [ port MODE { PROFILE | VSI } ] ] ip link show [ DEVICE ] TYPE := { vlan | veth | vcan | dummy | ifb | macvlan | can } MODE := { assoc | preassoc | preassocrr | disassoc } PROFILE := profile PROFILE [ instance UUID ] [ host UUID ] VSI := vsi mgr MGRID type VTID ver VER [ instance UUID ] Signed-off-by: Scott Feldman <[email protected]> Signed-off-by: Roopa Prabhu <[email protected]> commit 9351fec72d2bb4e7501c12949855ab252b037bce Author: Stephen Hemminger <[email protected]> Date: Wed Jan 12 18:46:54 2011 -0800 Update to lasest kernel headers commit f2c45d705036969027c63312a91e6e5713ff9376 Author: Stephen Hemminger <[email protected]> Date: Fri Jan 7 09:54:30 2011 -0800 v2.6.37 commit 8552b387df5ff1c1df2b0a8e6585b53928838471 Author: Stephen Hemminger <[email protected]> Date: Wed Dec 29 15:05:48 2010 -0800 Update to 2.6.37-rc8 headers Use sanitized headers from 2.6.37-rc8 commit 5c68fc88c5c4346d4d80dddb79b453796ab9b4d2 Author: Petr Sabata <[email protected]> Date: Thu Dec 16 17:24:54 2010 +0100 ip: Few typo and grammar errors fixes for ip(8) manpage commit 4b3385f6c593b2a37a3ee5dca3a8dbc1d1392d86 Author: Stephen Hemminger <[email protected]> Date: Fri Dec 10 11:49:29 2010 -0800 Cleanup ll_map In preparation for adding name hash: * add const * use same types in cache as ifinfomsg * rename idxmap to ll_cache commit 30564237282c497649f04b20e791de420004e3a5 Author: Octavian Purdila <[email protected]> Date: Fri Dec 10 16:59:50 2010 +0200 iproute2: initialize the ll_map only once Avoid initializing the LL map (which involves a costly RTNL dump) multiple times. This can happen when running in batch mode. Signed-off-by: Octavian Purdila <[email protected]> commit 1e21ea71a7e12e6bd06ece8cf415e7a5f372c806 Author: Stephen Hemminger <[email protected]> Date: Fri Dec 10 09:46:24 2010 -0800 Increase size of ifindex hash heads The default of 16 is too small for users with 10,000 interfaces. commit 1da5f6b2ca916400a2cb6ef59608c6c9d5b90c8c Author: Gerrit Renker <[email protected]> Date: Thu Dec 9 09:39:47 2010 -0800 tc-red: typo in man page commit d98e300c335a13927ed352c6bd02547b363ec0ec Author: Petr Sabata <[email protected]> Date: Wed Dec 8 14:49:09 2010 +0100 ss: Change "do now" to "do not" in ss(8), -n option A small typo fix. commit f4ff11e3e298d457c4f30813e305f7d27d89823a Author: Dan Smith <[email protected]> Date: Wed Dec 1 11:24:58 2010 -0800 Add ip route save/restore This patch adds save and restore commands to "ip route". Save dumps the RTNL stream to stdout which can then be passed to restore later. This may be helpful in some normal situations, and will allow C/R to migrate the routing information in userspace. Tweaking of the stream can be done by userspace helpers to convert between versions and adjust things like device indexes when restoring routes in a different environment. By factoring out some of the common bits of print_route() into filter_nlmsg(), the "save" command can use the same selection logic as "list," allowing the caller to save only specific routes as necessary. The only change since the RFC is the addition of manpage and doc material. Signed-off-by: Dan Smith <[email protected]> commit 3822cc986cc33751b82a22b91289ef088d94440c Author: Gregoire Baron <[email protected]> Date: Wed Dec 1 11:17:46 2010 -0800 tc: add ACT_CSUM action support (csum) Add the iproute2 support for the ACT_CSUM action. Can be used as following, certainly in conjunction with the ACT_PEDIT action (pedit): # In order to DNAT (stateless) IPv4 packet from 192.168.1.100 to # 0x12345678 (18.52.86.120), and update the IPv4 header checksum and # the UDP checksum (the last one, only if the packet is UDP). tc filter add eth0 prio 1 protocol ip parent ffff: \ u32 match ip src 192.168.1.100/32 flowid :1 \ action pedit munge offset 16 u32 set 0x12345678 \ pipe csum ip and udp # In order to alter destination address of IPv6 TCP packets from fc00::1 # and correct the TCP checksum (nothing happened? except maybe for # checksums in the TCP payload ...). tc filter add eth0 prio 1 protocol ipv6 parent ffff: \ u32 match ip6 src fc00::1/128 match ip6 protocol 0x06 0xff flowid :1 \ action pedit munge offset 24 u32 set 0x12345678 \ pipe csum tcp commit 64c7956061500611061910067d76512afcd2ddb4 Author: Ben Greear <[email protected]> Date: Wed Dec 1 11:13:51 2010 -0800 Allow 'ip addr flush' to loop more than 10 times The default remains at 10 for backwards compatibility. For instance: # ip addr flush dev eth2 *** Flush remains incomplete after 10 rounds. *** # ip -l 20 addr flush dev eth2 *** Flush remains incomplete after 20 rounds. *** # ip -loops 0 addr flush dev eth2 # This is useful for getting rid of large numbers of IP addresses in scripts. Signed-off-by: Ben Greear <[email protected]> commit 3f0a7b4c4f0a6c5462ad55b7fa4445c2d485f435 Author: Sridhar Samudrala <[email protected]> Date: Thu Oct 28 13:10:40 2010 +0000 Support 'mode' parameter when creating macvtap device Add support for 'mode' parameter when creating a macvtap device. This allows a macvtap device to be created in bridge, private or the default vepa modes. Signed-off-by: Sridhar Samudrala <[email protected]> ------------------------------------------------------------------- Acked-by: Arnd Bergmann <[email protected]> commit f66efadd79f75c61642d90e0b64081b4e0edf61c Author: Andreas Schwab <[email protected]> Date: Fri Nov 5 23:26:29 2010 +0000 iproute2: remove useless use of buffer Print directly to the file instead of going through a buffer. Signed-off-by: Andreas Schwab <[email protected]> commit 7162c921488de9093c522b858a1ab488b8f50c96 Author: Changli Gao <[email protected]> Date: Sat Aug 21 06:30:01 2010 +0000 iproute2: tc: f_flow: add key rxhash We can use rxhash to classify the traffic into flows. As rxhash maybe supplied by NIC or RPS, it is cheaper. Signed-off-by: Changli Gao <[email protected]> Acked-by: Jamal Hadi Salim <[email protected]> commit 4a9608e6aefe40cf8545097ed23931f9bacba06d Author: Timo Teräs <[email protected]> Date: Tue Nov 23 22:18:58 2010 +0000 iproute2: support xfrm upper protocol gre key Similar to tunnel side: accept dotted-quad and number formats. Use regular number for printing the key. Signed-off-by: Timo Teräs <[email protected]> commit 6f4f7c464ad4121582594f03163c2b5f324d4b4b Author: Timo Teräs <[email protected]> Date: Tue Nov 23 22:18:57 2010 +0000 iproute2: treat gre key as number Print GRE key as a regular number. It is not really an IPv4 address and this is also how Cisco and Juniper treats GRE keys. Do keep the parsing of dotted-quad format for backwards compatibility. Signed-off-by: Timo Teräs <[email protected]> commit be3c4d4f3c14875e459d27b8b095e29af8591489 Author: Mike Frysinger <[email protected]> Date: Sun Nov 21 16:16:54 2010 -0500 m_xt: stop using xtables_set_revision() iptables dropped the xtables_set_revision() function around version 1.4.9, so set the rev directly ourselves. This should be compatible back to the original version m_xt itself is designed for. Signed-off-by: Mike Frysinger <[email protected]> commit 5d8056357a032131057462fadb77c62cab6b2f0f Author: Petr Sabata <[email protected]> Date: Mon Nov 29 14:00:37 2010 +0100 ss(8) improvements by Jiri Popelka <[email protected]> http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h$2b8da71be73204500cc85613a399d6968f23af http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hÀ635644cd0a4471c09f665f7098713f3157c170 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h{032a1f773ed5f17e16c1feff8b0a124d5db98d http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h4953046aac346b16143eee1c04b8a49bec8c8e http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h'b3f524443ec617b125fcecb36ad1bc25268b72 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h×f3299d591e31f84ea3b8d4549d4019da1f9a7b http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h6cd7fa1001c538f6d2211745ac396d32659b2b http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hYa935d2045b233539a2d0be00310d355a9e0ebd http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h 7190db3920f76cca7fdcd1bb318c6cfa4a3266 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h×ac9ad4f480d6e162165ec3f2c8e1bf50003ec3 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h88b02ee1d04fdf07b913454b8d4e7b5e3092e5 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h8c867d2a82d6f2b60450550fbaaadc5d9c77579 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hFdc73a57d569bc036c36d922f2699e725b5c1aa http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h!cfb5e1d9dfce7612ba622bcaf8e301268a35c8 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h¬694c333fc543e3ff4b9bc672811a83c3223658 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hwd1e6ab8426c2067616e193800cc201a5dbef47 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h«a383448c2e0c5442c14937b03b02fbbb5be3d1 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h,19bf6aafc4e4d58de2baab7e0a90cec1f8adc0 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hÛ6b0cfa518de3b27c05bdf3efe05a7f77c4d97d http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hüa1dae821d627101914c36c9282fc244cd92744 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h7fb84fd9b872a544076f88430bc35fc12b7cc8 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hKb75da2d02ff16af775de0b2d12d07240c73eab http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hå055b591b60e8627fcb18035ef80cf88c48fb7c http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h,319e1ab7ebd371c0230f549890ae6c8ba49c8e http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hð612d566b8bb76866fa772076412d290ed4cf5e http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hüae78992cab7bd267785b392b438306c621e583 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h"30ac1d1871b121284cb163fdf54062663d1ceb http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hf5519cd9db9d1ca58c49af27698101c8fff373 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hÕb7420a269e6e220e00cfbd69546d157fac1332 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h¡e191b90c35f5ef5d7dfba5ad8b5b7a7f57a421 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hó23f2a32c3b9c29fb91c812472b7fd663f9ae73 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hg8b99ee6d80a1e80a3ee404dfb32c4bb3202827 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hóf28c2126343fea70a697fc61392c433e0dc9e1 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hd03dc356df24d55443535eace247b93ff47b4e http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h2cdc00dab7b601938901e20b5e1e66188d388b http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h089ef7726cc25bffbd133fe5e1e16e0fd4654e http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h 7a594541df84d3497681a8ecc09b05c1449dd0 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;häf054f017d0daa7ff9bba6027c5df264999ff1a http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h²bb289a57fe7be63ebe0d1fe6ff94555bf6c936 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hÛ02608b6f408998ea8c823fb791cead3e574f50 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h&ad3aecfeeb93cd396a199a5e664e749bcabc8d http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hù60c92aac1838e0f336c0ca0f657bb55a42d8e9 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hdc32e13065a182551f3e034db8ad6ad3390c62 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h¤eca97cff0391d73b4ad4d5598cdc9a35771fa4 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h98b9ef7b6704af5126d632e324323703ca8112 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hc2110aa0db4518b33fc09189ffcdd1b2e2e1762 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h51fec72d2bb4e7501c12949855ab252b037bce http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hòc45d705036969027c63312a91e6e5713ff9376 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h 52b387df5ff1c1df2b0a8e6585b53928838471 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h\68fc88c5c4346d4d80dddb79b453796ab9b4d2 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hK3385f6c593b2a37a3ee5dca3a8dbc1d1392d86 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h0564237282c497649f04b20e791de420004e3a5 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h 21ea71a7e12e6bd06ece8cf415e7a5f372c806 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h a5f6b2ca916400a2cb6ef59608c6c9d5b90c8c http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hÙ8e300c335a13927ed352c6bd02547b363ec0ec http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hôff11e3e298d457c4f30813e305f7d27d89823a http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h822cc986cc33751b82a22b91289ef088d94440c http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hdc7956061500611061910067d76512afcd2ddb4 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h?0a7b4c4f0a6c5462ad55b7fa4445c2d485f435 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hö6efadd79f75c61642d90e0b64081b4e0edf61c http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hq62c921488de9093c522b858a1ab488b8f50c96 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;hJ9608e6aefe40cf8545097ed23931f9bacba06d http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;ho4f7c464ad4121582594f03163c2b5f324d4b4b http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h¾3c4d4f3c14875e459d27b8b095e29af8591489 http://suva.vyatta.com/git/?p=vyatta-iproute.git;a=commitdiff;h]8056357a032131057462fadb77c62cab6b2f0f
_______________________________________________ svn mailing list [email protected] http://mailman.vyatta.com/mailman/listinfo/svn
