Skip to content
Permalink
Branch: vpls
Commits on Aug 18, 2017
  1. bridge: show FDB lwt info

    eqvinox committed Aug 15, 2017
    Signed-off-by: David Lamparter <equinox@diac24.net>
  2. ip: add VPLS control word setting

    eqvinox committed Aug 16, 2017
    Signed-off-by: David Lamparter <equinox@diac24.net>
Commits on Aug 15, 2017
  1. ip: support adding vpls routes

    eqvinox committed Aug 15, 2017
    Add the "vpls-dev" option for adding routes into the mpls label table
    that point to a VPLS tunnel head-end.
    
    Signed-off-by: David Lamparter <equinox@diac24.net>
Commits on Aug 10, 2017
  1. more BPF headers update

    shemminger committed Aug 10, 2017
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  2. bpf: unbreak libelf linkage for bpf obj loader

    borkmann authored and shemminger committed Aug 9, 2017
    Commit 69fed53 ("change how Config is used in Makefile's") moved
    HAVE_MNL specific CFLAGS/LDLIBS for building with libmnl out of the
    top level Makefile into sub-Makefiles. However, it also removed the
    HAVE_ELF specific CFLAGS/LDLIBS entirely, which breaks the BPF object
    loader for tc and ip with "No ELF library support compiled in." despite
    having libelf detected in configure script. Fix it similarly as in
    69fed53 for HAVE_ELF.
    
    Fixes: 69fed53 ("change how Config is used in Makefile's")
    Reported-by: Jeffrey Panneman <jeffrey.panneman@tno.nl>
    Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Commits on Aug 9, 2017
  1. lib: Dump ext-ack string by default

    dsahern authored and shemminger committed Aug 9, 2017
    In time, errfn can be implemented for link, route, etc commands to
    give a much more detailed response (e.g., point to the attribute
    that failed). Doing so is much more complicated to process the
    message and convert attribute ids to names.
    
    In any case the error string returned by the kernel should be dumped
    to the user, so make that happen now.
    
    Signed-off-by: David Ahern <dsahern@gmail.com>
  2. vti: print keys in hex not dotted notation

    shemminger committed Aug 9, 2017
    The ikey and okey value are normal u32 values. The input accepts
    them in dotted, hex or decimal form. For output, hex seems like
    the best form since they are not really addresses.
    
    Suggested-by: Christian Langrock <christian.langrock@secunet.com>
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  3. change how Config is used in Makefile's

    shemminger committed Aug 9, 2017
    The recent LIBMNL changes was made more difficult to debug because
    of how Config is handle in clean make. The Config file is generated
    by top level make, but since it is not recursive, the values generated
    would not be visible on a clean make.
    
    The change is to not include Config in top level make, and move
    all the conditionals down into sub makefiles. Not ideal, but beter
    than going full autoconf route. Or forcing separate configure
    step.
    
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  4. vti6: fix local/remote any addr handling

    shemminger committed Aug 9, 2017
    According to the IPv4 behavior of 'ip' it should be possible
    to omit the arguments for local and remote address.
    Without this patch omitting these parameters would lead to
    uninitialized memory being interpreted as IPv6 addresses.
    
    Reported-by: Christian Langrock <christian.langrock@secunet.com>
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  5. tc, ip: more Makefile updates for LIBMNL

    shemminger committed Aug 9, 2017
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  6. include: update headers from net-next

    shemminger committed Aug 9, 2017
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  7. examples/bpf: update list of examples

    scanf authored and shemminger committed Aug 9, 2017
    Remove deleted examples and add the new map in map example.
    
    Signed-off-by: Alexander Alemayhu <alexander@alemayhu.com>
    Acked-by: Daniel Borkmann <daniel@iogearbox.net>
  8. lib: need to pass LIBMNL flag

    shemminger committed Aug 9, 2017
    Missed on earlier conversion.
    
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
Commits on Aug 7, 2017
  1. lib: fix extended ack with and without libmnl

    shemminger committed Aug 7, 2017
    The code was always building without libmnl support, so it was
    doing nothing.
    
    Fixes: b6432e6 ("iproute: Add support for extended ack to rtnl_talk")
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
Commits on Aug 4, 2017
  1. actions: update the man page to describe the "since" time filter

    jhsmt authored and shemminger committed Aug 2, 2017
    Signed-off-by: Jamal Hadi Salim <jhs@mojatatu.com>
  2. tc actions: Improved batching and time filtered dumping

    jhsmt authored and shemminger committed Aug 2, 2017
    dump more than TCA_ACT_MAX_PRIO actions per batch when the kernel
    supports it.
    
    Introduced keyword "since" for time based filtering of actions.
    Some example (we have 400 actions bound to 400 filters); at
    installation time. Using updated when tc setting the time of
    interest to 120 seconds earlier (we see 400 actions):
    prompt$ hackedtc actions ls action gact since 120000| grep index | wc -l
    400
    
    go get some coffee and wait for > 120 seconds and try again:
    
    prompt$ hackedtc actions ls action gact since 120000 | grep index | wc -l
    0
    
    Lets see a filter bound to one of these actions:
    ....
    filter pref 10 u32
    filter pref 10 u32 fh 800: ht divisor 1
    filter pref 10 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:10  (rule hit 2 success 1)
      match 7f000002/ffffffff at 12 (success 1 )
        action order 1: gact action pass
         random type none pass val 0
         index 23 ref 2 bind 1 installed 1145 sec used 802 sec
        Action statistics:
        Sent 84 bytes 1 pkt (dropped 0, overlimits 0 requeues 0)
        backlog 0b 0p requeues 0
    ...
    
    that coffee took long, no? It was good.
    
    Now lets ping -c 1 127.0.0.2, then run the actions again:
    prompt$ hackedtc actions ls action gact since 120 | grep index | wc -l
    1
    
    More details please:
    prompt$ hackedtc -s actions ls action gact since 120000
    
        action order 0: gact action pass
         random type none pass val 0
         index 23 ref 2 bind 1 installed 1270 sec used 30 sec
        Action statistics:
        Sent 168 bytes 2 pkt (dropped 0, overlimits 0 requeues 0)
        backlog 0b 0p requeues 0
    
    And the filter?
    filter pref 10 u32
    filter pref 10 u32 fh 800: ht divisor 1
    filter pref 10 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:10  (rule hit 4 success 2)
      match 7f000002/ffffffff at 12 (success 2 )
        action order 1: gact action pass
         random type none pass val 0
         index 23 ref 2 bind 1 installed 1324 sec used 84 sec
        Action statistics:
        Sent 168 bytes 2 pkt (dropped 0, overlimits 0 requeues 0)
        backlog 0b 0p requeues 0
    
    Signed-off-by: Jamal Hadi Salim <jhs@mojatatu.com>
  3. netns: make /var/run/netns bind-mount recursive

    squeed authored and shemminger committed Aug 1, 2017
    When ip netns {add|delete} is first run, it bind-mounts /var/run/netns
    on top of itself, then marks it as shared. However, if there are already
    bind-mounts in the directory from other tools, these would not be
    propagated. Fix this by recursively bind-mounting.
    
    Signed-off-by: Casey Callendrello <casey.callendrello@coreos.com>
    Acked-by: "Eric W. Biederman" <ebiederm@xmission.com>
  4. ss: enclose IPv6 address in brackets

    shemminger committed Aug 4, 2017
    Based on patch by Lehner Florian <dev@der-flo.net>
    
    Adds support for RFC2732 IPv6 address format with brackets.
    
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  5. iproute: Add support for extended ack to rtnl_talk

    shemminger committed Aug 4, 2017
    Add support for extended ack error reporting via libmnl.
    Add a new function rtnl_talk_extack that takes a callback as an input
    arg. If a netlink response contains extack attributes, the callback is
    is invoked with the the err string, offset in the message and a pointer
    to the message returned by the kernel.
    
    If iproute2 is built without libmnl, it will still work but
    extended error reports from kernel will not be available.
    
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
Commits on Aug 3, 2017
  1. iproute: Display offload indication per-nexthop

    idosch authored and shemminger committed Aug 3, 2017
    Since kernel commit 475abbf1ef67 ("ipv4: fib: Set offload indication
    according to nexthop flags") offload indication is reported on a
    per-nexthop basis.
    
    Adjust iproute2 to display it.
    
    Signed-off-by: Ido Schimmel <idosch@mellanox.com>
    Reviewed-by: Jiri Pirko <jiri@mellanox.com>
    Acked-by: David Ahern <dsahern@gmail.com>
  2. update headers from 4.13 net-next

    shemminger committed Aug 3, 2017
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  3. tc: fix m_simple usage

    shemminger committed Aug 3, 2017
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
  4. tc-simple: Fix documentation

    Phil Sutter authored and shemminger committed Aug 3, 2017
    - CONTROL has to come last, otherwise 'index' applies to gact and not
      simple itself.
    - Man page wasn't updated to reflect syntax changes.
    
    Signed-off-by: Phil Sutter <phil@nwl.cc>
  5. Really fix get_addr() and get_prefix() error messages

    Phil Sutter authored and shemminger committed Aug 1, 2017
    Both functions take the desired address family as a parameter. So using
    that to notify the user what address family was expected is correct,
    unlike using dst->family which will tell the user only what address
    family was specified.
    
    The situation which commit 334af76 tried to fix was when 'ip'
    would accept addresses from multiple families. In that case, the family
    parameter is set to AF_UNSPEC so that get_addr_1() may accept any valid
    address.
    
    This patch introduces a wrapper around family_name() which returns the
    string "any valid" for AF_UNSPEC instead of the three question marks
    unsuitable for use in error messages.
    
    Tests for AF_UNSPEC:
    
    | # ip a a 256.10.166.1/24 dev d0
    | Error: any valid prefix is expected rather than "256.10.166.1/24".
    
    | # ip neighbor add proxy 2001:db8::g dev d0
    | Error: any valid address is expected rather than "2001:db8::g".
    
    Tests for explicit address family:
    
    | # ip -6 addrlabel add prefix 1.1.1.1/24 label 123
    | Error: inet6 prefix is expected rather than "1.1.1.1/24".
    
    | # ip -4 addrlabel add prefix dead:beef::1/24 label 123
    | Error: inet prefix is expected rather than "dead:beef::1/24".
    
    Reported-by: Jaroslav Aster <jaster@redhat.com>
    Fixes: 334af76 ("fix get_addr() and get_prefix() error messages")
    Signed-off-by: Phil Sutter <phil@nwl.cc>
  6. update headers from 4.13-rc4

    shemminger committed Aug 3, 2017
    Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
Older
You can’t perform that action at this time.