From: John Fastabend <john.r.fastab...@gmail.com> Date: Wed, 18 Oct 2017 07:09:48 -0700
> The following implements a set of fixes for sockmap and changes the > API slightly in a few places to reduce preempt_disable/enable scope. > We do this here in net because it requires an API change and this > avoids getting stuck with legacy API going forward. > > The short description: > > Access to skb mark is removed, it is problematic when we add > features in the future because mark is a union and used by the > TCP/socket code internally. We don't want to expose this to the > BPF programs or let programs change the values. > > The other change is caching metadata in the skb itself between > when the BPF program returns a redirect code and the core code > implements the redirect. This avoids having per cpu metadata. > > Finally, tighten restriction on using sockmap to CAP_NET_ADMIN and > only SOCK_STREAM sockets. Series applied, thanks.
