This patchset drops all the MTU checks in TC BPF-helpers that limits
growing the packet size. This is done because these BPF-helpers doesn't
take redirect into account, which can result in their MTU check being done
against the wrong netdev.
The new approach is to give BPF-programs knowledge about the MTU on a
netdev (via ifindex) and fib route lookup level. Meaning some BPF-helpers
are added and extended to make it possible to do MTU checks in the
BPF-code. If BPF-prog doesn't comply with the MTU this is enforced on the
kernel side.
Realizing MTU should only apply to transmitted packets, the MTU
enforcement is now done after the TC egress hook. This gives TC-BPF
programs most flexibility and allows to shrink packet size again in egress
hook prior to transmit.
This patchset is primarily focused on TC-BPF, but I've made sure that the
MTU BPF-helpers also works for XDP BPF-programs.
---
Jesper Dangaard Brouer (6):
bpf: Remove MTU check in __bpf_skb_max_len
bpf: bpf_fib_lookup return MTU value as output when looked up
bpf: add BPF-helper for reading MTU from net_device via ifindex
bpf: make it possible to identify BPF redirected SKBs
bpf: Add MTU check for TC-BPF packets after egress hook
bpf: drop MTU check when doing TC-BPF redirect to ingress
include/linux/netdevice.h | 5 ++-
include/uapi/linux/bpf.h | 24 +++++++++++-
net/core/dev.c | 24 +++++++++++-
net/core/filter.c | 88 ++++++++++++++++++++++++++++++++++++++++-----
net/sched/Kconfig | 1 +
5 files changed, 126 insertions(+), 16 deletions(-)
--
