Merge branch 'cgroup-helpers'
Daniel Borkmann says:
====================
This adds various straight-forward helper improvements and additions to BPF
cgroup based connect(), sendmsg(), recvmsg() and bind-related hooks which
would allow to implement more fine-grained policies and improve current load
balancer limitations we're seeing. For details please see individual patches.
I've tested them on Kubernetes & Cilium and also added selftests for the small
verifier extension. Thanks!
====================
Signed-off-by:
Alexei Starovoitov <ast@kernel.org>
No related branches found
No related tags found
Showing
- include/linux/bpf.h 2 additions, 0 deletionsinclude/linux/bpf.h
- include/net/cls_cgroup.h 6 additions, 1 deletioninclude/net/cls_cgroup.h
- include/net/net_namespace.h 10 additions, 0 deletionsinclude/net/net_namespace.h
- include/uapi/linux/bpf.h 34 additions, 1 deletioninclude/uapi/linux/bpf.h
- kernel/bpf/core.c 1 addition, 0 deletionskernel/bpf/core.c
- kernel/bpf/helpers.c 18 additions, 0 deletionskernel/bpf/helpers.c
- kernel/bpf/verifier.c 10 additions, 6 deletionskernel/bpf/verifier.c
- net/core/filter.c 101 additions, 5 deletionsnet/core/filter.c
- net/core/net_namespace.c 15 additions, 0 deletionsnet/core/net_namespace.c
- tools/include/uapi/linux/bpf.h 34 additions, 1 deletiontools/include/uapi/linux/bpf.h
- tools/testing/selftests/bpf/verifier/ctx.c 105 additions, 0 deletionstools/testing/selftests/bpf/verifier/ctx.c
Loading
Please register or sign in to comment