Introduce SW acceleration for IP6IP6 tunnels in the netfilter flowtable infrastructure.
--- Changes in v4: - Take into account encap limit option during tunnel MTU calculation - Take into account ctx->offset to get next-header type in nf_flow_ip6_tunnel_proto() - Link to v3: https://lore.kernel.org/r/20260116-b4-flowtable-offload-ip6ip6-v3-0-c1fcad85a...@kernel.org Changes in v3: - Split patch 1/4 in two separated patches 1/4 and 2/4 and improve commit logs - Add more comments in the code - Rely on skb_header_pointer in patch 2/4 - Link to v2: https://lore.kernel.org/r/20251209-b4-flowtable-offload-ip6ip6-v2-0-44817f1be...@kernel.org Changes in v2: - Fix compilation when CONFIG_IPV6 is disabled - Rely on ipv6_skip_exthdr() in nf_flow_ip6_tunnel_proto() to avoid use-after-free issues - Drop patch 2/5 from v1 - Link to v1: https://lore.kernel.org/r/20251207-b4-flowtable-offload-ip6ip6-v1-0-18e3ab7f7...@kernel.org --- Lorenzo Bianconi (5): netfilter: Add ctx pointer in nf_flow_skb_encap_protocol/nf_flow_ip4_tunnel_proto signature netfilter: Introduce tunnel metadata info in nf_flowtable_ctx struct netfilter: flowtable: Add IP6IP6 rx sw acceleration netfilter: flowtable: Add IP6IP6 tx sw acceleration selftests: netfilter: nft_flowtable.sh: Add IP6IP6 flowtable selftest net/ipv6/ip6_tunnel.c | 27 +++ net/netfilter/nf_flow_table_ip.c | 243 ++++++++++++++++++--- .../selftests/net/netfilter/nft_flowtable.sh | 62 +++++- 3 files changed, 287 insertions(+), 45 deletions(-) --- base-commit: f8156ef0fd8232055396ebf1e044fa06fb8bc388 change-id: 20251207-b4-flowtable-offload-ip6ip6-8e9a2c6f3a77 Best regards, -- Lorenzo Bianconi <[email protected]>
