On 11/29/16 1:01 PM, Alexei Starovoitov wrote: > Could you also expose sk_protcol and sk_type as read only fields? > They have user space visible values already and will make this new > BPF_PROG_TYPE_CGROUP_SOCK program type much more useful beyond vrf > use case. Like we'll be able to write a tiny bpf program to block all > raw sockets or all udp sockets for an application within a given cgroup. > If someone would want to prevent udp traffic from an application, > it can be done here within close to zero overhead for socket() syscall > instead of checking every packet at networking layer. > It can help vrf use case as well, so you can auto-bindtodevice > only udp and tcp sockets instead of all... or do it for ipv4 or ipv6 only. > Plenty of interesting opportunities with just two extra fields > that cost nothing when not in use.
sure. for completeness I'll add sk_family too.
