[ipsec PATCH 0/3] Preserve skb-mark through VTI tunnels

2015-05-27 Thread Alexander Duyck
These patches are meant to try and address the fact the VTI tunnels are
currently overwriting the skb-mark value.  I am generally happy with the
first two patches, however the third patch still modifies the skb-mark,
though it undoes after the fact.

The main problem I am trying to address is the fact that currently if I use
an v6 over v6 VTI tunnel I cannot receive any traffic on the interface as
the skb-mark is bleeding through and causing the traffic to be dropped.

---

Alexander Duyck (3):
  ip_vti/ip6_vti: Do not touch skb-mark on xmit
  xfrm: Override skb-mark with tunnel-parm.i_key in xfrm_input
  ip_vti/ip6_vti: Preserve skb-mark after rcv_cb call


 net/ipv4/ip_vti.c |   14 ++
 net/ipv6/ip6_vti.c|   13 ++---
 net/xfrm/xfrm_input.c |   17 -
 3 files changed, 36 insertions(+), 8 deletions(-)

--
--
To unsubscribe from this list: send the line unsubscribe linux-crypto in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html


Re: [ipsec PATCH 0/3] Preserve skb-mark through VTI tunnels

2015-05-27 Thread Steffen Klassert
On Wed, May 27, 2015 at 07:16:37AM -0700, Alexander Duyck wrote:
 These patches are meant to try and address the fact the VTI tunnels are
 currently overwriting the skb-mark value.  I am generally happy with the
 first two patches, however the third patch still modifies the skb-mark,
 though it undoes after the fact.
 
 The main problem I am trying to address is the fact that currently if I use
 an v6 over v6 VTI tunnel I cannot receive any traffic on the interface as
 the skb-mark is bleeding through and causing the traffic to be dropped.
 
 ---
 
 Alexander Duyck (3):
   ip_vti/ip6_vti: Do not touch skb-mark on xmit
   xfrm: Override skb-mark with tunnel-parm.i_key in xfrm_input
   ip_vti/ip6_vti: Preserve skb-mark after rcv_cb call

All applied to the ipsec tree, thanks a lot Alexander!
--
To unsubscribe from this list: send the line unsubscribe linux-crypto in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html