`xfrm_init':
(.init.text+0xcd7): undefined reference to `snmp_mib_init'
Signed-off-by: Johann Felix Soden [EMAIL PROTECTED]
CC: Masahide NAKAMURA [EMAIL PROTECTED]
A fix for this has been in my net-2.6 tree for a few days,
and Linus pulled it in this morning.
Thank you guys for taking care
to XfrmInStateMismatch.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
Documentation/networking/xfrm_proc.txt |8 ++--
include/linux/snmp.h |3 ++-
net/xfrm/xfrm_input.c |4 ++--
net/xfrm/xfrm_output.c |1 +
net/xfrm
: Add outbound-dropping error.
o Increment PolError counter when flow_cache_lookup() returns
errored pointer.
o Increment NoStates counter at larval-drop.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/xfrm/xfrm_policy.c |5 -
1 files changed, 4 insertions(+), 1 deletions
David, I failed to include this statistics codes since I didn't notice
the conflict with the latest Herbert XFRM fix.
Please apply this, too.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/xfrm/xfrm_output.c | 12 +---
1 files changed, 9 insertions(+), 3 deletions(-)
diff
Hello David,
I'm sorry, the previous mail contains wrong code:
David, I failed to include this statistics codes since I didn't notice
the conflict with the latest Herbert XFRM fix.
Please apply this, too.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
[snip]
do
Subject: [XFRM] Documentaion: Fix error example at XFRMOUTSTATEMODEERROR. (Re:
[XFRM]: Fix outbound statistics.)
Hello,
On Fri, 21 Dec 2007 23:11:11 +0800
Herbert Xu [EMAIL PROTECTED] wrote:
On Fri, Dec 21, 2007 at 11:25:00PM +0900, Masahide NAKAMURA wrote:
do {
err
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/xfrm/Kconfig | 10 ++
1 files changed, 10 insertions(+), 0 deletions(-)
diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig
index 577a4f8..6b5b50f 100644
--- a/net/xfrm/Kconfig
+++ b/net/xfrm/Kconfig
@@ -35,6 +35,16 @@ config
is for non-fragment transformation used by
MIPv6 to rt6i_nfheader_len as IPv6 name space.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
include/net/ip6_fib.h |2 +-
include/net/xfrm.h |3 +++
net/ipv4/xfrm4_policy.c |7 +++
net/ipv6/ip6_output.c |4 ++--
net/ipv6
Disable spin_lock during xfrm_type.input() function.
Follow design as IPsec inbound does.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv6/xfrm6_input.c | 54 +--
1 files changed, 29 insertions(+), 25 deletions(-)
diff --git a/net
This statistics is shown factor dropped by transformation
at /proc/net/xfrm_stat for developer.
It is a counter designed from current transformation source code
and defined as linux private MIB.
See Documentation/networking/xfrm_proc.txt for the detail.
Signed-off-by: Masahide NAKAMURA [EMAIL
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv6/xfrm6_input.c |3 ++
net/xfrm/xfrm_input.c | 41 +++---
net/xfrm/xfrm_output.c |6 -
net/xfrm/xfrm_policy.c | 63 ++-
4 files changed, 90 insertions
Friday 21 December 2007 12:50, David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Fri, 21 Dec 2007 12:48:31 +0900
My 5 patches for XFRM sent to netdev should be TOed to David, but it is not.
It does not seems that the command works for me.
git-send-email --to David S
Friday 21 December 2007 14:06, Masahide NAKAMURA wrote:
Thanks, I'll resend by hand this time.
Mayby I use your e-mail address without name
by current git-send-email.
Ah, they are already applied. I don't need resend anymore.
I'll be careful this next time.
Regards,
--
Masahide NAKAMURA
to
remove the newly added locks which should be just as effective.
This would reduce the churn in the code as we'd be putting most
of it back soon anyway.
With the patch you sent, the xfrm_state_walk() issue I reported
is solved at current net-2.6.25.
--
Masahide NAKAMURA
-
To unsubscribe from
(copy_to_user_state_extra).
Regards,
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Wednesday 24 October 2007 21:18, jamal wrote:
On Wed, 2007-24-10 at 12:30 +0900, Masahide NAKAMURA wrote:
At IPsec point of view, actually SPI mismatch caused by user configuration
cannot be identified easily since identify of SAD is consist of SPI,
address and
protocol(ESP/AH
Monday 22 October 2007 21:28, jamal wrote:
On Mon, 2007-22-10 at 15:11 +0900, Masahide NAKAMURA wrote:
This patch introduces statistics about transformation error (or almost
error)
factor at packet processing for developer.
It is not a SNMP/MIB specification from IPsec/MIPv6
Wednesday 24 October 2007 04:47, jamal wrote:
On Tue, 2007-23-10 at 16:08 +0900, Masahide NAKAMURA wrote:
Thanks. I would like you to find too much item at my patch
for the statistics, too.
I am not anywhere close to a machine where i can give you precise
details to this; the one thing
This patch introduces statistics about transformation error (or almost error)
factor at packet processing for developer.
It is not a SNMP/MIB specification from IPsec/MIPv6 but a counter
designed from current transformation source code.
Comment please.
-
To unsubscribe from this list: send the
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv6/ah6.c |1 +
net/ipv6/esp6.c |1 +
2 files changed, 2 insertions(+), 0 deletions(-)
diff --git a/net/ipv6/ah6.c b/net/ipv6/ah6.c
index 67cd066..66a9139 100644
--- a/net/ipv6/ah6.c
+++ b/net/ipv6/ah6.c
@@ -483,6 +483,7
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv4/xfrm4_input.c | 48 +++-
net/ipv4/xfrm4_output.c |4 ++-
net/ipv6/xfrm6_input.c | 56 --
net/ipv6/xfrm6_output.c |4 ++-
net/xfrm/xfrm_output.c
XfrmOutStateProtoError- error at transformation protocol
XfrmOutStateModeError - error at transformation mode
XfrmOutStateExpired - state expired
XfrmOutPolBlock - policy discards
XfrmOutPolError - policy error
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
include
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/xfrm/Kconfig | 10 ++
1 files changed, 10 insertions(+), 0 deletions(-)
diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig
index 577a4f8..6b5b50f 100644
--- a/net/xfrm/Kconfig
+++ b/net/xfrm/Kconfig
@@ -35,6 +35,16 @@ config
Monday 22 October 2007 17:50, Herbert Xu wrote:
On Mon, Oct 22, 2007 at 03:11:06PM +0900, Masahide NAKAMURA wrote:
This patch introduces statistics about transformation error (or almost
error)
factor at packet processing for developer.
It is not a SNMP/MIB specification from IPsec/MIPv6
PROTECTED]
Agreed.
Acked-by: Masahide NAKAMURA [EMAIL PROTECTED]
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
CONFIG_XFRM
than changing kernel config depends. Does it make sense?
Please review the attached patch.
--
Masahide NAKAMURA
0001-PATCH-IPV6-XFRM-Fix-dependency-issue-at-inet6_csk_xmit.txt
Description: Binary data
This is minor fix about sizeof argument using with kmemdup().
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/xfrm/xfrm_user.c |4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/net/xfrm/xfrm_user.c b/net/xfrm/xfrm_user.c
index 0b8491f..46076f5 100644
it is done only when routing cookie is changed.
This patch fix that non-transformation dst can be changed to
transformation one.
This behavior is required by MIPv6 and improves IPv6 IPsec.
Signed-off-by: Noriaki TAKAMIYA [EMAIL PROTECTED]
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED
should be assumed as
a decapsulated packet from IPsec tunnel by own.
It may be a rare case for an IPsec security gateway, however
it is not rare when the gateway is MIPv6 Home Agent since
the another tunnel end-point is Mobile Node and it changes
the attached network.
Signed-off-by: Masahide
.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv4/ip_forward.c |2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/net/ipv4/ip_forward.c b/net/ipv4/ip_forward.c
index 8c95cf0..afbf938 100644
--- a/net/ipv4/ip_forward.c
+++ b/net/ipv4/ip_forward.c
@@ -105,7 +105,7
o Support policy flag with string format.
Note that kernel defines only one name localok for the flag
and it has not had any effect currently.
o Support state flag value XFRM_STATE_NOPMTUDISC.
o Fix to show detailed flags value when -s option is used.
o Fix minor typo.
Signed-off-by: Masahide
Remove unused or redundant usage for xfrm_filter.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
ip/xfrm_policy.c | 17 -
ip/xfrm_state.c |2 --
2 files changed, 0 insertions(+), 19 deletions(-)
diff --git a/ip/xfrm_policy.c b/ip/xfrm_policy.c
index c1086f1
Fix xfrm state or policy flush message.
And minor updates are included:
o Use static buffer to show unknown value as string.
o Show policy type (ptype) only when kernel specified it.
o Clean-up xfrm_monitor.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
ip/ipxfrm.c | 48
Hello,
There are updates for ip command. They are almost minor fixes
and are not changes about 2.6.23 new features.
Please apply if it is not too late for next release.
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL
Hi Ingo,
Ingo Oeser wrote:
Masahide NAKAMURA schrieb:
Ingo Oeser wrote:
What about MODULE_ALIAS(xfrm-type-10-60)
and MODULE_ALIAS(xfrm-type-10-43) in mip6.c ?
Just replace your second patch (Loadable module support)
with one, which additionally adds these two lines to mip6.c
Hello,
There are Mobile IPv6 patches for net-2.6 (2.6.22-rc2), which are
minor fixes and modularization. Please review and apply them.
[IPV6] MIP6: Kill unnecessary ifdefs.
[IPV6] MIP6: Loadable module support for MIPv6.
--
Masahide NAKAMURA
-
To unsubscribe from this list
Ingo Oeser wrote:
[EMAIL PROTECTED] schrieb:
From: Masahide NAKAMURA [EMAIL PROTECTED]
This patch makes MIPv6 loadable module named mip6.
Here is a modprobe.conf(5) example to load it automatically
when user application uses XFRM state for MIPv6:
alias xfrm-type-10-43 mip6
alias xfrm-type-10
On Sun, 29 Apr 2007 22:21:45 -0700 (PDT)
David Miller [EMAIL PROTECTED] wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Mon, 30 Apr 2007 13:36:03 +0900
Can you have a time to check this?
If it is lost, I can send it again.
I still have it, I just have not processed it yet
On Mon, 30 Apr 2007 00:34:37 -0700 (PDT)
David Miller [EMAIL PROTECTED] wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Fri, 6 Apr 2007 16:25:39 +0900
On MIPv6 usage, XFRM sub policy is enabled.
When main (IPsec) and sub (MIPv6) policy selectors have the same
address set
Hello,
On Thu, 12 Apr 2007 15:53:33 +0900
Masahide NAKAMURA [EMAIL PROTECTED] wrote:
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Thu, 12 Apr 2007 14:42:00 +0900
Hello,
I sent the patch, which is required for IPsec usage by Mobile IPv6.
I have not obtained
Hello,
I sent the patch, which is required for IPsec usage by Mobile IPv6.
I have not obtained any comments yet. Does anybody have it?
I hope it to be applied.
Thanks,
Masahide NAKAMURA wrote:
On MIPv6 usage, XFRM sub policy is enabled.
When main (IPsec) and sub (MIPv6) policy selectors
does not match the selector, it goes to slow path to
restructure new bundle by single policy.
2. Bundle was created by one policy
Flow cache is added to xfrm_dst as originated one. If the flow does
not match the cache, it goes to slow path to try searching another
policy.
Signed-off-by: Masahide
with including mine).
Regards,
--
Masahide NAKAMURA
From ce9f1ac8c8df22b462a15d4609d05ec939930208 Mon Sep 17 00:00:00 2001
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Sat, 10 Feb 2007 11:48:49 +0900
Subject: [PATCH][XFRM] IPV6: Fix outbound RO transformation which is broken by
IPsec tunnel patch
feature for kernel.
This patch just relaxes user application like ICMPv6 case
then we can cancel this if it is too much.
Thanks for taking care of this again, guys.
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED
-by: Masahide NAKAMURA [EMAIL PROTECTED]
Signed-off-by: TAKAMIYA Noriaki [EMAIL PROTECTED]
---
include/linux/if_tunnel.h |2 ++
1 files changed, 2 insertions(+), 0 deletions(-)
diff --git a/include/linux/if_tunnel.h b/include/linux/if_tunnel.h
index 8de079b..660b501 100644
--- a/include/linux
and was redundant check with raw socket code.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv6/mip6.c | 26 --
net/ipv6/raw.c | 13 +++--
2 files changed, 11 insertions(+), 28 deletions(-)
diff --git a/net/ipv6/mip6.c b/net/ipv6/mip6.c
index be7dd7d..681bb07
and was redundant check with raw socket code.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv6/mip6.c | 26 --
net/ipv6/raw.c | 13 +++--
2 files changed, 11 insertions(+), 28 deletions(-)
diff --git a/net/ipv6/mip6.c b/net/ipv6/mip6.c
index be7dd7d..681bb07
than you pointed.
Regards,
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
one.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv6/raw.c |3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/net/ipv6/raw.c b/net/ipv6/raw.c
index d6dedc4..aa1d420 100644
--- a/net/ipv6/raw.c
+++ b/net/ipv6/raw.c
@@ -855,7 +855,8 @@ back_from_confirm
Add checksum default defines for mobility header(MH).
As the result kernel's behavior is to handle MH checksum
as default.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
net/ipv6/raw.c | 15 +--
1 files changed, 13 insertions(+), 2 deletions(-)
diff --git a/net/ipv6/raw.c
.
Please review and apply them.
Thanks,
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
{IFA,IFLA,NDA,NDTA}_{RTA,PAYLOAD} macro is removed from kernel
header since linux-2.6.19 because it is not used by kernel code.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
include/libnetlink.h | 35 +++
1 files changed, 35 insertions(+), 0 deletions
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
ip/ipxfrm.c |9 +
ip/xfrm.h |3 +++
2 files changed, 12 insertions(+), 0 deletions(-)
diff --git a/ip/ipxfrm.c b/ip/ipxfrm.c
index 7c9fd0b..9c8b4bd 100644
--- a/ip/ipxfrm.c
+++ b/ip/ipxfrm.c
@@ -483,6 +483,14 @@ void
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
ip/xfrm.h |2 ++
ip/xfrm_monitor.c | 52
2 files changed, 54 insertions(+), 0 deletions(-)
diff --git a/ip/xfrm.h b/ip/xfrm.h
index 51ffa4b..d33ff94 100644
--- a/ip/xfrm.h
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
ip/ipxfrm.c | 27 ++
ip/xfrm.h|4 +
ip/xfrm_policy.c | 150 --
3 files changed, 164 insertions(+), 17 deletions(-)
diff --git a/ip/ipxfrm.c b/ip/ipxfrm.c
index
f proto ah ; ip x s f proto comp`
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
ip/ipxfrm.c | 84 ++
ip/xfrm.h|2 +
ip/xfrm_policy.c |7 ++--
ip/xfrm_state.c | 107 --
4
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
ip/iprule.c |4
1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/ip/iprule.c b/ip/iprule.c
index c584b18..1da64b8 100644
--- a/ip/iprule.c
+++ b/ip/iprule.c
@@ -83,8 +83,10 @@ int print_rule(const struct sockaddr_nl
Thomas Graf wrote:
* Masahide NAKAMURA [EMAIL PROTECTED] 2006-12-05 19:15
diff --git a/include/linux/fib_rules.h b/include/linux/fib_rules.h
index 8270aac..4418c8d 100644
--- a/include/linux/fib_rules.h
+++ b/include/linux/fib_rules.h
@@ -6,7 +6,6 @@ #include linux/rtnetlink.h
/* rule
updated to newer version except fib_fules.h, iprule.c?
Regards,
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Stephen Hemminger wrote:
I am about to push out a new version, so if you have any more patches pending
the window is about to close.
Please retest with current git tree
Brief tests for MIPv6 xfrm are passed with the tree on kernel 2.6.19.
--
Masahide NAKAMURA
-
To unsubscribe from this list
to know when to update your tree's kernel headers, too.
To use this chance to test with your tree, can I send my patches with the
header update to 2.6.19-rcX in advance (updating headers by you is also fine
with me), or just wait till 2.6.19 final release is done?
Regards,
--
Masahide NAKAMURA
On Fri, 17 Nov 2006 08:34:44 -0500
jamal [EMAIL PROTECTED] wrote:
Found the cause of my problems.
Dave, this is against Linus tree because it is bug fix.
Nakamura-san please ACK.
cheers,
jamal
It looks fine to me. Thanks, Jamal.
Acked-by: Masahide NAKAMURA [EMAIL PROTECTED
On Fri, 17 Nov 2006 08:48:31 -0500
jamal [EMAIL PROTECTED] wrote:
Another one in the same spirit as before. Compiles. I dont have
a good test case, but looks right.
Nakamura-san please ACK and Dave (as before this goes in as a bug-fix).
Acked-by: Masahide NAKAMURA [EMAIL PROTECTED]
I've
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Tue, 03 Oct 2006 12:29:54 +0900
[XFRM] POLICY: Fix per-direction policy counter after flushing.
Currently when xfrm_policy_flush() is called per-direction
policy counter is cleared. However flusing policy
/xfrm_policy.c |4 ++--
net/xfrm/xfrm_state.c | 16 +---
3 files changed, 15 insertions(+), 12 deletions(-)
CHANGESETS
--
commit 90c1f7d3e1019b2885844b03088588268e38cec5
Author: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Sun Sep 24 14:46:59 2006 +0900
[XFRM] POLICY: Fix per
by kernel code.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
---
include/libnetlink.h | 35 +++
1 files changed, 35 insertions(+), 0 deletions(-)
diff --git a/include/libnetlink.h b/include/libnetlink.h
index 63cc3c8..9de3a0b 100644
--- a/include/libnetlink.h
}.h, neighbour.h
to iproute2 tree. Some macros may be needed for libnetlink.h, too.
I'll send the patch to you if you haven't started on it.
Regards,
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More majordomo
David Miller wrote:
Masahide-san, please provide a Signed-off-by: line in
the future, even for simple changes like this one.
OK, I'll :-)
Regards,
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More
it by
the parser just like routing header case.
This is a framework to achieve that to allow TLV parser to replace
inbound skbuff pointer.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
Signed-off-by: YOSHIFUJI Hideaki [EMAIL PROTECTED]
Applied to net-2.6.19, thanks a lot.
I've found
Masahide NAKAMURA wrote:
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Thu, 24 Aug 2006 16:05:39 +0900
David Miller wrote:
In the mean time, I will work on porting my XFRM hashing changes
for the current net-2.6.19 tree.
FYI, your work will not have any conflict
On Fri, 25 Aug 2006 03:16:51 -0700 (PDT)
David Miller [EMAIL PROTECTED] wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Fri, 25 Aug 2006 19:06:40 +0900
I've found a problem about MIPv6 CN with the patch below.
We just need to search by priority in the inexact list, even
if we get
-space know a binding error requirement.
Based on MIPL2 kernel patch.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED]
Signed-off-by: YOSHIFUJI Hideaki [EMAIL PROTECTED]
Applied to net-2.6.19, but...
Please check whether this XFRM_MSG_REPORT functionality can be
provided via XFRM_MSG_*AE
for the current net-2.6.19 tree.
FYI, your work will not have any conflict with the left of MIPv6 patches
which I will describe later since they are almost out of XFRM.
Regards,
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Thu, 24 Aug 2006 16:05:39 +0900
David Miller wrote:
In the mean time, I will work on porting my XFRM hashing changes
for the current net-2.6.19 tree.
FYI, your work will not have any conflict with the left of MIPv6 patches
David Miller wrote:
From: YOSHIFUJI Hideaki [EMAIL PROTECTED]
Date: Thu, 24 Aug 2006 00:02:06 +0900
From: Masahide NAKAMURA [EMAIL PROTECTED]
Support source address based searching.
Mobile IPv6 will use it.
Based on MIPL2 kernel patch.
Signed-off-by: Masahide NAKAMURA [EMAIL PROTECTED
David Miller wrote:
From: YOSHIFUJI Hideaki [EMAIL PROTECTED]
Date: Thu, 24 Aug 2006 00:02:17 +0900
From: Masahide NAKAMURA [EMAIL PROTECTED]
For outbound transformation, bundle is checked whether it is
suitable for current flow to be reused or not. In such IPv6 case
as below, transformation
David Miller wrote:
From: YOSHIFUJI Hideaki [EMAIL PROTECTED]
Date: Thu, 24 Aug 2006 00:02:19 +0900
From: Masahide NAKAMURA [EMAIL PROTECTED]
Add Kconfig to enable Mobile IPv6.
Based on MIPL2 kernel patch.
Signed-off-by: Noriaki TAKAMIYA [EMAIL PROTECTED]
Signed-off-by: Masahide NAKAMURA
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Sat, 29 Jul 2006 18:30:29 +0900
@@ -272,6 +272,9 @@ #define XFRM_TYPE_NON_FRAGMENT 1
void(*destructor)(struct xfrm_state *);
int (*input)(struct xfrm_state *, struct
Herbert Xu wrote:
Please rebase your tree on something that's more recent. We've had
xfrm modes for more than two months now.
OK, I use rebase to catch up with the latest tree.
(This tree is just for review then it is not against the latest but 2.6.17.)
--
Masahide NAKAMURA
-
To unsubscribe
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Sat, 29 Jul 2006 18:37:04 +0900
Here is Part B patches, following this mail.
Part B is also available as mip6cn-20060716-review branch at:
git://git.skbuff.net:9419/gitroot/nakam/linux-2.6-mip6cn
This tree includes part
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Wed, 02 Aug 2006 11:20:30 +0900
David Miller wrote:
I see a dangerous pattern of adding many, many, many methods
to the xfrm_type structure which are only used by ipv6.
But I cannot suggest another method.
Sometimes
to add new type number
without any modification of kernel code at all I would support ICMPv6 filter
approach,
too.
--
Masahide NAKAMURA
-
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Sat, 29 Jul 2006 18:29:45 +0900
Transformation mode is used as either IPsec transport or tunnel.
It is required to add two more items, route-optimization and inbound trigger
by Mobile IPv6.
Based on MIPL2 kernel patch
which records the source address (if any such thing does exist).
There is no xfrm netlink attribute to carry source address.
I'll add it like XFRMA_SRCADDR.
BTW another patch newly defined XFRMA_ADDR to carry care-of address.
This would be changed e.g. XFRMA_COADDR or something, too.
--
Masahide
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Sat, 29 Jul 2006 18:30:55 +0900
diff --git a/include/linux/xfrm.h b/include/linux/xfrm.h
index 901bb65..68d3443 100644
--- a/include/linux/xfrm.h
+++ b/include/linux/xfrm.h
@@ -303,12 +303,14 @@ #define XFRM_POLICY_BLOCK
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Sat, 29 Jul 2006 18:30:18 +0900
+#ifdef CONFIG_XFRM_ADVANCED
+struct xfrm_state *(*state_lookup_byaddr)(xfrm_address_t *daddr,
xfrm_address_t *saddr, u8 proto);
+#endif
I think we should delete XFRM_ADVANCED
David Miller wrote:
From: Masahide NAKAMURA [EMAIL PROTECTED]
Date: Sat, 29 Jul 2006 18:30:23 +0900
@@ -270,6 +270,7 @@ struct xfrm_type
void(*destructor)(struct xfrm_state *);
int (*input)(struct xfrm_state *, struct sk_buff
*skb
transform in order to
support it's binding cache. Also, these new modes are not
advanced but instead Mobile IPv6 specific.
I agree XFRM should be generic transformation.
XFRM_ADVANCED will be removed from my patch because some comments are sent.
--
Masahide NAKAMURA
but works with the above categories
since they are finally confirmed as the MIPv6 node behavior;
e.g. home addressing for MN, proxy forwarding for HA.
At first I'll send patches about category 3 very soon, just for review.
Can you check them?
Thanks,
--
Masahide NAKAMURA
-
To unsubscribe from
for CN
Route optimization defined MIPv6 specification
is designed as XFRM extension. IPv6 extension headers
handling is included, too.
This feature is required by all MIPv6 nodes(CN, MN, HA) then it can
be said MIPv6 platform.
--
Masahide NAKAMURA
-
To unsubscribe from this list: send
Support source address based searching.
Mobile IPv6 will use it.
Based on MIPL2 kernel patch.
---
include/linux/xfrm.h |1 +
include/net/xfrm.h | 32
net/ipv4/xfrm4_state.c |5 +
net/ipv6/xfrm6_state.c |5 +
net/xfrm/xfrm_state.c |
Put the helper to header for future use.
---
include/net/xfrm.h|6 ++
net/xfrm/xfrm_state.c |6 +++---
2 files changed, 9 insertions(+), 3 deletions(-)
diff --git a/include/net/xfrm.h b/include/net/xfrm.h
index ddb153d..ca537b5 100644
--- a/include/net/xfrm.h
+++
Transformation user interface is not only for IPsec.
Based on MIPL2 kernel patch.
---
net/xfrm/Kconfig |6 +++---
net/xfrm/xfrm_user.c |2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig
index 95f4f09..50f2fb3 100644
---
Transformation mode is used as either IPsec transport or tunnel.
It is required to add two more items, route-optimization and inbound trigger
by Mobile IPv6.
Based on MIPL2 kernel patch.
---
include/linux/xfrm.h|9 -
include/net/xfrm.h |2 +-
net/ipv4/ah4.c |
This option is for enhanced transformation features and it will be used by
Mobile IPv6.
Based on MIPL2 kernel patch.
---
net/xfrm/Kconfig |8
1 files changed, 8 insertions(+), 0 deletions(-)
diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig
index 0c1c043..95f4f09 100644
---
It will be added two more transformation protocols (routing header
and destination options header) by Mobile IPv6.
xfrm_id_proto_match() can be handle zero as all, IPSEC_PROTO_ANY as
all IPsec and otherwise as exact one.
Based on MIPL2 kernel patch.
---
include/net/xfrm.h |7 +++
Outbound transformation replaces both source and destination address with
state's end-point addresses at the same time when IPsec tunnel mode.
It is also required to change them for Mobile IPv6 route optimization, but we
should care about the following differences:
- changing result is not
For Mobile IPv6 usage, routing header or destination options header is used and
it doesn't require this compare. It is checked only when IPsec template.
Based on MIPL2 kernel patch.
---
net/xfrm/xfrm_policy.c |3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git
Sub policy is introduced. Main and sub policy are applied the same flow.
(Policy that current kernel uses is named as main.)
It is required another transformation policy management to keep IPsec
and Mobile IPv6 lives separate.
Policy which lives shorter time in kernel should be a sub i.e. normally
Under two transformation policies it is required to merge them.
This is a platform to sort state for outbound and templates
for inbound respectively.
Mobile IPv6 will use it.
---
include/net/xfrm.h | 22 ++
net/xfrm/xfrm_policy.c | 16 ++--
1 - 100 of 131 matches
Mail list logo
