Re: [PATCH v3 bpf-net] bpf: Change bpf_fib_lookup to return lookup status

2018-06-28 Thread Daniel Borkmann
On 06/27/2018 01:21 AM, dsah...@kernel.org wrote: > From: David Ahern > > For ACLs implemented using either FIB rules or FIB entries, the BPF > program needs the FIB lookup status to be able to drop the packet. > Since the bpf_fib_lookup API has not reached a released kernel yet, > change the ret

[PATCH v3 bpf-net] bpf: Change bpf_fib_lookup to return lookup status

2018-06-26 Thread dsahern
From: David Ahern For ACLs implemented using either FIB rules or FIB entries, the BPF program needs the FIB lookup status to be able to drop the packet. Since the bpf_fib_lookup API has not reached a released kernel yet, change the return code to contain an encoding of the FIB lookup result and r