l2tp: Introduce L2TPv3 support
Subsystems (4)
James Chapman
maintainerv4 cover l2tp: Introduce L2TPv3 support
This patch series adds L2TPv3 support. It splits the existing pppol2tp driver to separate its L2TP and PPP parts, then adds new L2TPv3 functionality. The patches implement a new socket family for L2TPv3 IP encapsulation, expose virtual netdevices for each L2TPv3 ethernet pseudowire and add a netlink interface.
The following drivers are provided:-
l2tp_core - L2TP driver core. Always required. l2tp_ppp - L2TP PPP (PPPoL2TP). L2TPv2 and L2TPv3. l2tp_eth - L2TPv3 ethernet pseudowire. l2tp_ip - L2TPv3 IP encapsulation.
l2tp_netlink - L2TPv3 netlink API.l2tp_debugfs - L2TP debugfs files.
The combination of l2tp_core and l2tp_ppp provides backwards-compatible L2TPv2 pppol2tp functionality. Userspace L2TPv2 applications using the existing pppol2tp driver should not need to change.
The implementation is as I described in a previous posting to netdev, archived at
http://marc.info/?l=linux-netdev&m=120845482320143&w=4. Unfortunately, splitting the existing pppol2tp driver into l2tp_core and l2tp_ppp makes the changes difficult to review. The split is needed to separate PPP from L2TP, since in L2TPv3, protocols other than PPP can be carried. I have organised the patches so that the split is done first, with new features added in separate patches.
Relevant RFCs are:-
- http://www.ietf.org/rfc/rfc3931.txt (L2TPv3)
- http://www.ietf.org/rfc/rfc4719.txt (L2TPv3 ethernet pseudowire)
A patchset is available to iproute2 which adds a number of commands for unmanaged L2TPv3 tunnels. This will be submitted separately.
TODO:-
- Add L2TP tunnel switching.
- Add IP pseudowires. These carry only IP frames (no L2 header).
- Add VLAN pseudowires.
- Add ATM pseudowires - RFC3355 and RFC4454.
---
Changelog:-
v4 (02-apr-2010, this version)
- Remove useless BUG_ON in l2tp_eth driver. (Stephen Hemminger)
- Use random_ether_addr() when deriving MAC address for virtual device of each ethernet pseudowire instead of deriving one based on the L2TP session id. (Stephen Hemminger)
- Convert per_net locks from rwlock to spinlock / rcu. (Stephen Hemminger)
- Rework /proc interface to move all new (L2TPv3 etc) debug info to debugfs. Retain existing /proc file for backwards compability with the old pppol2tp driver. Debugfs is added in a new patch. (Stephen Hemminger, David Miller)
- Add new config option to enable the debugfs file(s) for l2tp.
- Change all flag parameters in the netlink API to u8. (Patrick McHardy)
- Update info about /proc and /debugfs in l2tp documentation.
v3 (31-mar-2010)
- Use hash_32() instead of hash_long() for better efficiency on 64-bit archs (Eric Dumazet)
- Add missing setting of sk->sk_no_check for the case when creating kernel socket for the unmanaged tunnel case. (Eric Dumazet)
- Fix a dev_put leak for the case when user creates an ethernet pseudowire with a specific device name and a device with that name already exists. (Eric Dumazet)
- Use dev_forward_skb() in receive path of l2tp_eth driver.
v2 (29-mar-2010)
- Fix compile error when CONFIG_COMPAT is defined. Since l2tp_ip is not a UDP socket, use compat_ip_[gs]etsockopt directly instead of config_udp_[gs]etsockopt. (David Miller)
- Fix whitespace issues found by
git apply --check --whitespace=error-all (David Miller)
James Chapman (14):
l2tp: Relocate pppol2tp driver to new net/l2tp directory
l2tp: Split pppol2tp patch into separate l2tp and ppp parts
ppp: Add ppp_dev_name() exported function
l2tp: Add ppp device name to L2TP ppp session data
l2tp: Add L2TPv3 protocol support
l2tp: Update PPP-over-L2TP driver to work over L2TPv3
l2tp: Add L2TPv3 IP encapsulation (no UDP) support
netlink: Export genl_lock() API for use by modules
l2tp: Add netlink control API for L2TP
l2tp: Convert rwlock to RCU
l2tp: Add L2TP ethernet pseudowire support
l2tp: Add debugfs files for dumping l2tp debug info
l2tp: Add support for static unmanaged L2TPv3 tunnels
l2tp: Update documentation
Documentation/networking/l2tp.txt | 247 +++ drivers/net/Kconfig | 7 drivers/net/Makefile | 2 drivers/net/ppp_generic.c | 19 drivers/net/pppol2tp.c | 2680 ------------------------------------- include/linux/genetlink.h | 8 include/linux/if_pppol2tp.h | 16 include/linux/if_pppox.h | 9 include/linux/l2tp.h | 163 ++ include/linux/ppp_channel.h | 3 net/Kconfig | 1 net/Makefile | 1 net/l2tp/Kconfig | 107 + net/l2tp/Makefile | 12 net/l2tp/l2tp_core.c | 1692 +++++++++++++++++++++++ net/l2tp/l2tp_core.h | 304 ++++ net/l2tp/l2tp_debugfs.c | 341 +++++ net/l2tp/l2tp_eth.c | 361 +++++ net/l2tp/l2tp_ip.c | 679 +++++++++ net/l2tp/l2tp_netlink.c | 840 ++++++++++++ net/l2tp/l2tp_ppp.c | 1837 +++++++++++++++++++++++++ net/netlink/genetlink.c | 6 22 files changed, 6611 insertions(+), 2724 deletions(-) delete mode 100644 drivers/net/pppol2tp.c create mode 100644 include/linux/l2tp.h create mode 100644 net/l2tp/Kconfig create mode 100644 net/l2tp/Makefile create mode 100644 net/l2tp/l2tp_core.c create mode 100644 net/l2tp/l2tp_core.h create mode 100644 net/l2tp/l2tp_debugfs.c create mode 100644 net/l2tp/l2tp_eth.c create mode 100644 net/l2tp/l2tp_ip.c create mode 100644 net/l2tp/l2tp_netlink.c create mode 100644 net/l2tp/l2tp_ppp.c
James Chapman
maintainerPATCH v4 1/14 l2tp: Relocate pppol2tp driver to new net/l2tp directory
This patch moves the existing pppol2tp driver from drivers/net into a new net/l2tp directory, which is where the upcoming L2TPv3 code will live. The existing CONFIG_PPPOL2TP config option is left in its current place to avoid "make oldconfig" issues when an existing pppol2tp user takes this change. (This is the same approach used for the pppoatm driver, which moved to net/atm.)
There are no code changes. The existing drivers/net/pppol2tp.c is simply moved to net/l2tp.
---
Am I being paranoid about not moving CONFIG_PPPOL2TP from drivers/net/Kconfig to net/l2tp/Kconfig?
--- drivers/net/Makefile | 2 drivers/net/pppol2tp.c | 2680 ------------------------------------------------ net/Makefile | 1 net/l2tp/Makefile | 5 net/l2tp/pppol2tp.c | 2680 ++++++++++++++++++++++++++++++++++++++++++++++++ 5 files changed, 2687 insertions(+), 2681 deletions(-) delete mode 100644 drivers/net/pppol2tp.c create mode 100644 net/l2tp/Makefile create mode 100644 net/l2tp/pppol2tp.c
drivers/net/Makefile +1 -1
@@ -160,7 +160,7 @@ obj-$(CONFIG_PPP_DEFLATE) += ppp_deflate.o obj-$(CONFIG_PPP_BSDCOMP) += bsd_comp.o obj-$(CONFIG_PPP_MPPE) += ppp_mppe.o obj-$(CONFIG_PPPOE) += pppox.o pppoe.o -obj-$(CONFIG_PPPOL2TP) += pppox.o pppol2tp.o +obj-$(CONFIG_PPPOL2TP) += pppox.o obj-$(CONFIG_SLIP) += slip.o obj-$(CONFIG_SLHC) += slhc.o
drivers/net/pppol2tp.c deleted +0 -2680
2,680 lines not on this page · raw message
net/Makefile +1 -0
@@ -40,6 +40,7 @@ obj-$(CONFIG_BT) += bluetooth/ obj-$(CONFIG_SUNRPC) += sunrpc/ obj-$(CONFIG_AF_RXRPC) += rxrpc/ obj-$(CONFIG_ATM) += atm/ +obj-$(CONFIG_PPPOL2TP) += l2tp/ obj-$(CONFIG_DECNET) += decnet/ obj-$(CONFIG_ECONET) += econet/ obj-$(CONFIG_PHONET) += phonet/
net/l2tp/Makefile new file +5 -0
@@ -0,0 +1,5 @@ +# +# Makefile for the L2TP. +# + +obj-$(CONFIG_PPPOL2TP) += pppol2tp.o
net/l2tp/pppol2tp.c new file +2680 -0
300 lines not on this page · raw message
The rest of this diff is not shown. View the raw message.
Part of the diff is not shown here. View the raw message.
James Chapman
maintainerPATCH v4 2/14 l2tp: Split pppol2tp patch into separate l2tp and ppp parts
In reply to James ChapmanThis patch splits the pppol2tp driver into separate L2TP and PPP parts to prepare for L2TPv3 support. In L2TPv3, protocols other than PPP can be carried, so this split creates a common L2TP core that will handle the common L2TP bits which protocol support modules such as PPP will use.
Note that the existing pppol2tp module is split into l2tp_core and l2tp_ppp by this change.
There are no feature changes here. Internally, however, there are significant changes, mostly to handle the separation of PPP-specific data from the L2TP session and to provide hooks in the core for modules like PPP to access.
--- drivers/net/Kconfig | 7 include/linux/if_pppol2tp.h | 2 net/Kconfig | 1 net/Makefile | 2 net/l2tp/Kconfig | 28 net/l2tp/Makefile | 5 net/l2tp/l2tp_core.c | 1227 ++++++++++++++++++++ net/l2tp/l2tp_core.h | 254 ++++ net/l2tp/l2tp_ppp.c | 1658 +++++++++++++++++++++++++++ net/l2tp/pppol2tp.c | 2680 ------------------------------------------- 10 files changed, 3175 insertions(+), 2689 deletions(-) create mode 100644 net/l2tp/Kconfig create mode 100644 net/l2tp/l2tp_core.c create mode 100644 net/l2tp/l2tp_core.h create mode 100644 net/l2tp/l2tp_ppp.c delete mode 100644 net/l2tp/pppol2tp.c
drivers/net/Kconfig +1 -6
@@ -3158,17 +3158,12 @@ config PPPOATM config PPPOL2TP tristate "PPP over L2TP (EXPERIMENTAL)" - depends on EXPERIMENTAL && PPP && INET + depends on EXPERIMENTAL && L2TP && PPP help Support for PPP-over-L2TP socket family. L2TP is a protocol used by ISPs and enterprises to tunnel PPP traffic over UDP tunnels. L2TP is replacing PPTP for VPN uses. - This kernel component handles only L2TP data packets: a - userland daemon handles L2TP the control protocol (tunnel - and session setup). One such daemon is OpenL2TP - (http://openl2tp.sourceforge.net/). - config SLIP tristate "SLIP (serial line) support" ---help---
include/linux/if_pppol2tp.h +1 -1
@@ -2,7 +2,7 @@* Linux PPP over L2TP (PPPoL2TP) Socket Implementation (RFC 2661) * * This file supplies definitions required by the PPP over L2TP driver -* (pppol2tp.c). All version information wrt this file is located in pppol2tp.c +* (l2tp_ppp.c). All version information wrt this file is located in l2tp_ppp.c * * License: * This program is free software; you can redistribute it and/or
net/Kconfig +1 -0
@@ -186,6 +186,7 @@ source "net/sctp/Kconfig" source "net/rds/Kconfig" source "net/tipc/Kconfig" source "net/atm/Kconfig" +source "net/l2tp/Kconfig" source "net/802/Kconfig" source "net/bridge/Kconfig" source "net/dsa/Kconfig"
net/Makefile +1 -1
@@ -40,7 +40,7 @@ obj-$(CONFIG_BT) += bluetooth/ obj-$(CONFIG_SUNRPC) += sunrpc/ obj-$(CONFIG_AF_RXRPC) += rxrpc/ obj-$(CONFIG_ATM) += atm/ -obj-$(CONFIG_PPPOL2TP) += l2tp/ +obj-$(CONFIG_L2TP) += l2tp/ obj-$(CONFIG_DECNET) += decnet/ obj-$(CONFIG_ECONET) += econet/ obj-$(CONFIG_PHONET) += phonet/
net/l2tp/Kconfig new file +28 -0
@@ -0,0 +1,28 @@ +# +# Layer Two Tunneling Protocol (L2TP) +# + +menuconfig L2TP + tristate "Layer Two Tunneling Protocol (L2TP)" + depends on INET + ---help--- + Layer Two Tunneling Protocol + + From RFC 2661 <http://www.ietf.org/rfc/rfc2661.txt>. + + L2TP facilitates the tunneling of packets across an + intervening network in a way that is as transparent as + possible to both end-users and applications. + + L2TP is often used to tunnel PPP traffic over IP + tunnels. One IP tunnel may carry thousands of individual PPP + connections. L2TP is also used as a VPN protocol, popular + with home workers to connect to their offices. + + The kernel component handles only L2TP data packets: a + userland daemon handles L2TP the control protocol (tunnel + and session setup). One such daemon is OpenL2TP + (http://openl2tp.org/). + + If you don't need L2TP, say N. To compile all L2TP code as + modules, choose M here.
net/l2tp/Makefile +4 -1
@@ -2,4 +2,7 @@ # Makefile for the L2TP. # -obj-$(CONFIG_PPPOL2TP) += pppol2tp.o +obj-$(CONFIG_L2TP) += l2tp_core.o + +# Build l2tp as modules if L2TP is M +obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_PPPOL2TP)) += l2tp_ppp.o
net/l2tp/l2tp_core.c new file +1227 -0
1,227 lines not on this page · raw message
net/l2tp/l2tp_core.h new file +254 -0
254 lines not on this page · raw message
net/l2tp/l2tp_ppp.c new file +1658 -0
1,442 lines not on this page · raw message
net/l2tp/pppol2tp.c deleted +0 -2680
2,680 lines not on this page · raw message
The rest of this diff is not shown. View the raw message.
Part of the diff is not shown here. View the raw message.
James Chapman
maintainerPATCH v4 3/14 ppp: Add ppp_dev_name() exported function
In reply to James Chapmanppp_dev_name() gives PPP users visibility of a ppp channel's device name. This can be used by L2TP drivers to dump the assigned PPP interface name.
--- drivers/net/ppp_generic.c | 19 +++++++++++++++++++ include/linux/ppp_channel.h | 3 +++ 2 files changed, 22 insertions(+), 0 deletions(-)
drivers/net/ppp_generic.c +19 -0
@@ -2163,6 +2163,24 @@ int ppp_unit_number(struct ppp_channel *chan) }/* +* Return the PPP device interface name of a channel. +*/ +char *ppp_dev_name (struct ppp_channel *chan) +{ +struct channel *pch = chan->ppp; +char *name =NULL ; + +if (pch) { +read_lock_bh (&pch->upl); +if (pch->ppp && pch->ppp->dev) + name = pch->ppp->dev->name; +read_unlock_bh (&pch->upl); + } +return name; +} + + +/* * Disconnect a channel from the generic layer. * This must be called in process context. */
@@ -2890,6 +2908,7 @@ EXPORT_SYMBOL(ppp_register_channel);EXPORT_SYMBOL (ppp_unregister_channel);EXPORT_SYMBOL (ppp_channel_index);EXPORT_SYMBOL (ppp_unit_number); +EXPORT_SYMBOL (ppp_dev_name);EXPORT_SYMBOL (ppp_input);EXPORT_SYMBOL (ppp_input_error);EXPORT_SYMBOL (ppp_output_wakeup);
include/linux/ppp_channel.h +3 -0
@@ -72,6 +72,9 @@ extern int ppp_channel_index(struct ppp_channel *);/* Get the unit number associated with a channel, or -1 if none */ extern int ppp_unit_number (struct ppp_channel *); +/* Get the device name associated with a channel, or NULL if none */ +extern char *ppp_dev_name (struct ppp_channel *); +/* * SMP locking notes: * The channel code must ensure that when it calls ppp_unregister_channel,
James Chapman
maintainerPATCH v4 4/14 l2tp: Add ppp device name to L2TP ppp session data
In reply to James ChapmanWhen dumping L2TP PPP sessions using /proc/net/pppol2tp, get the assigned PPP device name from PPP using ppp_dev_name().
--- net/l2tp/l2tp_ppp.c | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-)
net/l2tp/l2tp_ppp.c +4 -0
@@ -1465,6 +1465,7 @@ static void pppol2tp_seq_session_show(struct seq_file *m, void *v)struct l2tp_session *session = v;struct l2tp_tunnel *tunnel = session->tunnel;struct pppol2tp_session *ps =l2tp_session_priv (session); +struct pppox_sock *po =pppox_sk (ps->sock);u32 ip =0 ;u16 port =0 ;
@@ -1499,6 +1500,9 @@ static void pppol2tp_seq_session_show(struct seq_file *m, void *v) (unsigned long long )session->stats.rx_packets, (unsigned long long )session->stats.rx_bytes, (unsigned long long)session->stats.rx_errors); + +if (po) +seq_printf (m," interface %s\n" ,ppp_dev_name (&po->chan)); }static int pppol2tp_seq_show (struct seq_file *m,void *v)
James Chapman
maintainerPATCH v4 5/14 l2tp: Add L2TPv3 protocol support
In reply to James ChapmanThe L2TPv3 protocol changes the layout of the L2TP packet header. Tunnel and session ids change from 16-bit to 32-bit values, data sequence numbers change from 16-bit to 24-bit values and PPP-specific fields are moved into protocol-specific subheaders.
Although this patch introduces L2TPv3 protocol support, there are no userspace interfaces to create L2TPv3 sessions yet.
--- net/l2tp/Kconfig | 25 ++ net/l2tp/l2tp_core.c | 532 +++++++++++++++++++++++++++++++++++++------------- net/l2tp/l2tp_core.h | 54 ++++- net/l2tp/l2tp_ppp.c | 21 ++ 4 files changed, 484 insertions(+), 148 deletions(-)
net/l2tp/Kconfig +25 -0
@@ -19,6 +19,10 @@ menuconfig L2TP connections. L2TP is also used as a VPN protocol, popular with home workers to connect to their offices. + L2TPv3 allows other protocols as well as PPP to be carried + over L2TP tunnels. L2TPv3 is defined in RFC 3931 + <http://www.ietf.org/rfc/rfc3931.txt>. + The kernel component handles only L2TP data packets: a userland daemon handles L2TP the control protocol (tunnel and session setup). One such daemon is OpenL2TP
@@ -26,3 +30,24 @@ menuconfig L2TP If you don't need L2TP, say N. To compile all L2TP code as modules, choose M here. + +config L2TP_V3 + bool "L2TPv3 support (EXPERIMENTAL)" + depends on EXPERIMENTAL && L2TP + help + Layer Two Tunneling Protocol Version 3 + + From RFC 3931 <http://www.ietf.org/rfc/rfc3931.txt>. + + The Layer Two Tunneling Protocol (L2TP) provides a dynamic + mechanism for tunneling Layer 2 (L2) "circuits" across a + packet-oriented data network (e.g., over IP). L2TP, as + originally defined in RFC 2661, is a standard method for + tunneling Point-to-Point Protocol (PPP) [RFC1661] sessions. + L2TP has since been adopted for tunneling a number of other + L2 protocols, including ATM, Frame Relay, HDLC and even raw + ethernet frames. + + If you are connecting to L2TPv3 equipment, or you want to + tunnel raw ethernet frames using L2TP, say Y here. If + unsure, say N.
net/l2tp/l2tp_core.c +397 -135
757 lines not on this page · raw message
net/l2tp/l2tp_core.h +46 -8
130 lines not on this page · raw message
net/l2tp/l2tp_ppp.c +16 -5
@@ -670,7 +670,7 @@ static int pppol2tp_connect(struct socket *sock, struct sockaddr *uservaddr,/* Check that this session doesn't already exist */ error = -EEXIST ; - session =l2tp_session_find (tunnel, sp->pppol2tp.s_session); + session =l2tp_session_find (sock_net (sk), tunnel, sp->pppol2tp.s_session);if (session !=NULL ) goto end;
@@ -678,7 +678,6 @@ static int pppol2tp_connect(struct socket *sock, struct sockaddr *uservaddr,* headers. */ cfg.mtu = cfg.mru =1500 -PPPOL2TP_HEADER_OVERHEAD ; - cfg.hdr_len =PPPOL2TP_L2TP_HDR_SIZE_NOSEQ ; cfg.debug = tunnel->debug;/* Allocate and initialize a new session context. */
@@ -999,7 +998,7 @@ static int pppol2tp_tunnel_ioctl(struct l2tp_tunnel *tunnel,if (stats.session_id !=0 ) {/* resend to session ioctl handler */ struct l2tp_session *session = -l2tp_session_find (tunnel, stats.session_id); +l2tp_session_find (sock_net (sk), tunnel, stats.session_id);if (session !=NULL ) err =pppol2tp_session_ioctl (session, cmd, arg);else
@@ -1375,6 +1374,8 @@ end:/***************************************************************************** * /proc filesystem for debug +* Since the original pppol2tp driver provided /proc/net/pppol2tp for +* L2TPv2, we dump only L2TPv2 tunnels and sessions here. *****************************************************************************/ static unsigned int pppol2tp_net_id;
@@ -1391,14 +1392,24 @@ struct pppol2tp_seq_data {static void pppol2tp_next_tunnel (struct net *net,struct pppol2tp_seq_data *pd) { - pd->tunnel =l2tp_tunnel_find_nth (net, pd->tunnel_idx); - pd->tunnel_idx++; +for (;;) { + pd->tunnel =l2tp_tunnel_find_nth (net, pd->tunnel_idx); + pd->tunnel_idx++; + +if (pd->tunnel ==NULL ) +break ; + +/* Ignore L2TPv3 tunnels */ +if (pd->tunnel->version <3 ) +break ; + } }static void pppol2tp_next_session (struct net *net,struct pppol2tp_seq_data *pd) { pd->session =l2tp_session_find_nth (pd->tunnel, pd->session_idx); pd->session_idx++; +if (pd->session ==NULL ) { pd->session_idx =0 ;pppol2tp_next_tunnel (net, pd);
James Chapman
maintainerPATCH v4 6/14 l2tp: Update PPP-over-L2TP driver to work over L2TPv3
In reply to James ChapmanThis patch makes changes to the L2TP PPP code for L2TPv3.
The existing code has some assumptions about the L2TP header which are broken by L2TPv3. Also the sockaddr_pppol2tp structure of the original code is too small to support the increased size of the L2TPv3 tunnel and session id, so a new sockaddr_pppol2tpv3 structure is needed. In the socket calls, the size of this structure is used to tell if the operation is for L2TPv2 or L2TPv3.
--- include/linux/if_pppol2tp.h | 14 +++++ include/linux/if_pppox.h | 9 +++ net/l2tp/l2tp_ppp.c | 120 +++++++++++++++++++++++++++---------------- 3 files changed, 97 insertions(+), 46 deletions(-)
include/linux/if_pppol2tp.h +14 -0
@@ -35,6 +35,20 @@ struct pppol2tp_addr {__u16 d_tunnel, d_session;/* For sending outgoing packets */ }; +/* The L2TPv3 protocol changes tunnel and session ids from 16 to 32 +* bits. So we need a different sockaddr structure. +*/ +struct pppol2tpv3_addr { +pid_t pid;/* pid that owns the fd. +* 0 => current */ +int fd;/* FD of UDP or IP socket to use */ + +struct sockaddr_in addr;/* IP address and port to send to */ + +__u32 s_tunnel, s_session;/* For matching incoming packets */ +__u32 d_tunnel, d_session;/* For sending outgoing packets */ +}; +/* Socket options: * DEBUG - bitmask of debug message categories * SENDSEQ - 0 => don't send packets with sequence numbers
include/linux/if_pppox.h +9 -0
@@ -72,6 +72,15 @@ struct sockaddr_pppol2tp {struct pppol2tp_addr pppol2tp; }__attribute__ ((packed)); +/* The L2TPv3 protocol changes tunnel and session ids from 16 to 32 +* bits. So we need a different sockaddr structure. +*/ +struct sockaddr_pppol2tpv3 { +sa_family_t sa_family;/* address family, AF_PPPOX */ +unsigned int sa_protocol;/* protocol identifier */ +struct pppol2tpv3_addr pppol2tp; +} __attribute__ ((packed)); +/********************************************************************* * * ioctl interface for defining forwarding of connections
net/l2tp/l2tp_ppp.c +74 -46
196 lines not on this page · raw message
James Chapman
maintainerPATCH v4 7/14 l2tp: Add L2TPv3 IP encapsulation (no UDP) support
In reply to James ChapmanThis patch adds a new L2TPIP socket family and modifies the core to handle the case where there is no UDP header in the L2TP packet. L2TP/IP uses IP protocol 115. Since L2TP/UDP and L2TP/IP packets differ in layout, the datapath packet handling code needs changes too. Userspace uses an L2TPIP socket instead of a UDP socket when IP encapsulation is required.
We can't use raw sockets for this because the semantics of raw sockets don't lend themselves to the socket-per-tunnel model - we need to differentiate sockets between the same IP peers by L2TP tunnel ids.
--- include/linux/l2tp.h | 38 +++ net/l2tp/Kconfig | 17 + net/l2tp/Makefile | 1 net/l2tp/l2tp_core.c | 163 ++++++++---- net/l2tp/l2tp_core.h | 7 + net/l2tp/l2tp_ip.c | 679 ++++++++++++++++++++++++++++++++++++++++++++++++++ net/l2tp/l2tp_ppp.c | 7 - 7 files changed, 850 insertions(+), 62 deletions(-) create mode 100644 include/linux/l2tp.h create mode 100644 net/l2tp/l2tp_ip.c
include/linux/l2tp.h new file +38 -0
@@ -0,0 +1,38 @@ +/* +* L2TP-over-IP socket for L2TPv3. +* +* Author: James Chapman <[email protected]> +*/ + +#ifndef _LINUX_L2TP_H_ +#define _LINUX_L2TP_H_ + +#include <linux/types.h> +#ifdef __KERNEL__ +#include <linux/socket.h> +#include <linux/in.h> +#endif + +#define IPPROTO_L2TP 115 + +/** +* struct sockaddr_l2tpip - the sockaddr structure for L2TP-over-IP sockets +* @l2tp_family: address family number AF_L2TPIP. +* @l2tp_addr: protocol specific address information +* @l2tp_conn_id: connection id of tunnel +*/ +struct sockaddr_l2tpip { +/* The first fields must match struct sockaddr_in */ +sa_family_t l2tp_family;/* AF_INET */ +__be16 l2tp_unused;/* INET port number (unused) */ +struct in_addr l2tp_addr;/* Internet address */ + +__u32 l2tp_conn_id;/* Connection ID of tunnel */ + +/* Pad to size of `struct sockaddr'. */ +unsigned char __pad[sizeof (struct sockaddr ) -sizeof (sa_family_t) - +sizeof (__be16) -sizeof (struct in_addr ) - +sizeof (__u32)]; +}; + +#endif
net/l2tp/Kconfig +17 -0
@@ -51,3 +51,20 @@ config L2TP_V3 If you are connecting to L2TPv3 equipment, or you want to tunnel raw ethernet frames using L2TP, say Y here. If unsure, say N. + +config L2TP_IP + tristate "L2TP IP encapsulation for L2TPv3" + depends on L2TP_V3 + help + Support for L2TP-over-IP socket family. + + The L2TPv3 protocol defines two possible encapsulations for + L2TP frames, namely UDP and plain IP (without UDP). This + driver provides a new L2TPIP socket family with which + userspace L2TPv3 daemons may create L2TP/IP tunnel sockets + when UDP encapsulation is not required. When L2TP is carried + in IP packets, it used IP protocol number 115, so this port + must be enabled in firewalls. + + To compile this driver as a module, choose M here. The module + will be called l2tp_ip.
net/l2tp/Makefile +1 -0
@@ -6,3 +6,4 @@ obj-$(CONFIG_L2TP) += l2tp_core.o # Build l2tp as modules if L2TP is M obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_PPPOL2TP)) += l2tp_ppp.o +obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_IP)) += l2tp_ip.o
net/l2tp/l2tp_core.c +103 -60
262 lines not on this page · raw message
net/l2tp/l2tp_core.h +7 -0
@@ -48,6 +48,11 @@ enum l2tp_l2spec_type { L2TP_L2SPECTYPE_DEFAULT, }; +enum l2tp_encap_type { +L2TP_ENCAPTYPE_UDP , +L2TP_ENCAPTYPE_IP , +}; +struct sk_buff ;struct l2tp_stats {
@@ -155,6 +160,7 @@ struct l2tp_session {struct l2tp_tunnel_cfg {int debug;/* bitmask of debug message * categories */ +enum l2tp_encap_type encap; };struct l2tp_tunnel {
@@ -170,6 +176,7 @@ struct l2tp_tunnel {char name[20 ];/* for logging */ int debug;/* bitmask of debug message * categories */ +enum l2tp_encap_type encap;struct l2tp_stats stats;struct list_head list;/* Keep a list of all tunnels */
net/l2tp/l2tp_ip.c new file +679 -0
679 lines not on this page · raw message
net/l2tp/l2tp_ppp.c +5 -2
@@ -305,6 +305,7 @@ static int pppol2tp_sendmsg(struct kiocb *iocb, struct socket *sock, struct msghstruct l2tp_session *session;struct l2tp_tunnel *tunnel;struct pppol2tp_session *ps; +int uhlen; error = -ENOTCONN ;if (sock_flag (sk,SOCK_DEAD ) || !(sk->sk_state &PPPOX_CONNECTED ))
@@ -321,10 +322,12 @@ static int pppol2tp_sendmsg(struct kiocb *iocb, struct socket *sock, struct msghif (tunnel ==NULL ) goto error_put_sess; + uhlen = (tunnel->encap ==L2TP_ENCAPTYPE_UDP ) ?sizeof (struct udphdr ) :0 ; +/* Allocate a socket buffer */ error = -ENOMEM ; skb =sock_wmalloc (sk,NET_SKB_PAD +sizeof (struct iphdr ) + -sizeof (struct udphdr ) + session->hdr_len + + uhlen + session->hdr_len +sizeof (ppph) + total_len,0 ,GFP_KERNEL );if (!skb)
@@ -335,7 +338,7 @@ static int pppol2tp_sendmsg(struct kiocb *iocb, struct socket *sock, struct msghskb_reset_network_header (skb);skb_reserve (skb,sizeof (struct iphdr ));skb_reset_transport_header (skb); -skb_reserve (skb,sizeof (struct udphdr )); +skb_reserve (skb, uhlen);/* Add PPP header */ skb->data[0 ] = ppph[0 ];
James Chapman
maintainerPATCH v4 8/14 netlink: Export genl_lock() API for use by modules
In reply to James ChapmanThis lets kernel modules which use genl netlink APIs serialize netlink processing.
--- include/linux/genetlink.h | 8 ++++++++ net/netlink/genetlink.c | 6 ++++-- 2 files changed, 12 insertions(+), 2 deletions(-)
include/linux/genetlink.h +8 -0
@@ -80,4 +80,12 @@ enum {#define CTRL_ATTR_MCAST_GRP_MAX (__CTRL_ATTR_MCAST_GRP_MAX - 1) +#ifdef __KERNEL__ + +/* All generic netlink requests are serialized by a global lock. */ +extern void genl_lock (void ); +extern void genl_unlock (void ); + +#endif /* __KERNEL__ */ +#endif /* __LINUX_GENERIC_NETLINK_H */
net/netlink/genetlink.c +4 -2
@@ -20,15 +20,17 @@static DEFINE_MUTEX (genl_mutex);/* serialization of message processing */ -static inline void genl_lock (void ) +void genl_lock (void ) {mutex_lock (&genl_mutex); } +EXPORT_SYMBOL (genl_lock); -static inline void genl_unlock (void ) +void genl_unlock (void ) {mutex_unlock (&genl_mutex); } +EXPORT_SYMBOL (genl_unlock);#define GENL_FAM_TAB_SIZE 16#define GENL_FAM_TAB_MASK (GENL_FAM_TAB_SIZE - 1)
James Chapman
maintainerPATCH v4 9/14 l2tp: Add netlink control API for L2TP
In reply to James ChapmanIn L2TPv3, we need to create/delete/modify/query L2TP tunnel and session contexts. The number of parameters is significant. So let's use netlink. Userspace uses this API to control L2TP tunnel/session contexts in the kernel.
The previous pppol2tp driver was managed using [gs]etsockopt(). This API is retained for backwards compatibility. Unlike L2TPv2 which carries only PPP frames, L2TPv3 can carry raw ethernet frames or other frame types and these do not always have an associated socket family. Therefore, we need a way to use L2TP sessions that doesn't require a socket type for each supported frame type. Hence netlink is used.
--- include/linux/l2tp.h | 125 +++++++ net/l2tp/Makefile | 1 net/l2tp/l2tp_core.c | 61 +++ net/l2tp/l2tp_core.h | 34 +- net/l2tp/l2tp_netlink.c | 830 +++++++++++++++++++++++++++++++++++++++++++++++ net/l2tp/l2tp_ppp.c | 162 ++++++++- 6 files changed, 1169 insertions(+), 44 deletions(-) create mode 100644 net/l2tp/l2tp_netlink.c
include/linux/l2tp.h +125 -0
@@ -11,6 +11,8 @@#ifdef __KERNEL__#include <linux/socket.h> #include <linux/in.h> +#else +#include <netinet/in.h> #endif #define IPPROTO_L2TP 115
@@ -21,6 +23,7 @@* @l2tp_addr: protocol specific address information * @l2tp_conn_id: connection id of tunnel */ +#define __SOCK_SIZE__ 16/* sizeof(struct sockaddr) */ struct sockaddr_l2tpip {/* The first fields must match struct sockaddr_in */ sa_family_t l2tp_family;/* AF_INET */
@@ -35,4 +38,126 @@ struct sockaddr_l2tpip { sizeof(__u32)]; }; +/***************************************************************************** +* NETLINK_GENERIC netlink family. +*****************************************************************************/ + +/* +* Commands. +* Valid TLVs of each command are:- +* TUNNEL_CREATE - CONN_ID, pw_type, netns, ifname, ipinfo, udpinfo, udpcsum, vlanid +* TUNNEL_DELETE - CONN_ID +* TUNNEL_MODIFY - CONN_ID, udpcsum +* TUNNEL_GETSTATS - CONN_ID, (stats) +* TUNNEL_GET - CONN_ID, (...) +* SESSION_CREATE - SESSION_ID, PW_TYPE, offset, data_seq, cookie, peer_cookie, offset, l2spec +* SESSION_DELETE - SESSION_ID +* SESSION_MODIFY - SESSION_ID, data_seq +* SESSION_GET - SESSION_ID, (...) +* SESSION_GETSTATS - SESSION_ID, (stats) +* +*/ +enum { +L2TP_CMD_NOOP , +L2TP_CMD_TUNNEL_CREATE , +L2TP_CMD_TUNNEL_DELETE , +L2TP_CMD_TUNNEL_MODIFY , +L2TP_CMD_TUNNEL_GET , +L2TP_CMD_SESSION_CREATE , +L2TP_CMD_SESSION_DELETE , +L2TP_CMD_SESSION_MODIFY , +L2TP_CMD_SESSION_GET , + __L2TP_CMD_MAX, +}; + +#define L2TP_CMD_MAX (__L2TP_CMD_MAX - 1) + +/* +* ATTR types defined for L2TP +*/ +enum { +L2TP_ATTR_NONE ,/* no data */ +L2TP_ATTR_PW_TYPE ,/* u16, enum l2tp_pwtype */ +L2TP_ATTR_ENCAP_TYPE ,/* u16, enum l2tp_encap_type */ +L2TP_ATTR_OFFSET ,/* u16 */ +L2TP_ATTR_DATA_SEQ ,/* u16 */ +L2TP_ATTR_L2SPEC_TYPE ,/* u8, enum l2tp_l2spec_type */ +L2TP_ATTR_L2SPEC_LEN ,/* u8, enum l2tp_l2spec_type */ +L2TP_ATTR_PROTO_VERSION ,/* u8 */ +L2TP_ATTR_IFNAME ,/* string */ +L2TP_ATTR_CONN_ID ,/* u32 */ +L2TP_ATTR_PEER_CONN_ID ,/* u32 */ +L2TP_ATTR_SESSION_ID ,/* u32 */ +L2TP_ATTR_PEER_SESSION_ID ,/* u32 */ +L2TP_ATTR_UDP_CSUM ,/* u8 */ +L2TP_ATTR_VLAN_ID ,/* u16 */ +L2TP_ATTR_COOKIE ,/* 0, 4 or 8 bytes */ +L2TP_ATTR_PEER_COOKIE ,/* 0, 4 or 8 bytes */ +L2TP_ATTR_DEBUG ,/* u32 */ +L2TP_ATTR_RECV_SEQ ,/* u8 */ +L2TP_ATTR_SEND_SEQ ,/* u8 */ +L2TP_ATTR_LNS_MODE ,/* u8 */ +L2TP_ATTR_USING_IPSEC ,/* u8 */ +L2TP_ATTR_RECV_TIMEOUT ,/* msec */ +L2TP_ATTR_FD ,/* int */ +L2TP_ATTR_IP_SADDR ,/* u32 */ +L2TP_ATTR_IP_DADDR ,/* u32 */ +L2TP_ATTR_UDP_SPORT ,/* u16 */ +L2TP_ATTR_UDP_DPORT ,/* u16 */ +L2TP_ATTR_MTU ,/* u16 */ +L2TP_ATTR_MRU ,/* u16 */ +L2TP_ATTR_STATS ,/* nested */ + __L2TP_ATTR_MAX, +}; + +#define L2TP_ATTR_MAX (__L2TP_ATTR_MAX - 1) + +/* Nested in L2TP_ATTR_STATS */ +enum { +L2TP_ATTR_STATS_NONE ,/* no data */ +L2TP_ATTR_TX_PACKETS ,/* u64 */ +L2TP_ATTR_TX_BYTES ,/* u64 */ +L2TP_ATTR_TX_ERRORS ,/* u64 */ +L2TP_ATTR_RX_PACKETS ,/* u64 */ +L2TP_ATTR_RX_BYTES ,/* u64 */ +L2TP_ATTR_RX_SEQ_DISCARDS ,/* u64 */ +L2TP_ATTR_RX_OOS_PACKETS ,/* u64 */ +L2TP_ATTR_RX_ERRORS ,/* u64 */ + __L2TP_ATTR_STATS_MAX, +}; + +#define L2TP_ATTR_STATS_MAX (__L2TP_ATTR_STATS_MAX - 1) + +enum l2tp_pwtype { +L2TP_PWTYPE_NONE =0x0000 , +L2TP_PWTYPE_ETH_VLAN =0x0004 , +L2TP_PWTYPE_ETH =0x0005 , +L2TP_PWTYPE_PPP =0x0007 , +L2TP_PWTYPE_PPP_AC =0x0008 , +L2TP_PWTYPE_IP =0x000b , + __L2TP_PWTYPE_MAX +}; + +enum l2tp_l2spec_type { +L2TP_L2SPECTYPE_NONE , +L2TP_L2SPECTYPE_DEFAULT , +}; + +enum l2tp_encap_type { +L2TP_ENCAPTYPE_UDP , +L2TP_ENCAPTYPE_IP , +}; + +enum l2tp_seqmode { +L2TP_SEQ_NONE =0 , +L2TP_SEQ_IP =1 , +L2TP_SEQ_ALL =2 , +}; + +/* +* NETLINK_GENERIC related info +*/ +#define L2TP_GENL_NAME "l2tp" +#define L2TP_GENL_VERSION 0x1 +#endif
net/l2tp/Makefile +1 -0
@@ -7,3 +7,4 @@ obj-$(CONFIG_L2TP) += l2tp_core.o # Build l2tp as modules if L2TP is M obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_PPPOL2TP)) += l2tp_ppp.o obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_IP)) += l2tp_ip.o +obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_V3)) += l2tp_netlink.o
net/l2tp/l2tp_core.c +60 -1
91 lines not on this page · raw message
net/l2tp/l2tp_core.h +14 -20
@@ -33,26 +33,6 @@ enum { L2TP_MSG_DATA = (1 << 3), /* data packets */ }; -enum l2tp_pwtype { -L2TP_PWTYPE_NONE =0x0000 , -L2TP_PWTYPE_ETH_VLAN =0x0004 , -L2TP_PWTYPE_ETH =0x0005 , -L2TP_PWTYPE_PPP =0x0007 , -L2TP_PWTYPE_PPP_AC =0x0008 , -L2TP_PWTYPE_IP =0x000b , - __L2TP_PWTYPE_MAX -}; - -enum l2tp_l2spec_type { -L2TP_L2SPECTYPE_NONE , -L2TP_L2SPECTYPE_DEFAULT , -}; - -enum l2tp_encap_type { -L2TP_ENCAPTYPE_UDP , -L2TP_ENCAPTYPE_IP , -}; -struct sk_buff ;struct l2tp_stats {
@@ -87,6 +67,7 @@ struct l2tp_session_cfg {* control of LNS. */ int debug;/* bitmask of debug message * categories */ +u16 vlan_id;/* VLAN pseudowire only */ u16 offset;/* offset to payload */ u16 l2specific_len;/* Layer 2 specific length */ u16 l2specific_type;/* Layer 2 specific type */
@@ -98,6 +79,7 @@ struct l2tp_session_cfg {* (in jiffies) */ int mtu;int mru; +char *ifname; };struct l2tp_session {
@@ -124,6 +106,7 @@ struct l2tp_session {atomic_t ref_count;char name[32 ];/* for logging */ +char ifname[IFNAMSIZ ]; unsigned data_seq:2; /* data sequencing level* 0 => none, 1 => IP only, * 2 => all
@@ -192,6 +175,11 @@ struct l2tp_tunnel {uint8_t priv[0 ];/* private data */ }; +struct l2tp_nl_cmd_ops { +int (*session_create)(struct net *net,u32 tunnel_id,u32 session_id,u32 peer_session_id,struct l2tp_session_cfg *cfg); +int (*session_delete)(struct l2tp_session *session); +}; +static inline void *l2tp_tunnel_priv (struct l2tp_tunnel *tunnel) {return &tunnel->priv[0 ];
@@ -224,11 +212,14 @@ out:extern struct l2tp_session *l2tp_session_find (struct net *net,struct l2tp_tunnel *tunnel,u32 session_id);extern struct l2tp_session *l2tp_session_find_nth (struct l2tp_tunnel *tunnel,int nth); +extern struct l2tp_session *l2tp_session_find_by_ifname (struct net *net,char *ifname);extern struct l2tp_tunnel *l2tp_tunnel_find (struct net *net,u32 tunnel_id);extern struct l2tp_tunnel *l2tp_tunnel_find_nth (struct net *net,int nth);extern int l2tp_tunnel_create (struct net *net,int fd,int version,u32 tunnel_id,u32 peer_tunnel_id,struct l2tp_tunnel_cfg *cfg,struct l2tp_tunnel **tunnelp); +extern int l2tp_tunnel_delete (struct l2tp_tunnel *tunnel);extern struct l2tp_session *l2tp_session_create (int priv_size,struct l2tp_tunnel *tunnel,u32 session_id,u32 peer_session_id,struct l2tp_session_cfg *cfg); +extern int l2tp_session_delete (struct l2tp_session *session);extern void l2tp_tunnel_free (struct l2tp_tunnel *tunnel);extern void l2tp_session_free (struct l2tp_session *session);extern void l2tp_recv_common (struct l2tp_session *session,struct sk_buff *skb,unsigned char *ptr,unsigned char *optr,u16 hdrflags,int length,int (*payload_hook)(struct sk_buff *skb));
@@ -241,6 +232,9 @@ extern void l2tp_tunnel_destruct(struct sock *sk);extern void l2tp_tunnel_closeall (struct l2tp_tunnel *tunnel);extern void l2tp_session_set_header_len (struct l2tp_session *session,int version); +extern int l2tp_nl_register_ops (enum l2tp_pwtype pw_type,const struct l2tp_nl_cmd_ops *ops); +extern void l2tp_nl_unregister_ops (enum l2tp_pwtype pw_type); +/* Tunnel reference counts. Incremented per session that is added to * the tunnel. */
net/l2tp/l2tp_netlink.c new file +830 -0
830 lines not on this page · raw message
net/l2tp/l2tp_ppp.c +139 -23
219 lines not on this page · raw message
James Chapman
maintainerPATCH v4 10/14 l2tp: Convert rwlock to RCU
In reply to James ChapmanReader/write locks are discouraged because they are slower than spin locks. So this patch converts the rwlocks used in the per_net structs to rcu.
--- net/l2tp/l2tp_core.c | 78 +++++++++++++++++++++++++++----------------------- 1 files changed, 42 insertions(+), 36 deletions(-)
net/l2tp/l2tp_core.c +42 -36
@@ -21,6 +21,7 @@#include <linux/module.h> #include <linux/string.h> #include <linux/list.h> +#include <linux/rculist.h> #include <linux/uaccess.h> #include <linux/kernel.h>
@@ -105,9 +106,9 @@ static atomic_t l2tp_session_count;static unsigned int l2tp_net_id;struct l2tp_net {struct list_head l2tp_tunnel_list; -rwlock_t l2tp_tunnel_list_lock; +spinlock_t l2tp_tunnel_list_lock;struct hlist_head l2tp_session_hlist[L2TP_HASH_SIZE_2 ]; -rwlock_t l2tp_session_hlist_lock; +spinlock_t l2tp_session_hlist_lock; };static inline struct l2tp_net *l2tp_pernet (struct net *net)
@@ -139,14 +140,14 @@ static struct l2tp_session *l2tp_session_find_2(struct net *net, u32 session_id)struct l2tp_session *session;struct hlist_node *walk; -read_lock_bh (&pn->l2tp_session_hlist_lock); -hlist_for_each_entry (session, walk, session_list, global_hlist) { +rcu_read_lock_bh (); +hlist_for_each_entry_rcu (session, walk, session_list, global_hlist) {if (session->session_id == session_id) { -read_unlock_bh (&pn->l2tp_session_hlist_lock); +rcu_read_unlock_bh ();return session; } } -read_unlock_bh (&pn->l2tp_session_hlist_lock); +rcu_read_unlock_bh ();return NULL ; }
@@ -225,17 +226,17 @@ struct l2tp_session *l2tp_session_find_by_ifname(struct net *net, char *ifname)struct hlist_node *walk;struct l2tp_session *session; -read_lock_bh (&pn->l2tp_session_hlist_lock); +rcu_read_lock_bh ();for (hash =0 ; hash <L2TP_HASH_SIZE_2 ; hash++) { -hlist_for_each_entry (session, walk, &pn->l2tp_session_hlist[hash], global_hlist) { +hlist_for_each_entry_rcu (session, walk, &pn->l2tp_session_hlist[hash], global_hlist) {if (!strcmp (session->ifname, ifname)) { -read_unlock_bh (&pn->l2tp_session_hlist_lock); +rcu_read_unlock_bh ();return session; } } } -read_unlock_bh (&pn->l2tp_session_hlist_lock); +rcu_read_unlock_bh ();return NULL ; }
@@ -248,14 +249,14 @@ struct l2tp_tunnel *l2tp_tunnel_find(struct net *net, u32 tunnel_id)struct l2tp_tunnel *tunnel;struct l2tp_net *pn =l2tp_pernet (net); -read_lock_bh (&pn->l2tp_tunnel_list_lock); -list_for_each_entry (tunnel, &pn->l2tp_tunnel_list, list) { +rcu_read_lock_bh (); +list_for_each_entry_rcu (tunnel, &pn->l2tp_tunnel_list, list) {if (tunnel->tunnel_id == tunnel_id) { -read_unlock_bh (&pn->l2tp_tunnel_list_lock); +rcu_read_unlock_bh ();return tunnel; } } -read_unlock_bh (&pn->l2tp_tunnel_list_lock); +rcu_read_unlock_bh ();return NULL ; }
@@ -267,15 +268,15 @@ struct l2tp_tunnel *l2tp_tunnel_find_nth(struct net *net, int nth)struct l2tp_tunnel *tunnel;int count =0 ; -read_lock_bh (&pn->l2tp_tunnel_list_lock); -list_for_each_entry (tunnel, &pn->l2tp_tunnel_list, list) { +rcu_read_lock_bh (); +list_for_each_entry_rcu (tunnel, &pn->l2tp_tunnel_list, list) {if (++count > nth) { -read_unlock_bh (&pn->l2tp_tunnel_list_lock); +rcu_read_unlock_bh ();return tunnel; } } -read_unlock_bh (&pn->l2tp_tunnel_list_lock); +rcu_read_unlock_bh ();return NULL ; }
@@ -1167,9 +1168,10 @@ again:if (tunnel->version !=L2TP_HDR_VER_2 ) {struct l2tp_net *pn =l2tp_pernet (tunnel->l2tp_net); -write_lock_bh (&pn->l2tp_session_hlist_lock); -hlist_del_init (&session->global_hlist); -write_unlock_bh (&pn->l2tp_session_hlist_lock); +spin_lock_bh (&pn->l2tp_session_hlist_lock); +hlist_del_init_rcu (&session->global_hlist); +spin_unlock_bh (&pn->l2tp_session_hlist_lock); +synchronize_rcu (); }if (session->session_close !=NULL )
@@ -1206,9 +1208,10 @@ void l2tp_tunnel_free(struct l2tp_tunnel *tunnel) "%s: free...\n", tunnel->name);/* Remove from tunnel list */ -write_lock_bh (&pn->l2tp_tunnel_list_lock); -list_del_init (&tunnel->list); -write_unlock_bh (&pn->l2tp_tunnel_list_lock); +spin_lock_bh (&pn->l2tp_tunnel_list_lock); +list_del_rcu (&tunnel->list); +spin_unlock_bh (&pn->l2tp_tunnel_list_lock); +synchronize_rcu ();atomic_dec (&l2tp_tunnel_count);kfree (tunnel);
@@ -1310,9 +1313,10 @@ int l2tp_tunnel_create(struct net *net, int fd, int version, u32 tunnel_id, u32/* Add tunnel to our list */ INIT_LIST_HEAD (&tunnel->list); -write_lock_bh (&pn->l2tp_tunnel_list_lock); -list_add (&tunnel->list, &pn->l2tp_tunnel_list); -write_unlock_bh (&pn->l2tp_tunnel_list_lock); +spin_lock_bh (&pn->l2tp_tunnel_list_lock); +list_add_rcu (&tunnel->list, &pn->l2tp_tunnel_list); +spin_unlock_bh (&pn->l2tp_tunnel_list_lock); +synchronize_rcu ();atomic_inc (&l2tp_tunnel_count);/* Bump the reference count. The tunnel context is deleted
@@ -1370,9 +1374,10 @@ void l2tp_session_free(struct l2tp_session *session)if (tunnel->version !=L2TP_HDR_VER_2 ) {struct l2tp_net *pn =l2tp_pernet (tunnel->l2tp_net); -write_lock_bh (&pn->l2tp_session_hlist_lock); -hlist_del_init (&session->global_hlist); -write_unlock_bh (&pn->l2tp_session_hlist_lock); +spin_lock_bh (&pn->l2tp_session_hlist_lock); +hlist_del_init_rcu (&session->global_hlist); +spin_unlock_bh (&pn->l2tp_session_hlist_lock); +synchronize_rcu (); }if (session->session_id !=0 )
@@ -1494,10 +1499,11 @@ struct l2tp_session *l2tp_session_create(int priv_size, struct l2tp_tunnel *tunnif (tunnel->version !=L2TP_HDR_VER_2 ) {struct l2tp_net *pn =l2tp_pernet (tunnel->l2tp_net); -write_lock_bh (&pn->l2tp_session_hlist_lock); -hlist_add_head (&session->global_hlist, -l2tp_session_id_hash_2 (pn, session_id)); -write_unlock_bh (&pn->l2tp_session_hlist_lock); +spin_lock_bh (&pn->l2tp_session_hlist_lock); +hlist_add_head_rcu (&session->global_hlist, +l2tp_session_id_hash_2 (pn, session_id)); +spin_unlock_bh (&pn->l2tp_session_hlist_lock); +synchronize_rcu (); }/* Ignore management session in session count value */
@@ -1524,12 +1530,12 @@ static __net_init int l2tp_init_net(struct net *net)return -ENOMEM ;INIT_LIST_HEAD (&pn->l2tp_tunnel_list); -rwlock_init (&pn->l2tp_tunnel_list_lock); +spin_lock_init (&pn->l2tp_tunnel_list_lock);for (hash =0 ; hash <L2TP_HASH_SIZE_2 ; hash++)INIT_HLIST_HEAD (&pn->l2tp_session_hlist[hash]); -rwlock_init (&pn->l2tp_session_hlist_lock); +spin_lock_init (&pn->l2tp_session_hlist_lock); err =net_assign_generic (net, l2tp_net_id, pn);if (err)
Re: [PATCH net-next-2.6 v4 10/14] l2tp: Convert rwlock to RCU
Quoted 14 lines · James Chapman
Reader/write locks are discouraged because they are slower than spin locks. So this patch converts the rwlocks used in the
per_netstructs to rcu.Signed-off-by James Chapman <[email protected]>static inline struct
l2tp_net*l2tp_pernet(struct net *net)(quoted diff) +1
-2@@ -139,14 +140,14 @@ static struct l2tp_session *l2tp_session_find_2(struct net *net, u32 session_id) struct l2tp_session *session; struct hlist_node *walk; - read_lock_bh(&pn->l2tp_session_hlist_lock); - hlist_for_each_entry(session, walk, session_list, global_hlist) { + rcu_read_lock_bh();
Review static struct l2tp_session *l2tp_session_find_2(struct net *net, u32 session_id) · line 151
Quoted 10 lines
(quoted diff) +3
-2+ hlist_for_each_entry_rcu(session, walk, session_list, global_hlist) { if (session->session_id == session_id) { - read_unlock_bh(&pn->l2tp_session_hlist_lock); + rcu_read_unlock_bh(); return session; } } - read_unlock_bh(&pn->l2tp_session_hlist_lock); + rcu_read_unlock_bh();
Hi James
I started a while ago patching l2tp but I wont be able to finish and test the thing...
There is a fundamental problem with this kind of construct :
(this was wrong even better your RCU conversion)
rcu_read_lock_bh()
hlist_for_each_entry_rcu(session, walk, session_list, global_hlist) {
if (session->session_id == session_id) {
rcu_read_unlock_bh();
return session;
}
}rcu_read_unlock_bh();
While the lookup _is_ protected, the result is not.
As soon as you call rcu_read_unlock_bh(); and before the "return session;", current thread could be preempted and an other thread frees session under first thread. Unexpected things can then happen.
Therefore, you need either to :
1) Take a refcount on session (or tunnel) before the return
2) Or move the rcu_read_lock_bh()/rcu_read_unlock_bh() at callers.
3) Or all callers use a stronger lock. But then, why use RCU ;)
Here is a preliminary patch, obviously not finished, nor compiled, nor tested, to give possible ways to handle this problem.
(I added the ref parameter to make sure to change function signatures, maybe its not necessary and we should always take references)
Thanks
net/l2tp/l2tp_core.c | 25 ++++++++++++++----------- net/l2tp/l2tp_core.h | 6 +++--- net/l2tp/l2tp_debugfs.c | 2 +- net/l2tp/l2tp_eth.c | 4 ++-- net/l2tp/l2tp_ip.c | 8 +++++--- net/l2tp/l2tp_netlink.c | 26 +++++++++++++------------- 6 files changed, 38 insertions(+), 33 deletions(-)
net/l2tp/l2tp_core.c +14 -11
@@ -132,7 +132,7 @@ l2tp_session_id_hash_2(struct l2tp_net *pn, u32 session_id)/* Lookup a session by id in the global session list */ -static struct l2tp_session *l2tp_session_find_2 (struct net *net,u32 session_id) +static struct l2tp_session *l2tp_session_find_2 (struct net *net,u32 session_id,int ref) {struct l2tp_net *pn =l2tp_pernet (net); struct hlist_head *session_list =
@@ -143,6 +143,8 @@ static struct l2tp_session *l2tp_session_find_2(struct net *net, u32 session_id)rcu_read_lock_bh ();hlist_for_each_entry_rcu (session, walk, session_list, global_hlist) {if (session->session_id == session_id) { +if (ref) +l2tp_session_inc_refcount (session);rcu_read_unlock_bh ();return session; }
@@ -166,7 +168,7 @@ l2tp_session_id_hash(struct l2tp_tunnel *tunnel, u32 session_id)/* Lookup a session by id */ -struct l2tp_session *l2tp_session_find (struct net *net,struct l2tp_tunnel *tunnel,u32 session_id) +struct l2tp_session *l2tp_session_find (struct net *net,struct l2tp_tunnel *tunnel,u32 session_id,int ref) {struct hlist_head *session_list;struct l2tp_session *session;
@@ -177,12 +179,14 @@ struct l2tp_session *l2tp_session_find(struct net *net, struct l2tp_tunnel *tunn* tunnel. */ if (tunnel ==NULL ) -return l2tp_session_find_2 (net, session_id); +return l2tp_session_find_2 (net, session_id, ref); session_list =l2tp_session_id_hash (tunnel, session_id);read_lock_bh (&tunnel->hlist_lock);hlist_for_each_entry (session, walk, session_list, hlist) {if (session->session_id == session_id) { +if (ref) +l2tp_session_inc_refcount (session);read_unlock_bh (&tunnel->hlist_lock);return session; }
@@ -193,7 +197,7 @@ struct l2tp_session *l2tp_session_find(struct net *net, struct l2tp_tunnel *tunn }EXPORT_SYMBOL_GPL (l2tp_session_find); -struct l2tp_session *l2tp_session_find_nth (struct l2tp_tunnel *tunnel,int nth) +struct l2tp_session *l2tp_session_find_nth (struct l2tp_tunnel *tunnel,int nth,int ref) {int hash;struct hlist_node *walk;
@@ -204,6 +208,8 @@ struct l2tp_session *l2tp_session_find_nth(struct l2tp_tunnel *tunnel, int nth)for (hash =0 ; hash <L2TP_HASH_SIZE ; hash++) {hlist_for_each_entry (session, walk, &tunnel->session_hlist[hash], hlist) {if (++count > nth) { +if (ref) +l2tp_session_inc_refcount (session);read_unlock_bh (&tunnel->hlist_lock);return session; }
@@ -244,7 +250,7 @@ EXPORT_SYMBOL_GPL(l2tp_session_find_by_ifname);/* Lookup a tunnel by id */ -struct l2tp_tunnel *l2tp_tunnel_find (struct net *net,u32 tunnel_id) +struct l2tp_tunnel *l2tp_tunnel_find (struct net *net,u32 tunnel_id,int ref) {struct l2tp_tunnel *tunnel;struct l2tp_net *pn =l2tp_pernet (net);
@@ -252,6 +258,8 @@ struct l2tp_tunnel *l2tp_tunnel_find(struct net *net, u32 tunnel_id)rcu_read_lock_bh ();list_for_each_entry_rcu (tunnel, &pn->l2tp_tunnel_list, list) {if (tunnel->tunnel_id == tunnel_id) { +if (ref) +l2tp_tunnel_inc_refcount (tunnel);rcu_read_unlock_bh ();return tunnel; }
@@ -500,11 +508,6 @@ void l2tp_recv_common(struct l2tp_session *session, struct sk_buff *skb,int offset;u32 ns, nr; -/* The ref count is increased since we now hold a pointer to -* the session. Take care to decrement the refcnt when exiting -* this function from now on... -*/ -l2tp_session_inc_refcount (session);if (session->ref) (*session->ref)(session);
@@ -785,7 +788,7 @@ int l2tp_udp_recv_core(struct l2tp_tunnel *tunnel, struct sk_buff *skb, }/* Find the session context */ - session =l2tp_session_find (tunnel->l2tp_net, tunnel, session_id); + session =l2tp_session_find (tunnel->l2tp_net, tunnel, session_id,1 );if (!session || !session->recv_skb) {/* Not found? Pass to userspace to deal with */ PRINTK(tunnel->debug, L2TP_MSG_DATA, KERN_INFO,
net/l2tp/l2tp_core.h +3 -3
@@ -221,10 +221,10 @@ out:return tunnel; } -extern struct l2tp_session *l2tp_session_find (struct net *net,struct l2tp_tunnel *tunnel,u32 session_id); -extern struct l2tp_session *l2tp_session_find_nth (struct l2tp_tunnel *tunnel,int nth); +extern struct l2tp_session *l2tp_session_find (struct net *net,struct l2tp_tunnel *tunnel,u32 session_id,int ref); +extern struct l2tp_session *l2tp_session_find_nth (struct l2tp_tunnel *tunnel,int nth,int ref);extern struct l2tp_session *l2tp_session_find_by_ifname (struct net *net,char *ifname); -extern struct l2tp_tunnel *l2tp_tunnel_find (struct net *net,u32 tunnel_id); +extern struct l2tp_tunnel *l2tp_tunnel_find (struct net *net,u32 tunnel_id,int ref);extern struct l2tp_tunnel *l2tp_tunnel_find_nth (struct net *net,int nth);extern int l2tp_tunnel_create (struct net *net,int fd,int version,u32 tunnel_id,u32 peer_tunnel_id,struct l2tp_tunnel_cfg *cfg,struct l2tp_tunnel **tunnelp);
net/l2tp/l2tp_debugfs.c +1 -1
@@ -51,7 +51,7 @@ static void l2tp_dfs_next_tunnel(struct l2tp_dfs_seq_data *pd)static void l2tp_dfs_next_session (struct l2tp_dfs_seq_data *pd) { - pd->session =l2tp_session_find_nth (pd->tunnel, pd->session_idx); + pd->session =l2tp_session_find_nth (pd->tunnel, pd->session_idx,0 ); pd->session_idx++;if (pd->session ==NULL ) {
net/l2tp/l2tp_eth.c +2 -2
@@ -194,13 +194,13 @@ static int l2tp_eth_create(struct net *net, u32 tunnel_id, u32 session_id, u32 pint rc;struct l2tp_eth_net *pn; - tunnel =l2tp_tunnel_find (net, tunnel_id); + tunnel =l2tp_tunnel_find (net, tunnel_id,0 );if (!tunnel) { rc = -ENODEV ; goto out; } - session =l2tp_session_find (net, tunnel, session_id); + session =l2tp_session_find (net, tunnel, session_id,0 );if (session) { rc = -EEXIST ; goto out;
net/l2tp/l2tp_ip.c +5 -3
@@ -126,7 +126,7 @@ static int l2tp_ip_recv(struct sk_buff *skb)u32 session_id;u32 tunnel_id;unsigned char *ptr, *optr; -struct l2tp_session *session; +struct l2tp_session *session =NULL ;struct l2tp_tunnel *tunnel =NULL ;int length;int offset;
@@ -150,7 +150,7 @@ static int l2tp_ip_recv(struct sk_buff *skb) }/* Ok, this is a data packet. Lookup the session. */ - session =l2tp_session_find (&init_net,NULL , session_id); + session =l2tp_session_find (&init_net,NULL , session_id,1 );if (session ==NULL ) goto discard;
@@ -187,7 +187,7 @@ pass_up: goto discard; tunnel_id =ntohl (*(__be32 *) &skb->data[4 ]); - tunnel =l2tp_tunnel_find (&init_net, tunnel_id); + tunnel =l2tp_tunnel_find (&init_net, tunnel_id,0 );if (tunnel !=NULL ) sk = tunnel->sock;else {
@@ -214,6 +214,8 @@ discard_put:sock_put (sk); discard: +if (session) +l2tp_session_dec_refcount (session);kfree_skb (skb);return 0 ; }
net/l2tp/l2tp_netlink.c +13 -13
@@ -40,7 +40,7 @@ static struct genl_family l2tp_nl_family = {/* Accessed under genl lock */ static const struct l2tp_nl_cmd_ops *l2tp_nl_cmd_ops[__L2TP_PWTYPE_MAX]; -static struct l2tp_session *l2tp_nl_session_find (struct genl_info *info) +static struct l2tp_session *l2tp_nl_session_find (struct genl_info *info,int ref) {u32 tunnel_id;u32 session_id;
@@ -56,9 +56,9 @@ static struct l2tp_session *l2tp_nl_session_find(struct genl_info *info) (info->attrs[L2TP_ATTR_CONN_ID])) { tunnel_id =nla_get_u32 (info->attrs[L2TP_ATTR_CONN_ID ]); session_id =nla_get_u32 (info->attrs[L2TP_ATTR_SESSION_ID ]); - tunnel =l2tp_tunnel_find (net, tunnel_id); + tunnel =l2tp_tunnel_find (net, tunnel_id,0 );if (tunnel) - session =l2tp_session_find (net, tunnel, session_id); + session =l2tp_session_find (net, tunnel, session_id, ref); }return session;
@@ -148,7 +148,7 @@ static int l2tp_nl_cmd_tunnel_create(struct sk_buff *skb, struct genl_info *infoif (info->attrs[L2TP_ATTR_DEBUG ]) cfg.debug =nla_get_u32 (info->attrs[L2TP_ATTR_DEBUG ]); - tunnel =l2tp_tunnel_find (net, tunnel_id); + tunnel =l2tp_tunnel_find (net, tunnel_id,0 );if (tunnel !=NULL ) { ret = -EEXIST ; goto out;
@@ -180,7 +180,7 @@ static int l2tp_nl_cmd_tunnel_delete(struct sk_buff *skb, struct genl_info *info } tunnel_id =nla_get_u32 (info->attrs[L2TP_ATTR_CONN_ID ]); - tunnel =l2tp_tunnel_find (net, tunnel_id); + tunnel =l2tp_tunnel_find (net, tunnel_id,0 );if (tunnel ==NULL ) { ret = -ENODEV ; goto out;
@@ -205,7 +205,7 @@ static int l2tp_nl_cmd_tunnel_modify(struct sk_buff *skb, struct genl_info *info } tunnel_id =nla_get_u32 (info->attrs[L2TP_ATTR_CONN_ID ]); - tunnel =l2tp_tunnel_find (net, tunnel_id); + tunnel =l2tp_tunnel_find (net, tunnel_id,0 );if (tunnel ==NULL ) { ret = -ENODEV ; goto out;
@@ -292,7 +292,7 @@ static int l2tp_nl_cmd_tunnel_get(struct sk_buff *skb, struct genl_info *info) tunnel_id =nla_get_u32 (info->attrs[L2TP_ATTR_CONN_ID ]); - tunnel =l2tp_tunnel_find (net, tunnel_id); + tunnel =l2tp_tunnel_find (net, tunnel_id,0 );if (tunnel ==NULL ) { ret = -ENODEV ; goto out;
@@ -359,7 +359,7 @@ static int l2tp_nl_cmd_session_create(struct sk_buff *skb, struct genl_info *inf goto out; } tunnel_id =nla_get_u32 (info->attrs[L2TP_ATTR_CONN_ID ]); - tunnel =l2tp_tunnel_find (net, tunnel_id); + tunnel =l2tp_tunnel_find (net, tunnel_id,0 );if (!tunnel) { ret = -ENODEV ; goto out;
@@ -370,7 +370,7 @@ static int l2tp_nl_cmd_session_create(struct sk_buff *skb, struct genl_info *inf goto out; } session_id =nla_get_u32 (info->attrs[L2TP_ATTR_SESSION_ID ]); - session =l2tp_session_find (net, tunnel, session_id); + session =l2tp_session_find (net, tunnel, session_id,0 );if (session) { ret = -EEXIST ; goto out;
@@ -495,7 +495,7 @@ static int l2tp_nl_cmd_session_delete(struct sk_buff *skb, struct genl_info *infstruct l2tp_session *session;u16 pw_type; - session =l2tp_nl_session_find (info); + session =l2tp_nl_session_find (info,0 );if (session ==NULL ) { ret = -ENODEV ; goto out;
@@ -515,7 +515,7 @@ static int l2tp_nl_cmd_session_modify(struct sk_buff *skb, struct genl_info *infint ret =0 ;struct l2tp_session *session; - session =l2tp_nl_session_find (info); + session =l2tp_nl_session_find (info,1 );if (session ==NULL ) { ret = -ENODEV ; goto out;
@@ -615,7 +615,7 @@ static int l2tp_nl_cmd_session_get(struct sk_buff *skb, struct genl_info *info)struct sk_buff *msg;int ret; - session =l2tp_nl_session_find (info); + session =l2tp_nl_session_find (info,0 );if (session ==NULL ) { ret = -ENODEV ; goto out;
@@ -656,7 +656,7 @@ static int l2tp_nl_cmd_session_dump(struct sk_buff *skb, struct netlink_callback goto out; } - session =l2tp_session_find_nth (tunnel, si); + session =l2tp_session_find_nth (tunnel, si,0 );if (session ==NULL ) { ti++; tunnel =NULL ;
James Chapman
maintainerRe: [PATCH net-next-2.6 v4 10/14] l2tp: Convert rwlock to RCU
Quoted 30 lines · Eric Dumazet
Hi James
I started a while ago patching l2tp but I wont be able to finish and test the thing...
There is a fundamental problem with this kind of construct :
(this was wrong even better your RCU conversion)
rcu_read_lock_bh()hlist_for_each_entry_rcu(session, walk, session_list, global_hlist) { if (session->session_id == session_id) { rcu_read_unlock_bh(); return session; } }
rcu_read_unlock_bh();While the lookup _is_ protected, the result is not.
As soon as you call
rcu_read_unlock_bh(); and before the "return session;", current thread could be preempted and an other thread frees session under first thread. Unexpected things can then happen.Therefore, you need either to :
1) Take a refcount on session (or tunnel) before the return
2) Or move the rcu_read_lock_bh()/rcu_read_unlock_bh() at callers.
3) Or all callers use a stronger lock. But then, why use RCU ;)
Quoted 5 lines
Here is a preliminary patch, obviously not finished, nor compiled, nor tested, to give possible ways to handle this problem.
(I added the ref parameter to make sure to change function signatures, maybe its not necessary and we should always take references)
Thanks Eric. I'll take a look at this.
Signature · 4 lines
James Chapman Katalix Systems Ltd http://www.katalix.com Catalysts for your Embedded Linux software development
James Chapman
maintainerPATCH v4 11/14 l2tp: Add L2TP ethernet pseudowire support
In reply to James ChapmanThis driver presents a regular net_device for each L2TP ethernet pseudowire instance. These interfaces are named l2tpethN by default, though userspace can specify an alternative name when the L2TP session is created, if preferred. When the pseudowire is established, regular Linux networking utilities may be used to configure the interface, i.e. give it IP address info or add it to a bridge. Any data passed over the interface is carried over an L2TP tunnel.
--- net/l2tp/Kconfig | 24 ++++ net/l2tp/Makefile | 1 net/l2tp/l2tp_eth.c | 347 +++++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 372 insertions(+), 0 deletions(-) create mode 100644 net/l2tp/l2tp_eth.c
net/l2tp/Kconfig +24 -0
@@ -68,3 +68,27 @@ config L2TP_IP To compile this driver as a module, choose M here. The module will be called l2tp_ip. + +config L2TP_ETH + tristate "L2TP ethernet pseudowire support for L2TPv3" + depends on L2TP_V3 + help + Support for carrying raw ethernet frames over L2TPv3. + + From RFC 4719 <http://www.ietf.org/rfc/rfc4719.txt>. + + The Layer 2 Tunneling Protocol, Version 3 (L2TPv3) can be + used as a control protocol and for data encapsulation to set + up Pseudowires for transporting layer 2 Packet Data Units + across an IP network [RFC3931]. + + This driver provides an ethernet virtual interface for each + L2TP ethernet pseudowire instance. Standard Linux tools may + be used to assign an IP address to the local virtual + interface, or add the interface to a bridge. + + If you are using L2TPv3, you will almost certainly want to + enable this option. + + To compile this driver as a module, choose M here. The module + will be called l2tp_eth.
net/l2tp/Makefile +1 -0
@@ -8,3 +8,4 @@ obj-$(CONFIG_L2TP) += l2tp_core.o obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_PPPOL2TP)) += l2tp_ppp.o obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_IP)) += l2tp_ip.o obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_V3)) += l2tp_netlink.o +obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_ETH)) += l2tp_eth.o
net/l2tp/l2tp_eth.c new file +347 -0
347 lines not on this page · raw message
James Chapman
maintainerPATCH v4 12/14 l2tp: Add debugfs files for dumping l2tp debug info
In reply to James ChapmanThe existing pppol2tp driver exports debug info to /proc/net/pppol2tp. Rather than adding info to that file for the new functionality added in this patch series, we add new files in debugfs, leaving the old /proc file for backwards compatibility (L2TPv2 only).
Currently only one file is provided: l2tp/tunnels, which lists internal debug info for all l2tp tunnels and sessions. More files may be added later. The info is for debug and problem analysis only - userspace apps should use netlink to obtain status about l2tp tunnels and sessions.
Although debugfs does not support net namespaces, the tunnels and sessions dumped in l2tp/tunnels are only those in the net namespace of the process reading the file.
--- net/l2tp/Kconfig | 13 ++ net/l2tp/Makefile | 1 net/l2tp/l2tp_core.h | 8 + net/l2tp/l2tp_debugfs.c | 341 +++++++++++++++++++++++++++++++++++++++++++++++ net/l2tp/l2tp_eth.c | 14 ++ net/l2tp/l2tp_ppp.c | 17 ++ 6 files changed, 392 insertions(+), 2 deletions(-) create mode 100644 net/l2tp/l2tp_debugfs.c
net/l2tp/Kconfig +13 -0
@@ -31,6 +31,19 @@ menuconfig L2TP If you don't need L2TP, say N. To compile all L2TP code as modules, choose M here. +config L2TP_DEBUGFS + tristate "L2TP debugfs support" + depends on L2TP && DEBUG_FS + help + Support for l2tp directory in debugfs filesystem. This may be + used to dump internal state of the l2tp drivers for problem + analysis. + + If unsure, say 'Y'. + + To compile this driver as a module, choose M here. The module + will be called l2tp_debugfs. + config L2TP_V3 bool "L2TPv3 support (EXPERIMENTAL)" depends on EXPERIMENTAL && L2TP
net/l2tp/Makefile +1 -0
@@ -9,3 +9,4 @@ obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_PPPOL2TP)) += l2tp_ppp.o obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_IP)) += l2tp_ip.o obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_V3)) += l2tp_netlink.o obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_ETH)) += l2tp_eth.o +obj-$(subst y,$(CONFIG_L2TP),$(CONFIG_L2TP_DEBUGFS)) += l2tp_debugfs.o
net/l2tp/l2tp_core.h +6 -2
@@ -133,7 +133,9 @@ struct l2tp_session {void (*session_close)(struct l2tp_session *session);void (*ref)(struct l2tp_session *session);void (*deref)(struct l2tp_session *session); - +#ifdef CONFIG_L2TP_DEBUGFS +void (*show)(struct seq_file *m,void *priv); +#endif uint8_t priv[0 ];/* private data */ };
@@ -166,7 +168,9 @@ struct l2tp_tunnel {struct net *l2tp_net;/* the net we belong to */ atomic_t ref_count; - +#ifdef CONFIG_DEBUG_FS +void (*show)(struct seq_file *m,void *arg); +#endif int (*recv_payload_hook)(struct sk_buff *skb);void (*old_sk_destruct)(struct sock *);struct sock *sock;/* Parent socket */
net/l2tp/l2tp_debugfs.c new file +341 -0
341 lines not on this page · raw message
net/l2tp/l2tp_eth.c +14 -0
@@ -172,6 +172,17 @@ static void l2tp_eth_delete(struct l2tp_session *session) } } +#ifdef CONFIG_L2TP_DEBUGFS +static void l2tp_eth_show (struct seq_file *m,void *arg) +{ +struct l2tp_session *session = arg; +struct l2tp_eth_sess *spriv =l2tp_session_priv (session); +struct net_device *dev = spriv->dev; + +seq_printf (m," interface %s\n" , dev->name); +} +#endif +static int l2tp_eth_create (struct net *net,u32 tunnel_id,u32 session_id,u32 peer_session_id,struct l2tp_session_cfg *cfg) {struct net_device *dev;
@@ -233,6 +244,9 @@ static int l2tp_eth_create(struct net *net, u32 tunnel_id, u32 session_id, u32 p priv->tunnel_sock = tunnel->sock; session->recv_skb = l2tp_eth_dev_recv; session->session_close = l2tp_eth_delete; +#ifdef CONFIG_L2TP_DEBUGFS + session->show = l2tp_eth_show; +#endif spriv =l2tp_session_priv (session); spriv->dev = dev;
net/l2tp/l2tp_ppp.c +17 -0
@@ -597,6 +597,20 @@ out:return error; } +#ifdef CONFIG_L2TP_DEBUGFS +static void pppol2tp_show (struct seq_file *m,void *arg) +{ +struct l2tp_session *session = arg; +struct pppol2tp_session *ps =l2tp_session_priv (session); + +if (ps) { +struct pppox_sock *po =pppox_sk (ps->sock); +if (po) +seq_printf (m," interface %s\n" ,ppp_dev_name (&po->chan)); + } +} +#endif +/* connect() handler. Attach a PPPoX socket to a tunnel UDP socket */ static int pppol2tp_connect(struct socket *sock, struct sockaddr *uservaddr,
@@ -734,6 +748,9 @@ static int pppol2tp_connect(struct socket *sock, struct sockaddr *uservaddr, session->recv_skb = pppol2tp_recv; session->session_close = pppol2tp_session_close; +#ifdef CONFIG_L2TP_DEBUGFS + session->show = pppol2tp_show; +#endif /* We need to know each time a skb is dropped from the reorder * queue.
James Chapman
maintainerPATCH v4 13/14 l2tp: Add support for static unmanaged L2TPv3 tunnels
In reply to James ChapmanThis patch adds support for static (unmanaged) L2TPv3 tunnels, where the tunnel socket is created by the kernel rather than being created by userspace. This means L2TP tunnels and sessions can be created manually, without needing an L2TP control protocol implemented in userspace. This might be useful where the user wants a simple ethernet over IP tunnel.
A patch to iproute2 adds a new command set under "ip l2tp" to make use of this feature. This will be submitted separately.
--- net/l2tp/l2tp_core.c | 115 +++++++++++++++++++++++++++++++++++++++++++---- net/l2tp/l2tp_core.h | 7 +++ net/l2tp/l2tp_netlink.c | 18 ++++++- 3 files changed, 126 insertions(+), 14 deletions(-)
net/l2tp/l2tp_core.c +105 -10
@@ -1218,6 +1218,82 @@ void l2tp_tunnel_free(struct l2tp_tunnel *tunnel) }EXPORT_SYMBOL_GPL (l2tp_tunnel_free); +/* Create a socket for the tunnel, if one isn't set up by +* userspace. This is used for static tunnels where there is no +* managing L2TP daemon. +*/ +static int l2tp_tunnel_sock_create (u32 tunnel_id,u32 peer_tunnel_id,struct l2tp_tunnel_cfg *cfg,struct socket **sockp) +{ +int err = -EINVAL ; +struct sockaddr_in udp_addr; +struct sockaddr_l2tpip ip_addr; +struct socket *sock; + +switch (cfg->encap) { +case L2TP_ENCAPTYPE_UDP : + err =sock_create (AF_INET ,SOCK_DGRAM ,0 , sockp); +if (err <0 ) + goto out; + + sock = *sockp; + +memset (&udp_addr,0 ,sizeof (udp_addr)); + udp_addr.sin_family =AF_INET ; + udp_addr.sin_addr = cfg->local_ip; + udp_addr.sin_port =htons (cfg->local_udp_port); + err =kernel_bind (sock, (struct sockaddr *) &udp_addr,sizeof (udp_addr)); +if (err <0 ) + goto out; + + udp_addr.sin_family =AF_INET ; + udp_addr.sin_addr = cfg->peer_ip; + udp_addr.sin_port =htons (cfg->peer_udp_port); + err =kernel_connect (sock, (struct sockaddr *) &udp_addr,sizeof (udp_addr),0 ); +if (err <0 ) + goto out; + +if (!cfg->use_udp_checksums) + sock->sk->sk_no_check =UDP_CSUM_NOXMIT ; + +break ; + +case L2TP_ENCAPTYPE_IP : + err =sock_create (AF_INET ,SOCK_DGRAM ,IPPROTO_L2TP , sockp); +if (err <0 ) + goto out; + + sock = *sockp; + +memset (&ip_addr,0 ,sizeof (ip_addr)); + ip_addr.l2tp_family =AF_INET ; + ip_addr.l2tp_addr = cfg->local_ip; + ip_addr.l2tp_conn_id = tunnel_id; + err =kernel_bind (sock, (struct sockaddr *) &ip_addr,sizeof (ip_addr)); +if (err <0 ) + goto out; + + ip_addr.l2tp_family =AF_INET ; + ip_addr.l2tp_addr = cfg->peer_ip; + ip_addr.l2tp_conn_id = peer_tunnel_id; + err =kernel_connect (sock, (struct sockaddr *) &ip_addr,sizeof (ip_addr),0 ); +if (err <0 ) + goto out; + +break ; + +default : + goto out; + } + +out: +if ((err <0 ) && sock) { +sock_release (sock); + *sockp =NULL ; + } + +return err; +} +int l2tp_tunnel_create (struct net *net,int fd,int version,u32 tunnel_id,u32 peer_tunnel_id,struct l2tp_tunnel_cfg *cfg,struct l2tp_tunnel **tunnelp) {struct l2tp_tunnel *tunnel =NULL ;
@@ -1228,14 +1304,21 @@ int l2tp_tunnel_create(struct net *net, int fd, int version, u32 tunnel_id, u32enum l2tp_encap_type encap =L2TP_ENCAPTYPE_UDP ;/* Get the tunnel socket from the fd, which was opened by -* the userspace L2TP daemon. +* the userspace L2TP daemon. If not specified, create a +* kernel socket. */ - err = -EBADF ; - sock =sockfd_lookup (fd, &err); -if (!sock) { -printk (KERN_ERR "tunl %hu: sockfd_lookup(fd=%d) returned %d\n" , - tunnel_id, fd, err); - goto err; +if (fd <0 ) { + err =l2tp_tunnel_sock_create (tunnel_id, peer_tunnel_id, cfg, &sock); +if (err <0 ) + goto err; + }else { + err = -EBADF ; + sock =sockfd_lookup (fd, &err); +if (!sock) { +printk (KERN_ERR "tunl %hu: sockfd_lookup(fd=%d) returned %d\n" , + tunnel_id, fd, err); + goto err; + } } sk = sock->sk;
@@ -1329,7 +1412,10 @@ err:if (tunnelp) *tunnelp = tunnel; -if (sock) +/* If tunnel's socket was created by the kernel, it doesn't +* have a file. +*/ +if (sock && sock->file)sockfd_put (sock);return err;
@@ -1341,13 +1427,22 @@ EXPORT_SYMBOL_GPL(l2tp_tunnel_create);int l2tp_tunnel_delete (struct l2tp_tunnel *tunnel) {int err =0 ; +struct socket *sock = tunnel->sock ? tunnel->sock->sk_socket :NULL ;/* Force the tunnel socket to close. This will eventually * cause the tunnel to be deleted via the normal socket close * mechanisms when userspace closes the tunnel socket. */ -if ((tunnel->sock !=NULL ) && (tunnel->sock->sk_socket !=NULL )) - err =inet_shutdown (tunnel->sock->sk_socket,2 ); +if (sock !=NULL ) { + err =inet_shutdown (sock,2 ); + +/* If the tunnel's socket was created by the kernel, +* close the socket here since the socket was not +* created by userspace. +*/ +if (sock->file ==NULL ) + err =inet_release (sock); + }return err; }
net/l2tp/l2tp_core.h +7 -0
@@ -146,6 +146,13 @@ struct l2tp_tunnel_cfg {int debug;/* bitmask of debug message * categories */ enum l2tp_encap_type encap; + +/* Used only for kernel-created sockets */ +struct in_addr local_ip; +struct in_addr peer_ip; +u16 local_udp_port; +u16 peer_udp_port; + int use_udp_checksums:1; };struct l2tp_tunnel {
net/l2tp/l2tp_netlink.c +14 -4
@@ -129,11 +129,21 @@ static int l2tp_nl_cmd_tunnel_create(struct sk_buff *skb, struct genl_info *info } cfg.encap =nla_get_u16 (info->attrs[L2TP_ATTR_ENCAP_TYPE ]); -if (!info->attrs[L2TP_ATTR_FD ]) { - ret = -EINVAL ; - goto out; + fd =-1 ; +if (info->attrs[L2TP_ATTR_FD ]) { + fd =nla_get_u32 (info->attrs[L2TP_ATTR_FD ]); + }else { +if (info->attrs[L2TP_ATTR_IP_SADDR ]) + cfg.local_ip.s_addr =nla_get_be32 (info->attrs[L2TP_ATTR_IP_SADDR ]); +if (info->attrs[L2TP_ATTR_IP_DADDR ]) + cfg.peer_ip.s_addr =nla_get_be32 (info->attrs[L2TP_ATTR_IP_DADDR ]); +if (info->attrs[L2TP_ATTR_UDP_SPORT ]) + cfg.local_udp_port =nla_get_u16 (info->attrs[L2TP_ATTR_UDP_SPORT ]); +if (info->attrs[L2TP_ATTR_UDP_DPORT ]) + cfg.peer_udp_port =nla_get_u16 (info->attrs[L2TP_ATTR_UDP_DPORT ]); +if (info->attrs[L2TP_ATTR_UDP_CSUM ]) + cfg.use_udp_checksums =nla_get_flag (info->attrs[L2TP_ATTR_UDP_CSUM ]); } - fd =nla_get_u32 (info->attrs[L2TP_ATTR_FD ]);if (info->attrs[L2TP_ATTR_DEBUG ]) cfg.debug =nla_get_u32 (info->attrs[L2TP_ATTR_DEBUG ]);
James Chapman
maintainerPATCH v4 14/14 l2tp: Update documentation
In reply to James ChapmanThis patch adds documentation about the L2TPv3 functionality.
--- Documentation/networking/l2tp.txt | 247 ++++++++++++++++++++++++++++++++----- 1 files changed, 213 insertions(+), 34 deletions(-)
Documentation/networking/l2tp.txt +213 -34
@@ -1,44 +1,95 @@ -This brief document describes how to use the kernel's PPPoL2TP driver -to provide L2TP functionality. L2TP is a protocol that tunnels one or -more PPP sessions over a UDP tunnel. It is commonly used for VPNs +This document describes how to use the kernel's L2TP drivers to +provide L2TP functionality. L2TP is a protocol that tunnels one or +more sessions over an IP tunnel. It is commonly used for VPNs (L2TP/IPSec) and by ISPs to tunnel subscriber PPP sessions over an IP -network infrastructure. +network infrastructure. With L2TPv3, it is also useful as a Layer-2 +tunneling infrastructure. + +Features +======== + +L2TPv2 (PPP over L2TP (UDP tunnels)). +L2TPv3 ethernet pseudowires. +L2TPv3 PPP pseudowires. +L2TPv3 IP encapsulation. +Netlink sockets for L2TPv3 configuration management. + +History +======= + +The original pppol2tp driver was introduced in 2.6.23 and provided +L2TPv2 functionality (rfc2661). L2TPv2 is used to tunnel one or more PPP +sessions over a UDP tunnel. + +L2TPv3 (rfc3931) changes the protocol to allow different frame types +to be passed over an L2TP tunnel by moving the PPP-specific parts of +the protocol out of the core L2TP packet headers. Each frame type is +known as a pseudowire type. Ethernet, PPP, HDLC, Frame Relay and ATM +pseudowires for L2TP are defined in separate RFC standards. Another +change for L2TPv3 is that it can be carried directly over IP with no +UDP header (UDP is optional). It is also possible to create static +unmanaged L2TPv3 tunnels manually without a control protocol +(userspace daemon) to manage them. + +To support L2TPv3, the original pppol2tp driver was split up to +separate the L2TP and PPP functionality. Existing L2TPv2 userspace +apps should be unaffected as the original pppol2tp sockets API is +retained. L2TPv3, however, uses netlink to manage L2TPv3 tunnels and +sessions. Design ====== -The PPPoL2TP driver, drivers/net/pppol2tp.c, provides a mechanism by -which PPP frames carried through an L2TP session are passed through -the kernel's PPP subsystem. The standard PPP daemon, pppd, handles all -PPP interaction with the peer. PPP network interfaces are created for -each local PPP endpoint. - -The L2TP protocol http://www.faqs.org/rfcs/rfc2661.html defines L2TP -control and data frames. L2TP control frames carry messages between -L2TP clients/servers and are used to setup / teardown tunnels and -sessions. An L2TP client or server is implemented in userspace and -will use a regular UDP socket per tunnel. L2TP data frames carry PPP -frames, which may be PPP control or PPP data. The kernel's PPP +The L2TP protocol separates control and data frames. The L2TP kernel +drivers handle only L2TP data frames; control frames are always +handled by userspace. L2TP control frames carry messages between L2TP +clients/servers and are used to setup / teardown tunnels and +sessions. An L2TP client or server is implemented in userspace. + +Each L2TP tunnel is implemented using a UDP or L2TPIP socket; L2TPIP +provides L2TPv3 IP encapsulation (no UDP) and is implemented using a +new l2tpip socket family. The tunnel socket is typically created by +userspace, though for unmanaged L2TPv3 tunnels, the socket can also be +created by the kernel. Each L2TP session (pseudowire) gets a network +interface instance. In the case of PPP, these interfaces are created +indirectly by pppd using a pppol2tp socket. In the case of ethernet, +the netdevice is created upon a netlink request to create an L2TPv3 +ethernet pseudowire. + +For PPP, the PPPoL2TP driver, net/l2tp/l2tp_ppp.c, provides a +mechanism by which PPP frames carried through an L2TP session are +passed through the kernel's PPP subsystem. The standard PPP daemon, +pppd, handles all PPP interaction with the peer. PPP network +interfaces are created for each local PPP endpoint. The kernel's PPP subsystem arranges for PPP control frames to be delivered to pppd, while data frames are forwarded as usual. +For ethernet, the L2TPETH driver, net/l2tp/l2tp_eth.c, implements a +netdevice driver, managing virtual ethernet devices, one per +pseudowire. These interfaces can be managed using standard Linux tools +such as "ip" and "ifconfig". If only IP frames are passed over the +tunnel, the interface can be given an IP addresses of itself and its +peer. If non-IP frames are to be passed over the tunnel, the interface +can be added to a bridge using brctl. All L2TP datapath protocol +functions are handled by the L2TP core driver. + Each tunnel and session within a tunnel is assigned a unique tunnel_id and session_id. These ids are carried in the L2TP header of every -control and data packet. The pppol2tp driver uses them to lookup -internal tunnel and/or session contexts. Zero tunnel / session ids are -treated specially - zero ids are never assigned to tunnels or sessions -in the network. In the driver, the tunnel context keeps a pointer to -the tunnel UDP socket. The session context keeps a pointer to the -PPPoL2TP socket, as well as other data that lets the driver interface -to the kernel PPP subsystem. - -Note that the pppol2tp kernel driver handles only L2TP data frames; -L2TP control frames are simply passed up to userspace in the UDP -tunnel socket. The kernel handles all datapath aspects of the -protocol, including data packet resequencing (if enabled). - -There are a number of requirements on the userspace L2TP daemon in -order to use the pppol2tp driver. +control and data packet. (Actually, in L2TPv3, the tunnel_id isn't +present in data frames - it is inferred from the IP connection on +which the packet was received.) The L2TP driver uses the ids to lookup +internal tunnel and/or session contexts to determine how to handle the +packet. Zero tunnel / session ids are treated specially - zero ids are +never assigned to tunnels or sessions in the network. In the driver, +the tunnel context keeps a reference to the tunnel UDP or L2TPIP +socket. The session context holds data that lets the driver interface +to the kernel's network frame type subsystems, i.e. PPP, ethernet. + +Userspace Programming +===================== + +For L2TPv2, there are a number of requirements on the userspace L2TP +daemon in order to use the pppol2tp driver. 1. Use a UDP socket per tunnel.
@@ -86,6 +137,35 @@ In addition to the standard PPP ioctls, a PPPIOCGL2TPSTATS is provided to retrieve tunnel and session statistics from the kernel using the PPPoX socket of the appropriate tunnel or session. +For L2TPv3, userspace must use the netlink API defined in +include/linux/l2tp.h to manage tunnel and session contexts. The +general procedure to create a new L2TP tunnel with one session is:- + +1. Open a GENL socket using L2TP_GENL_NAME for configuring the kernel + using netlink. + +2. Create a UDP or L2TPIP socket for the tunnel. + +3. Create a new L2TP tunnel using a L2TP_CMD_TUNNEL_CREATE + request. Set attributes according to desired tunnel parameters, + referencing the UDP or L2TPIP socket created in the previous step. + +4. Create a new L2TP session in the tunnel using a + L2TP_CMD_SESSION_CREATE request. + +The tunnel and all of its sessions are closed when the tunnel socket +is closed. The netlink API may also be used to delete sessions and +tunnels. Configuration and status info may be set or read using netlink. + +The L2TP driver also supports static (unmanaged) L2TPv3 tunnels. These +are where there is no L2TP control message exchange with the peer to +setup the tunnel; the tunnel is configured manually at each end of the +tunnel. There is no need for an L2TP userspace application in this +case -- the tunnel socket is created by the kernel and configured +using parameters sent in the L2TP_CMD_TUNNEL_CREATE netlink +request. The "ip" utility of iproute2 has commands for managing static +L2TPv3 tunnels; do "ip l2tp help" for more information. + Debugging =========
@@ -102,6 +182,69 @@ PPPOL2TP_MSG_CONTROL userspace - kernel interface PPPOL2TP_MSG_SEQ sequence numbers handling PPPOL2TP_MSG_DATA data packets +If enabled, files under a l2tp debugfs directory can be used to dump +kernel state about L2TP tunnels and sessions. To access it, the +debugfs filesystem must first be mounted. + +# mount -t debugfs debugfs /debug + +Files under the l2tp directory can then be accessed. + +# cat /debug/l2tp/tunnels + +The debugfs files should not be used by applications to obtain L2TP +state information because the file format is subject to change. It is +implemented to provide extra debug information to help diagnose +problems.) Users should use the netlink API. + +/proc/net/pppol2tp is also provided for backwards compaibility with +the original pppol2tp driver. It lists information about L2TPv2 +tunnels and sessions only. Its use is discouraged. + +Unmanaged L2TPv3 Tunnels +======================== + +Some commercial L2TP products support unmanaged L2TPv3 ethernet +tunnels, where there is no L2TP control protocol; tunnels are +configured at each side manually. New commands are available in +iproute2's ip utility to support this. + +To create an L2TPv3 ethernet pseudowire between local host 192.168.1.1 +and peer 192.168.1.2, using IP addresses 10.5.1.1 and 10.5.1.2 for the +tunnel endpoints:- + +# modprobe l2tp_eth +# modprobe l2tp_netlink + +# ip l2tp add tunnel tunnel_id 1 peer_tunnel_id 1 udp_sport 5000 \ + udp_dport 5000 encap udp local 192.168.1.1 remote 192.168.1.2 +# ip l2tp add session tunnel_id 1 session_id 1 peer_session_id 1 +# ifconfig -a +# ip addr add 10.5.1.2/32 peer 10.5.1.1/32 dev l2tpeth0 +# ifconfig l2tpeth0 up + +Choose IP addresses to be the address of a local IP interface and that +of the remote system. The IP addresses of the l2tpeth0 interface can be +anything suitable. + +Repeat the above at the peer, with ports, tunnel/session ids and IP +addresses reversed. The tunnel and session IDs can be any non-zero +32-bit number, but the values must be reversed at the peer. + +Host 1 Host2 +udp_sport=5000 udp_sport=5001 +udp_dport=5001 udp_dport=5000 +tunnel_id=42 tunnel_id=45 +peer_tunnel_id=45 peer_tunnel_id=42 +session_id=128 session_id=5196755 +peer_session_id=5196755 peer_session_id=128 + +When done at both ends of the tunnel, it should be possible to send +data over the network. e.g. + +# ping 10.5.1.1 + + Sample Userspace Code =====================
@@ -158,12 +301,48 @@ Sample Userspace Code } return 0; +Internal Implementation +======================= + +The driver keeps a struct l2tp_tunnel context per L2TP tunnel and a +struct l2tp_session context for each session. The l2tp_tunnel is +always associated with a UDP or L2TP/IP socket and keeps a list of +sessions in the tunnel. The l2tp_session context keeps kernel state +about the session. It has private data which is used for data specific +to the session type. With L2TPv2, the session always carried PPP +traffic. With L2TPv3, the session can also carry ethernet frames +(ethernet pseudowire) or other data types such as ATM, HDLC or Frame +Relay. + +When a tunnel is first opened, the reference count on the socket is +increased using sock_hold(). This ensures that the kernel socket +cannot be removed while L2TP's data structures reference it. + +Some L2TP sessions also have a socket (PPP pseudowires) while others +do not (ethernet pseudowires). We can't use the socket reference count +as the reference count for session contexts. The L2TP implementation +therefore has its own internal reference counts on the session +contexts. + +To Do +===== + +Add L2TP tunnel switching support. This would route tunneled traffic +from one L2TP tunnel into another. Specified in +http://tools.ietf.org/html/draft-ietf-l2tpext-tunnel-switching-08 + +Add L2TPv3 VLAN pseudowire support. + +Add L2TPv3 IP pseudowire support. + +Add L2TPv3 ATM pseudowire support. + Miscellaneous -============ +============= -The PPPoL2TP driver was developed as part of the OpenL2TP project by +The L2TP drivers were developed as part of the OpenL2TP project by Katalix Systems Ltd. OpenL2TP is a full-featured L2TP client / server, designed from the ground up to have the L2TP datapath in the kernel. The project also implemented the pppol2tp plugin for pppd which allows pppd to use the kernel driver. Details can be found at -http://openl2tp.sourceforge.net. +http://www.openl2tp.org.
David Miller
maintainerFrom: James Chapman <[email protected]>
Date: Fri, 02 Apr 2010 17:18:23 +0100
Quoted 5 lines
This patch series adds L2TPv3 support. It splits the existing pppol2tp driver to separate its L2TP and PPP parts, then adds new L2TPv3 functionality. The patches implement a new socket family for L2TPv3 IP encapsulation, expose virtual netdevices for each L2TPv3 ethernet pseudowire and add a netlink interface.
Ok I'm going to toss this into net-next-2.6, we have time to fixup any remaining issues people might discover.
Thanks James.
David Miller
maintainerFrom: David Miller <[email protected]>
Date: Sat, 03 Apr 2010 14:25:22 -0700 (PDT)
Quoted 11 lines
From: James Chapman <[email protected]>
Date: Fri, 02 Apr 2010 17:18:23 +0100Quoted 5 lines
This patch series adds L2TPv3 support. It splits the existing pppol2tp driver to separate its L2TP and PPP parts, then adds new L2TPv3 functionality. The patches implement a new socket family for L2TPv3 IP encapsulation, expose virtual netdevices for each L2TPv3 ethernet pseudowire and add a netlink interface.
Ok I'm going to toss this into net-next-2.6, we have time to fixup any remaining issues people might discover.
This needed several build fixes which I'll post next.
Quoted 12 lines · David Miller
From: James Chapman <[email protected]>
Date: Fri, 02 Apr 2010 17:18:23 +0100Quoted 5 lines
This patch series adds L2TPv3 support. It splits the existing pppol2tp driver to separate its L2TP and PPP parts, then adds new L2TPv3 functionality. The patches implement a new socket family for L2TPv3 IP encapsulation, expose virtual netdevices for each L2TPv3 ethernet pseudowire and add a netlink interface.
Ok I'm going to toss this into net-next-2.6, we have time to fixup any remaining issues people might discover.
[PATCH net-next-2.6] l2tp: unmanaged L2TPv3 tunnels fixes
Followup to commit 789a4a2c
(l2tp: Add support for static unmanaged L2TPv3 tunnels)
One missing init in l2tp_tunnel_sock_create() could access random kernel memory, and a bit field should be unsigned.
--- net/l2tp/l2tp_core.c | 2 +- net/l2tp/l2tp_core.h | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)
net/l2tp/l2tp_core.c +1 -1
@@ -1227,7 +1227,7 @@ static int l2tp_tunnel_sock_create(u32 tunnel_id, u32 peer_tunnel_id, struct l2tint err = -EINVAL ;struct sockaddr_in udp_addr;struct sockaddr_l2tpip ip_addr; -struct socket *sock; +struct socket *sock =NULL ;switch (cfg->encap) {case L2TP_ENCAPTYPE_UDP :
net/l2tp/l2tp_core.h +1 -1
@@ -152,7 +152,7 @@ struct l2tp_tunnel_cfg {struct in_addr peer_ip;u16 local_udp_port;u16 peer_udp_port; - int use_udp_checksums:1; + unsigned int use_udp_checksums:1; };struct l2tp_tunnel {
From: Eric Dumazet <[email protected]>
Date: Sun, 04 Apr 2010 09:54:28 +0200
Quoted 9 lines
[PATCH net-next-2.6] l2tp: unmanaged L2TPv3 tunnels fixes
Followup to commit
789a4a2c
(l2tp: Add support for static unmanaged L2TPv3 tunnels)One missing init in
l2tp_tunnel_sock_create()could access random kernel memory, and a bit field should be unsigned.Signed-off-by Eric Dumazet <[email protected]>
Applied, thanks Eric.
Quoted 8 lines · David Miller
From: Eric Dumazet <[email protected]>
Date: Sun, 04 Apr 2010 09:54:28 +0200Quoted 5 lines
[PATCH net-next-2.6] l2tp: unmanaged L2TPv3 tunnels fixes
Followup to commit
789a4a2c
(l2tp: Add support for static unmanaged L2TPv3 tunnels)
Quoted 6 lines
Quoted 4 lines
One missing init in
l2tp_tunnel_sock_create()could access random kernel memory, and a bit field should be unsigned.Signed-off-by Eric Dumazet <[email protected]>Applied, thanks Eric.
I am going to work on net/l2tp/l2tp_core.c, since RCU conversion is wrong (but original code was wong too...)
Example :
There is no real protection in following code, since no refcount is taken on session before releasing rcu_read_lock :
static struct l2tp_session *l2tp_session_find_2(struct net *net, u32 session_id)
{
struct l2tp_net *pn = l2tp_pernet(net);
struct hlist_head *session_list =
l2tp_session_id_hash_2(pn, session_id);
struct l2tp_session *session;
struct hlist_node *walk;
rcu_read_lock_bh();
hlist_for_each_entry_rcu(session, walk, session_list, global_hlist) {
if (session->session_id == session_id) {
rcu_read_unlock_bh();
return session;
}
}
rcu_read_unlock_bh();
return NULL;
}