From: Ralf Lici <ralf@mandelbit.com>
To: openvpn-devel@lists.sourceforge.net
Date: Fri, 28 Aug 2026 16:50:21 +0200
Message-ID: <cover.1787925761.git.ralf@mandelbit.com>
MIME-Version: 1.0
Subject: [Openvpn-devel] [PATCH ovpn net v3 0/6] ovpn: fix UDP route cache
 and endpoint handling
Precedence: list
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: openvpn-devel-bounces@lists.sourceforge.net

Hi,

This is v3 of a net series that fixes several related issues in ovpn's
UDP endpoint and route-cache handling. This version was rebased on top
of net and includes suggestions from Sabrina. The former patch 5/5 was
dropped from this series and will be sent as RFC on netdev, where it is
more appropriate since it involves changes broader than ovpn alone.

This series preserves IPv6 scope IDs supplied through netlink, handles
unspecified source addresses correctly, invalidates cached routes when
mutable socket route inputs change and avoids in-place updates of
RCU-published peer binds.

Support for honoring UDP sockets bound to a device or local address will
follow separately for net-next, after these route-cache fixes are
available there.

Cheers,

Ralf Lici
Mandelbit Srl

---
Changes since v2 https://lore.kernel.org/openvpn-devel/cover.1785308184.git.ralf@mandelbit.com/
- Split former patch 4/5 into three separate patches. (Sabrina)
- Dropped former patch 5/5 from this series as it introduces IPv6
  routing changes and needs to be discussed as an RFC on netdev.
  (Sabrina)

Changes since v1 https://lore.kernel.org/openvpn-devel/cover.1785253480.git.ralf@mandelbit.com
- Patch 5/5: add memory barriers around IPv6 FIB generation reads to
  avoid reordering on weakly ordered architectures (Sashiko).

Ralf Lici (6):
  ovpn: preserve IPv6 scope id for netlink peer endpoints
  ovpn: skip UDP source validation for unspecified addresses
  ovpn: track UDP socket route key for peer dst cache
  ovpn: validate peer state before caching UDP dst
  ovpn: replace bind when learning local endpoint
  ovpn: replace bind when clearing stale local source

 drivers/net/ovpn/netlink.c |   6 ++
 drivers/net/ovpn/peer.c    |  44 ++++++-----
 drivers/net/ovpn/peer.h    |  19 ++++-
 drivers/net/ovpn/udp.c     | 193 +++++++++++++++++++++++++++++++++++++--------
 4 files changed, 206 insertions(+), 56 deletions(-)


base-commit: 1b78070aaef63512688aebfbc82365ef9d6660f1
-- 
2.55.0


_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel