Transparent Proxying Patches, Take 4
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest13 patches 5 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/13 | Loosen source address check on IPv4 outputinclude/ net/ | +14 | 0 replies | |
| 2/13 | Implement IP_TRANSPARENT socket optioninclude/ include/ include/ +3 more | +18 | 0 replies | |
| 3/13 | Allow binding to non-local addresses if IP_TRANSPARENT is setnet/ | +1 | 0 replies | |
| 4/13 | Conditionally enable transparent flow flag when connectinginclude/ | +4 | 0 replies | |
| 5/13 | Handle TCP SYN+ACK/ACK/RST transparencyinclude/ include/ net/ +3 more | +29 | 0 replies | |
| 6/13 | Port redirection support for TCPinclude/ include/ net/ +2 more | +6 | 0 replies | |
| 7/13 | Export UDP socket lookup functioninclude/ net/ | +12 | 0 replies | |
| 8/13 | Split Netfilter IPv4 defragmentation into a separate moduleinclude/ net/ net/ +2 more | +110 | 3 replies | |
| 9/13 | iptables tproxy coreinclude/ net/ net/ +1 more | +141 | 0 replies | |
| 10/13 | iptables socket matchnet/ net/ net/ | +96 | 1 reply | |
| 11/13 | iptables TPROXY targetinclude/ net/ net/ +1 more | +125 | 1 reply | |
| 12/13 | Don't lookup the socket if there's a socket attached to the skbnet/ | +8 | 0 replies | |
| 13/13 | Don't lookup the socket if there's a socket attached to the skbnet/ | +8 | 0 replies |
Reviews trailers per patch
3 of 13 patches have a Reviewed-by or Acked-by.
| Patch | Patrick McHardy |
|---|---|
| 1/13 | A-b |
| 2/13 | A-b |
| 3/13 | A-b |
| 4/13 | |
| 5/13 | |
| 6/13 | |
| 7/13 | |
| 8/13 | |
| 9/13 | |
| 10/13 | |
| 11/13 | |
| 12/13 | |
| 13/13 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH 00/13] Transparent Proxying Patches, Take 4
Hi Patrick,
Here's the next round of tproxy patches, hopefully fixing problems which came up last time I've posted these patches[1].
I'd like to thank you and Jan Engelhardt the huge help you've provided. (Jan himself did a lot of fixes/cleanups!)
The most important changes relative to the previous versions[1] are:
* the patch implementing the propagation of IP_TRANSPARENT to routing output now does not change the signature of request_sock_opt.send_ack but uses a flag in inet_request_sock itself
* TCP port redirection support patch
adds loc_port to struct inet_request_sock unconditionally
* TPROXY target is an xt_* target now and has proper 32 bit mark values in the target info structure
Additionally there are code cleanups all over the place (thanks Jan).
References:
[1] http://marc.info/?l=netfilter-devel&m=119118672703285&w=2
Signature · 1 line
KOVACS Krisztian