Files
kernel/include/uapi/linux
Antony Antony 4e484b3e96 xfrm: rate limit SA mapping change message to user space
Kernel generates mapping change message, XFRM_MSG_MAPPING,
when a source port chage is detected on a input state with UDP
encapsulation set.  Kernel generates a message for each IPsec packet
with new source port.  For a high speed flow per packet mapping change
message can be excessive, and can overload the user space listener.

Introduce rate limiting for XFRM_MSG_MAPPING message to the user space.

The rate limiting is configurable via netlink, when adding a new SA or
updating it. Use the new attribute XFRMA_MTIMER_THRESH in seconds.

v1->v2 change:
	update xfrm_sa_len()

v2->v3 changes:
	use u32 insted unsigned long to reduce size of struct xfrm_state
	fix xfrm_ompat size Reported-by: kernel test robot <lkp@intel.com>
	accept XFRM_MSG_MAPPING only when XFRMA_ENCAP is present

Co-developed-by: Thomas Egerer <thomas.egerer@secunet.com>
Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
Signed-off-by: Antony Antony <antony.antony@secunet.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
2021-12-23 09:32:51 +01:00
..
2021-09-14 08:46:08 +02:00
2021-01-25 18:44:44 +01:00
2020-12-28 14:21:31 +00:00
2021-11-01 13:36:08 +00:00
2021-08-23 13:19:09 +02:00
2021-10-29 12:38:43 +02:00
2021-08-10 13:32:40 -04:00
2021-10-28 10:20:31 +02:00
2021-10-07 13:51:11 +02:00
2021-02-08 13:01:24 +01:00
2021-10-06 12:05:51 +00:00
2021-11-15 07:53:10 -08:00
2021-06-03 15:31:34 -07:00
2021-02-26 09:41:03 -08:00
2021-05-21 15:03:50 +02:00
2021-03-10 09:34:06 +01:00
2021-10-26 14:58:45 +01:00
2021-10-14 23:06:28 +02:00
2021-07-06 10:37:46 -05:00
2021-10-18 17:20:50 +02:00
2021-03-10 09:34:06 +01:00
2021-10-16 14:58:13 +01:00
2021-06-23 12:56:08 -07:00
2021-01-07 16:17:32 +01:00
2021-09-16 14:36:26 +01:00
2021-06-12 13:16:45 -07:00