Merge branch 'bpf-ancestor-cgroup-id'

Browse source

Andrey Ignatov says:

====================
This patch set adds new BPF helper bpf_skb_ancestor_cgroup_id that returns
id of cgroup v2 that is ancestor of cgroup associated with the skb at the
ancestor_level.

The helper is useful to implement policies in TC based on cgroups that are
upper in hierarchy than immediate cgroup associated with skb.

v1->v2:
- more reliable check for testing IPv6 to become ready in selftest.
====================

Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>

...

This commit is contained in:

Daniel Borkmann 2018-08-13 01:02:40 +02:00

parent e8d2bec045 5ecd8c2273

commit 2ce3206b9e

9 changed files with 404 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

30

include/linux/cgroup.h

View file

21

include/uapi/linux/bpf.h

View file

28

net/core/filter.c

View file

21

tools/include/uapi/linux/bpf.h

View file

9

tools/testing/selftests/bpf/Makefile

View file

4

tools/testing/selftests/bpf/bpf_helpers.h

View file

62

tools/testing/selftests/bpf/test_skb_cgroup_id.sh Executable file

View file

47

tools/testing/selftests/bpf/test_skb_cgroup_id_kern.c

View file

187

tools/testing/selftests/bpf/test_skb_cgroup_id_user.c

View file