Merge branch 'cgroup-helpers'

Daniel Borkmann says: ==================== This adds various straight-forward helper improvements and additions to BPF cgroup based connect(), sendmsg(), recvmsg() and bind-related hooks which would allow to implement more fine-grained policies and improve current load balancer limitations we're seeing. For details please see individual patches. I've tested them on Kubernetes & Cilium and also added selftests for the small verifier extension. Thanks! ==================== Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2026-11-04 19:54:59 +00:00 · 2020-03-27 19:40:39 -07:00 · 2020-03-27 19:40:39 -07:00 · 2cf69d3fa5
commit 2cf69d3fa5
parent f54a5bba12 23599ada0e
11 changed files with 336 additions and 14 deletions
--- a/include/linux/bpf.h
+++ b/include/linux/bpf.h
--- a/include/net/cls_cgroup.h
+++ b/include/net/cls_cgroup.h
--- a/include/net/net_namespace.h
+++ b/include/net/net_namespace.h
--- a/include/uapi/linux/bpf.h
+++ b/include/uapi/linux/bpf.h
--- a/kernel/bpf/core.c
+++ b/kernel/bpf/core.c
--- a/kernel/bpf/helpers.c
+++ b/kernel/bpf/helpers.c
--- a/kernel/bpf/verifier.c
+++ b/kernel/bpf/verifier.c
--- a/net/core/filter.c
+++ b/net/core/filter.c
--- a/net/core/net_namespace.c
+++ b/net/core/net_namespace.c
--- a/tools/include/uapi/linux/bpf.h
+++ b/tools/include/uapi/linux/bpf.h
--- a/tools/testing/selftests/bpf/verifier/ctx.c
+++ b/tools/testing/selftests/bpf/verifier/ctx.c