On 11/2/18 1:10 PM, Mike Manning wrote: > From: Robert Shearman <rshea...@vyatta.att-mail.com> > > Change the inet socket lookup to avoid packets arriving on a device > enslaved to an l3mdev from matching unbound sockets by removing the > wildcard for non sk_bound_dev_if and instead relying on check against > the secondary device index, which will be 0 when the input device is > not enslaved to an l3mdev and so match against an unbound socket and > not match when the input device is enslaved. > > Change the socket binding to take the l3mdev into account to allow an > unbound socket to not conflict sockets bound to an l3mdev given the > datapath isolation now guaranteed. > > Signed-off-by: Robert Shearman <rshea...@vyatta.att-mail.com> > Signed-off-by: Mike Manning <mmann...@vyatta.att-mail.com> > --- > Documentation/networking/vrf.txt | 9 +++++---- > include/net/inet6_hashtables.h | 5 ++--- > include/net/inet_hashtables.h | 13 ++++++------- > include/net/inet_sock.h | 13 +++++++++++++ > net/ipv4/inet_connection_sock.c | 13 ++++++++++--- > net/ipv4/inet_hashtables.c | 20 +++++++++++++++----- > 6 files changed, 51 insertions(+), 22 deletions(-) >
Reviewed-by: David Ahern <dsah...@gmail.com>
