On 5/8/20 7:46 PM, Stanislav Fomichev wrote:
We want to have a tighter control on what ports we bind to in
the BPF_CGROUP_INET{4,6}_CONNECT hooks even if it means
connect() becomes slightly more expensive.
The series goes like this:
1. selftests: move existing helpers that make it easy to create
listener threads into common test_progs part
2. selftests: move some common functionality into network_helpers
3. do small refactoring of __inet{,6}_bind() flags to make it easy
to extend them with the additional flags
4. remove the restriction on port being zero in bpf_bind() helper;
add new bind flag to prevent POST_BIND hook from being called
Acked-by: Andrey Ignatov <r...@fb.com>
Acked-by: Martin KaFai Lau <ka...@fb.com>
Stanislav Fomichev (4):
selftests/bpf: generalize helpers to control background listener
selftests/bpf: move existing common networking parts into
network_helpers
net: refactor arguments of inet{,6}_bind
bpf: allow any port in bpf_bind helper
Applied, thanks!