[PATCH v7 bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

From: Mariusz Dudek Add support for separation of eBPF program load and xsk socket creation. This is needed for use-case when you want to privide as little privileges as possible to the data plane application that will handle xsk socket creation and incoming traffic. With this patch the data

[PATCH v7 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

From: Mariusz Dudek Introduce a sample program to demonstrate the control and data plane split. For the control plane part a new program called xdpsock_ctrl_proc is introduced. For the data plane part, some code was added to xdpsock_user.c to act as the data plane entity. Application

[PATCH v7 bpf-next 0/2] libbpf: add support for privileged/unprivileged control separation

From: Mariusz Dudek This patch series adds support for separation of eBPF program load and xsk socket creation. In for example a Kubernetes environment you can have an AF_XDP CNI or daemonset that is responsible for launching pods that execute an application using AF_XDP sockets. It is

Re: [PATCH v6 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

On Thu, Dec 3, 2020 at 3:50 AM Alexei Starovoitov wrote: > > On Wed, Dec 2, 2020 at 2:39 AM wrote: > > int main(int argc, char **argv) > > { > > + struct __user_cap_header_struct hdr = { > > _LINUX_CAPABILITY_VERSION_3, 0 }; > > + struct __user_cap_data_struct data[2] = { { 0 } };

[PATCH v6 bpf-next 0/2] libbpf: add support for privileged/unprivileged control separation

From: Mariusz Dudek This patch series adds support for separation of eBPF program load and xsk socket creation. In for example a Kubernetes environment you can have an AF_XDP CNI or daemonset that is responsible for launching pods that execute an application using AF_XDP sockets. It is

[PATCH v6 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

From: Mariusz Dudek Introduce a sample program to demonstrate the control and data plane split. For the control plane part a new program called xdpsock_ctrl_proc is introduced. For the data plane part, some code was added to xdpsock_user.c to act as the data plane entity. Application

[PATCH v6 bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

From: Mariusz Dudek Add support for separation of eBPF program load and xsk socket creation. This is needed for use-case when you want to privide as little privileges as possible to the data plane application that will handle xsk socket creation and incoming traffic. With this patch the data

[PATCH v5 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

From: Mariusz Dudek Introduce a sample program to demonstrate the control and data plane split. For the control plane part a new program called xdpsock_ctrl_proc is introduced. For the data plane part, some code was added to xdpsock_user.c to act as the data plane entity. Application

[PATCH v5 bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

From: Mariusz Dudek Add support for separation of eBPF program load and xsk socket creation. This is needed for use-case when you want to privide as little privileges as possible to the data plane application that will handle xsk socket creation and incoming traffic. With this patch the data

[PATCH v5 bpf-next 0/2] libbpf: add support for privileged/unprivileged control separation

From: Mariusz Dudek This patch series adds support for separation of eBPF program load and xsk socket creation. In for example a Kubernetes environment you can have an AF_XDP CNI or daemonset that is responsible for launching pods that execute an application using AF_XDP sockets. It is

Re: [PATCH v4 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

On Fri, Nov 27, 2020 at 8:38 AM Magnus Karlsson wrote: > > On Thu, Nov 26, 2020 at 12:10 PM wrote: > > > > From: Mariusz Dudek > > > > Introduce a sample program to demonstrate the control and data > > plane split. For the control plane part a new pro

[PATCH v4 bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

From: Mariusz Dudek Add support for separation of eBPF program load and xsk socket creation. This is needed for use-case when you want to privide as little privileges as possible to the data plane application that will handle xsk socket creation and incoming traffic. With this patch the data

[PATCH v4 bpf-next 0/2] libbpf: add support for privileged/unprivileged control separation

From: Mariusz Dudek This patch series adds support for separation of eBPF program load and xsk socket creation. In for example a Kubernetes environment you can have an AF_XDP CNI or daemonset that is responsible for launching pods that execute an application using AF_XDP sockets. It is

[PATCH v4 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

From: Mariusz Dudek Introduce a sample program to demonstrate the control and data plane split. For the control plane part a new program called xdpsock_ctrl_proc is introduced. For the data plane part, some code was added to xdpsock_user.c to act as the data plane entity. Application

Re: [PATCH v3 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

On Wed, Nov 25, 2020 at 3:42 PM Magnus Karlsson wrote: > > On Wed, Nov 18, 2020 at 9:34 AM wrote: > > > > From: Mariusz Dudek > > > > Introduce a sample program to demonstrate the control and data > > plane split. For the control plane part a new pro

Re: [PATCH v3 bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

On Wed, Nov 25, 2020 at 3:30 PM Magnus Karlsson wrote: > > On Wed, Nov 18, 2020 at 9:34 AM wrote: > > > > From: Mariusz Dudek > > > > Add support for separation of eBPF program load and xsk socket > > creation. > > > > This is needed

[PATCH v3 bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

From: Mariusz Dudek Add support for separation of eBPF program load and xsk socket creation. This is needed for use-case when you want to privide as little privileges as possible to the data plane application that will handle xsk socket creation and incoming traffic. With this patch the data

[PATCH v3 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

From: Mariusz Dudek Introduce a sample program to demonstrate the control and data plane split. For the control plane part a new program called xdpsock_ctrl_proc is introduced. For the data plane part, some code was added to xdpsock_user.c to act as the data plane entity. Application

[PATCH v3 bpf-next 0/2] libbpf: add support for privileged/unprivileged control separation

From: Mariusz Dudek This patch series adds support for separation of eBPF program load and xsk socket creation. In for example a Kubernetes environment you can have an AF_XDP CNI or daemonset that is responsible for launching pods that execute an application using AF_XDP sockets. It is

[PATCH v2 bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

From: Mariusz Dudek Introduce a sample program to demonstrate the control and data plane split. For the control plane part a new program called xdpsock_ctrl_proc is introduced. For the data plane part, some code was added to xdpsock_user.c to act as the data plane entity. Application

[PATCH v2 bpf-next 0/2] libbpf: add support for privileged/unprivileged control separation

From: Mariusz Dudek This patch series adds support for separation of eBPF program load and xsk socket creation. In for example a Kubernetes environment you can have an AF_XDP CNI or daemonset that is responsible for launching pods that execute an application using AF_XDP sockets. It is

[PATCH v2 bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

From: Mariusz Dudek Add support for separation of eBPF program load and xsk socket creation. This is needed for use-case when you want to privide as little privileges as possible to the data plane application that will handle xsk socket creation and incoming traffic. With this patch the data

Re: [PATCH bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

On Wed, Nov 4, 2020 at 10:07 PM Andrii Nakryiko wrote: > > On Wed, Nov 4, 2020 at 1:47 AM wrote: > > > > From: Mariusz Dudek > > > > Add support for separation of eBPF program load and xsk socket > > creation. > > > > This

[PATCH bpf-next 1/2] libbpf: separate XDP program load with xsk socket creation

From: Mariusz Dudek Add support for separation of eBPF program load and xsk socket creation. This is needed for use-case when you want to privide as little privileges as possible to the data plane application that will handle xsk socket creation and

[PATCH bpf-next 2/2] samples/bpf: sample application for eBPF load and socket creation split

From: Mariusz Dudek Introduce a sample program to demonstrate the control and data plane split. For the control plane part a new program called xdpsock_ctrl_proc is introduced. For the data plane part, some code was added to xdpsock_user.c to act as the data plane entity

[PATCH bpf-next 0/2] libbpf: add support for privileged/unprivileged control separation

From: Mariusz Dudek This patch series adds support for separation of eBPF program load and xsk socket creation. In for example a Kubernetes environment you can have an AF_XDP CNI or daemonset that is responsible for launching pods that execute an application