Re: [PATCH bpf-next 06/11] bpf: add bpf_skb_cgroup_id helper

2018-05-29 Thread Daniel Borkmann
On 05/29/2018 02:15 PM, Quentin Monnet wrote: > Hi Daniel, > > 2018-05-28 02:43 UTC+0200 ~ Daniel Borkmann >> Add a new bpf_skb_cgroup_id() helper that allows to retrieve the >> cgroup id from the skb's socket. This is useful in particular to >> enable bpf_get_cgroup_classid()-like behavior for c

Re: [PATCH bpf-next 06/11] bpf: add bpf_skb_cgroup_id helper

2018-05-29 Thread Quentin Monnet
Hi Daniel, 2018-05-28 02:43 UTC+0200 ~ Daniel Borkmann > Add a new bpf_skb_cgroup_id() helper that allows to retrieve the > cgroup id from the skb's socket. This is useful in particular to > enable bpf_get_cgroup_classid()-like behavior for cgroup v1 in > cgroup v2 by allowing ID based matching o

[PATCH bpf-next 06/11] bpf: add bpf_skb_cgroup_id helper

2018-05-27 Thread Daniel Borkmann
Add a new bpf_skb_cgroup_id() helper that allows to retrieve the cgroup id from the skb's socket. This is useful in particular to enable bpf_get_cgroup_classid()-like behavior for cgroup v1 in cgroup v2 by allowing ID based matching on egress. This can in particular be used in combination with appl