Re: [PATCH iproute2 -next] tc: built-in eBPF exec proxy

2015-04-16 Thread Daniel Borkmann
On 04/16/2015 07:48 PM, Alexei Starovoitov wrote: On 4/15/15 7:52 AM, Daniel Borkmann wrote: File descriptors, based on their id, are being fetched from the same unix domain socket as demonstrated in the bpf_agent, the shell spawned via execvpe(2) and the map fds passed over the environment, an

Re: [PATCH iproute2 -next] tc: built-in eBPF exec proxy

2015-04-16 Thread Alexei Starovoitov
On 4/15/15 7:52 AM, Daniel Borkmann wrote: File descriptors, based on their id, are being fetched from the same unix domain socket as demonstrated in the bpf_agent, the shell spawned via execvpe(2) and the map fds passed over the environment, and thus are made available to applications in the fa

Re: [PATCH iproute2 -next] tc: built-in eBPF exec proxy

2015-04-15 Thread Hannes Frederic Sowa
On Wed, Apr 15, 2015, at 16:52, Daniel Borkmann wrote: > This work follows upon commit 6256f8c9e45f ("tc, bpf: finalize eBPF > support for cls and act front-end") and takes up the idea proposed by > Hannes Frederic Sowa to spawn a shell (or any other command) that holds > generated eBPF map file de

[PATCH iproute2 -next] tc: built-in eBPF exec proxy

2015-04-15 Thread Daniel Borkmann
This work follows upon commit 6256f8c9e45f ("tc, bpf: finalize eBPF support for cls and act front-end") and takes up the idea proposed by Hannes Frederic Sowa to spawn a shell (or any other command) that holds generated eBPF map file descriptors. File descriptors, based on their id, are being fetc