From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: passt.top; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: passt.top; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=D0Zin4ea; dkim-atps=neutral Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by passt.top (Postfix) with ESMTPS id C75835A0271 for ; Sat, 06 Sep 2025 04:12:02 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1757124721; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=/zKkKNliYGlqvv4N5DjHhcy0CQosr9ovgdezWw1jbkA=; b=D0Zin4ea3/1rupljeBE+yZs86iLi/Nt6Py5I6FSexVVlogrRKsvP+EUvVx+nIVJdhV3iyQ D53lHySyTTaMj65bBO5Z+C8a5KRgN8e1zvHDrzwi9HA5d47GMUrJyOvUmg8EurVkyua/Ag uuk3Ao35IdJyKXkPyNhLjOd7ONLAZ6E= Received: from mx-prod-mc-06.mail-002.prod.us-west-2.aws.redhat.com (ec2-35-165-154-97.us-west-2.compute.amazonaws.com [35.165.154.97]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-183-Z03u5GqZOnijba6e4v_KnQ-1; Fri, 05 Sep 2025 22:11:57 -0400 X-MC-Unique: Z03u5GqZOnijba6e4v_KnQ-1 X-Mimecast-MFC-AGG-ID: Z03u5GqZOnijba6e4v_KnQ_1757124717 Received: from mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.93]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-06.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 1322C1800562; Sat, 6 Sep 2025 02:11:57 +0000 (UTC) Received: from jmaloy-thinkpadp16vgen1.rmtcaqc.csb (unknown [10.22.88.21]) by mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 0703018003FC; Sat, 6 Sep 2025 02:11:54 +0000 (UTC) From: Jon Maloy To: sbrivio@redhat.com, dgibson@redhat.com, david@gibson.dropbear.id.au, jmaloy@redhat.com, passt-dev@passt.top Subject: [PATCH v5 00/10] Use true MAC address of LAN local remote hosts Date: Fri, 5 Sep 2025 22:11:44 -0400 Message-ID: <20250906021154.2760611-1-jmaloy@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.93 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: 8a3Vd1CVdq1GJTPHnHTT-Oi6eRluIy4ZJP6Y5Scx4nc_1757124717 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Message-ID-Hash: M4Q67ZGMR7GRTBQHB27WGTHS6HGTNNZO X-Message-ID-Hash: M4Q67ZGMR7GRTBQHB27WGTHS6HGTNNZO X-MailFrom: jmaloy@redhat.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.8 Precedence: list List-Id: Development discussion and patches for passt Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Bug #120 asks us to use the true MAC addresses of LAN local remote hosts, since some programs need this information. These commits introduces this for ARP, NDP, UDP, TCP and ICMP. --- v3: Updated according to feedback from Stefano and David: - Made the ARP/NDP lookup call filter out the requested address by itself, qualified by the index if the template interface - Moved the flow specific MAC address from struct flowside to struct flow_common. v4: - Updated according to feedback from David and Stefan - Added a cache table for ARP/NDP table contents v5: - Updated according to feedback from David and Stefan - Added cache table entries to FIFO/LRU queue - New criteria for when to consult ARP/NDP Jon Maloy (10): netlink: add function to extract MAC addresses from NDP/ARP table fwd: Added cache table for ARP/NDP contents fwd: Add entries of ARP/NDP cache table to a FIFO/LRU queue arp/ndp: respond with true MAC address of LAN local remote hosts flow: add MAC address of LAN local remote hosts to flow udp: forward external source MAC address through tap interface tcp: forward external source MAC address through tap interface tap: change signature of function tap_push_l2h() tcp: make tcp_rst_no_conn() respond with correct MAC address icmp: let icmp use mac address from flowside structure arp.c | 9 +- conf.c | 2 + flow.c | 2 + flow.h | 2 + fwd.c | 303 ++++++++++++++++++++++++++++++++++++++++++++++++- fwd.h | 13 +++ icmp.c | 8 +- inany.c | 1 + ndp.c | 10 +- netlink.c | 82 +++++++++++++ netlink.h | 2 + passt.c | 9 +- passt.h | 3 +- pasta.c | 2 +- tap.c | 23 ++-- tap.h | 7 +- tcp.c | 26 ++++- tcp.h | 2 +- tcp_buf.c | 37 +++--- tcp_internal.h | 4 +- tcp_vu.c | 5 +- udp.c | 57 ++++++---- udp.h | 2 +- 23 files changed, 530 insertions(+), 81 deletions(-) -- 2.50.1