From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from gandalf.ozlabs.org (gandalf.ozlabs.org [150.107.74.76]) by passt.top (Postfix) with ESMTPS id A7FA05A0290 for ; Tue, 23 May 2023 05:05:49 +0200 (CEST) Received: by gandalf.ozlabs.org (Postfix, from userid 1007) id 4QQK2J11blz4x49; Tue, 23 May 2023 13:05:44 +1000 (AEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gibson.dropbear.id.au; s=201602; t=1684811144; bh=/8l7F5R0KrcxA4SdjhATQ9az6BTpe4kJNl/nB3lVNB0=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=ZW2Lb6ukjK4LMbGpyNb0XjQhqpJwRPhfPKB3OquMdg5Q0zgx/BmoOSXXmo5wi2x1b bkoNAuYbFbBQZPXkcLBZTPNRYpE9tB78IgXh+4w5GzZxa+XQoNJJ1tPPa9ITIdiIXo WDndt5lN70M0InaiEvLdHueawP6Ggr3AmlCdM7sg= Date: Tue, 23 May 2023 13:05:30 +1000 From: David Gibson To: Stefano Brivio Subject: Re: [PATCH v3 09/10] conf, pasta: With --config-net, copy all addresses by default Message-ID: References: <20230522174607.2824220-1-sbrivio@redhat.com> <20230522174607.2824220-10-sbrivio@redhat.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="5T4ZURB6gaQC/f2o" Content-Disposition: inline In-Reply-To: <20230522174607.2824220-10-sbrivio@redhat.com> Message-ID-Hash: AIPX5KVYNWM2SWJV2DLNIQA4XLEOXXIA X-Message-ID-Hash: AIPX5KVYNWM2SWJV2DLNIQA4XLEOXXIA X-MailFrom: dgibson@gandalf.ozlabs.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: passt-dev@passt.top, Callum Parsey , me@yawnt.com, lemmi@nerd2nerd.org, Andrea Arcangeli X-Mailman-Version: 3.3.8 Precedence: list List-Id: Development discussion and patches for passt Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --5T4ZURB6gaQC/f2o Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, May 22, 2023 at 07:46:06PM +0200, Stefano Brivio wrote: > Use the newly-introduced NL_DUP mode for nl_addr() to copy all the > addresses associated to the template interface in the outer > namespace, unless --no-copy-addrs (also implied by -a) is given. >=20 > This option is introduced as deprecated right away: it's not expected > to be of any use, but it's helpful to keep it around for a while to > debug any suspected issue with this change. >=20 > This is done mostly for consistency with routes. It might partially > cover the issue at: > https://bugs.passt.top/show_bug.cgi?id=3D47 > Support multiple addresses per address family >=20 > for some use cases, but not the originally intended one: we'll still > use a single outbound address (unless the routing table specifies > different preferred source addresses depending on the destination), > regardless of the address used in the target namespace. >=20 > Link: https://bugs.passt.top/show_bug.cgi?id=3D47 > Signed-off-by: Stefano Brivio Reviewed-by: David Gibson > --- > conf.c | 18 ++++++++++++++++-- > passt.1 | 14 ++++++++++++++ > passt.h | 2 ++ > pasta.c | 5 +++-- > 4 files changed, 35 insertions(+), 4 deletions(-) >=20 > diff --git a/conf.c b/conf.c > index cb1e09a..d8414fe 100644 > --- a/conf.c > +++ b/conf.c > @@ -902,6 +902,8 @@ pasta_opts: > info( " --config-net Configure tap interface in namespace"); > info( " --no-copy-routes DEPRECATED:"); > info( " Don't copy all routes to namespace"); > + info( " --no-copy-addrs DEPRECATED:"); > + info( " Don't copy all addresses to namespace"); > info( " --ns-mac-addr ADDR Set MAC address on tap interface"); > =20 > exit(EXIT_FAILURE); > @@ -1178,6 +1180,7 @@ void conf(struct ctx *c, int argc, char **argv) > {"outbound-if6", required_argument, NULL, 16 }, > {"config-net", no_argument, NULL, 17 }, > {"no-copy-routes", no_argument, NULL, 18 }, > + {"no-copy-addrs", no_argument, NULL, 19 }, > { 0 }, > }; > struct get_bound_ports_ns_arg ns_ports_arg =3D { .c =3D c }; > @@ -1349,6 +1352,13 @@ void conf(struct ctx *c, int argc, char **argv) > warn("--no-copy-routes will be dropped soon"); > c->no_copy_routes =3D 1; > break; > + case 19: > + if (c->mode !=3D MODE_PASTA) > + die("--no-copy-addrs is for pasta mode only"); > + > + warn("--no-copy-addrs will be dropped soon"); > + c->no_copy_addrs =3D 1; > + break; > case 'd': > if (c->debug) > die("Multiple --debug options given"); > @@ -1634,8 +1644,12 @@ void conf(struct ctx *c, int argc, char **argv) > if (*c->sock_path && c->fd_tap >=3D 0) > die("Options --socket and --fd are mutually exclusive"); > =20 > - if (c->mode =3D=3D MODE_PASTA && c->no_copy_routes && !c->pasta_conf_ns) > - die("Option --no-copy-routes needs --config-net"); > + if (c->mode =3D=3D MODE_PASTA && !c->pasta_conf_ns) { > + if (c->no_copy_routes) > + die("Option --no-copy-routes needs --config-net"); > + if (c->no_copy_addrs) > + die("Option --no-copy-addrs needs --config-net"); > + } > =20 > if (!ifi4 && *c->ip4.ifname_out) > ifi4 =3D if_nametoindex(c->ip4.ifname_out); > diff --git a/passt.1 b/passt.1 > index 96ce96e..1ad4276 100644 > --- a/passt.1 > +++ b/passt.1 > @@ -563,6 +563,20 @@ future version. It is not expected to be of any use,= and it simply reflects a > legacy behaviour. If you have any use for this, refer to \fBREPORTING BU= GS\fR > below. > =20 > +.TP > +.BR \-\-no-copy-addrs " " (DEPRECATED) > +With \-\-config-net, do not copy all the addresses associated to the int= erface > +we derive addresses and routes from: set up a single one. Implied by \-a, > +\-\-address. > + > +Default is to copy all the addresses, except for link-local ones, from t= he > +interface from the outer namespace to the target namespace. > + > +Note that this configuration option is \fBdeprecated\fR and will be remo= ved in a > +future version. It is not expected to be of any use, and it simply refle= cts a > +legacy behaviour. If you have any use for this, refer to \fBREPORTING BU= GS\fR > +below. > + > .TP > .BR \-\-ns-mac-addr " " \fIaddr > Configure MAC address \fIaddr\fR on the tap interface in the namespace. > diff --git a/passt.h b/passt.h > index d314596..b51a1e5 100644 > --- a/passt.h > +++ b/passt.h > @@ -183,6 +183,7 @@ struct ip6_ctx { > * @pasta_ifn: Index of namespace interface for pasta > * @pasta_conf_ns: Configure namespace after creating it > * @no_copy_routes: Don't copy all routes when configuring target namesp= ace > + * @no_copy_addrs: Don't copy all addresses when configuring namespace > * @no_tcp: Disable TCP operation > * @tcp: Context for TCP protocol handler > * @no_tcp: Disable UDP operation > @@ -242,6 +243,7 @@ struct ctx { > unsigned int pasta_ifi; > int pasta_conf_ns; > int no_copy_routes; > + int no_copy_addrs; > =20 > int no_tcp; > struct tcp_ctx tcp; > diff --git a/pasta.c b/pasta.c > index 99ef3fc..4054e9a 100644 > --- a/pasta.c > +++ b/pasta.c > @@ -274,11 +274,12 @@ void pasta_ns_conf(struct ctx *c) > =20 > if (c->pasta_conf_ns) { > enum nl_op op_routes =3D c->no_copy_routes ? NL_SET : NL_DUP; > + enum nl_op op_addrs =3D c->no_copy_addrs ? NL_SET : NL_DUP; > =20 > nl_link(1, c->pasta_ifi, c->mac_guest, 1, c->mtu); > =20 > if (c->ifi4) { > - nl_addr(NL_SET, c->ifi4, c->pasta_ifi, AF_INET, > + nl_addr(op_addrs, c->ifi4, c->pasta_ifi, AF_INET, > &c->ip4.addr, &c->ip4.prefix_len, NULL); > nl_route(op_routes, c->ifi4, c->pasta_ifi, AF_INET, > &c->ip4.gw); > @@ -286,7 +287,7 @@ void pasta_ns_conf(struct ctx *c) > =20 > if (c->ifi6) { > int prefix_len =3D 64; > - nl_addr(NL_SET, c->ifi6, c->pasta_ifi, AF_INET6, > + nl_addr(op_addrs, c->ifi6, c->pasta_ifi, AF_INET6, > &c->ip6.addr, &prefix_len, NULL); > nl_route(op_routes, c->ifi6, c->pasta_ifi, AF_INET6, > &c->ip6.gw); --=20 David Gibson | I'll have my music baroque, and my code david AT gibson.dropbear.id.au | minimalist, thank you. NOT _the_ _other_ | _way_ _around_! http://www.ozlabs.org/~dgibson --5T4ZURB6gaQC/f2o Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEO+dNsU4E3yXUXRK2zQJF27ox2GcFAmRsLXMACgkQzQJF27ox 2GfMhA//Sfq0EAsUKbgrNd4QGEynEXg0FR1dCUZYyTp8Hv/9uiXgoFpSaWxzjPvR vAdJymGwPpUjbsqy2VQQ1Ce27N883pRapIFsSjvvpKGoMUGqb+57px0ExOGcenI9 u6IE+FCfqMpovfeI4QeCnYY+1IvOsT0Ow/BcvHf4qKOQRiXK9Bn28miKQnqb3h6h Uz6Gb6NAcn9Wkt194LWaDKdLp6t6cpM9XSIsCvwz8ZFBt3GnrE1GIA6sYijLRG7T sD6UXsBtAiZ55Py0H4okDrrBnPdcJIETnjElqYMVui3yI8US72Jw7nX1PQwOmDXL zYFQVaK4cRfeJDFyvcuWNlYecXcGGwd5GxOkWusGXx3vbqfjFWtwuWd8IvUiVeqr cxUgoXgcwyaPfDDUG/Xn3yh9TfiSuk1aR9JzVjsF7oQcvnKerjeBDpgTV4qAg0EE PnomNhfHj3SxvVLPzEPZy6XyKFiga6JtIoOxofzL0uUXiq3pmMnRsMucOvCqnPSn 5tqDwjJQ44b1MHY60YuUpPLfa7rfN/VbFSzzxQcez/+IA5bMeSSluB+VwT3qTdor PaL86+NJ3/TLYaxcbpQ8qrO1i87DD6U0j7O/HV2TzmTigTODV9UPH2vm1TnIIEg7 h9CE5SAB+cmhcYa5eVhNHSSnUEwctsilhjmmR8NE2zIgcUFLjms= =Ghow -----END PGP SIGNATURE----- --5T4ZURB6gaQC/f2o--