passt: new version 2025_12_09.c3f1ba7 available

passt: new version 2025_12_09.c3f1ba7 available

[Stefano Brivio]

The new version with tag 2025_12_09.c3f1ba7 includes the following changes:

    c3f1ba7 tcp_splice, flow: Add socket to epoll set before connect(), drop assert
    e8b56a3 fedora: Fix build on Fedora 43, selinux_requires_min not available on Copr builders
    c93515c tcp: Skip redundant ACK on partial sendmsg() failure
    e0f1330 tcp: Send a duplicate ACK also on complete sendmsg() failure
    2b5c906 tcp: Allow exceeding the available sending buffer size in window advertisements
    cf1925f tcp: Don't limit window to less-than-MSS values, use zero instead
    9139e60 tcp: Acknowledge everything if it looks like bulk traffic, not interactive
    28f413d tcp: Don't clear ACK_TO_TAP_DUE if we're advertising a zero-sized window
    000601b tcp: Adaptive interval based on RTT for socket-side acknowledgement checks
    920a479 tcp: Limit advertised window to available, not total sending buffer size
    f423e12 tcp: Change usage factor of sending buffer in tcp_get_sndbuf() to 75%
    6305b6c tcp, util: Add function for scaling to linearly interpolated factor, use it
    5d83844 iov: Fix coding style of basic (non-IOV_TAIL) parts
    0cb8f90 tcp, udp: Pad batched frames for vhost-user modes to 60 bytes (802.3 minimum)
    68b0a36 tcp, udp: Pad batched frames to 60 bytes (802.3 minimum) in non-vhost-user modes
    b9cd36f udp: Fix coding style for comment to enum udp_iov_idx
    e3e8af7 tcp: Fix coding style for comment to enum tcp_iov_parts
    1e51971 tap: Pad non-batched frames to 802.3 minimum (60 bytes) if needed
    822ce09 test: Update Makefile to avoid failing on missing images
    4ddd59b conf: Separate local mode for each IP version, don't enable disabled IP version
    834982c vu_common: Clarify prototype of vu_collect()
    7c7be67 test: Expand tmux right status bar to fit pass/fail/skipped counter and time
    aa809d3 tcp: Enable SO_KEEPALIVE if we see keep-alive segments from container / guest
    9e2e381 seccomp: Fix build and operation on 32-bit musl targets
    fdbb4ef fwd: Preserve non-standard loopback address when splice forwarding
    e3c4c41 tcp: Always populate oaddr field for socket initiated flows
    cec1ca8 util: Rename sock_l4_dualstack() to sock_l4_dualstack_any()
    653705c tcp, udp: Bind outbound listening sockets by interface instead of address
    e77cbf0 tcp, udp: Remove fallback if creating dual stack socket fails
    e6f6eb2 util: Fix setting of IPV6_V6ONLY socket option
    74e6f12 udp: Move udp_sock_init() special case to its caller
    c8d4683 udp: Unify some more inbound/outbound parts of udp_sock_init()
    860d3b1 tcp: Merge tcp_ns_sock_init[46]() into tcp_sock_init_one()
    3b8b834 util, flow, pif: Simplify sock_l4_sa() interface
    b0523f6 inany: Let length of sockaddr_inany be implicit from the family
    484dcfa flow: Remove bogus @path field from flowside_sock_args
    f37db87 conf: More useful errors for kernels without SO_BINDTODEVICE
    0ae7b8c util: Extend sock_probe_mem() to sock_probe_features()
    10e850a util: Correct error message on SO_BINDTODEVICE failure
    1a83487 tcp: Clamp the retry timeout
    3dde0e0 tcp: Update data retransmission timeout
    0e8df13 tcp: Resend SYN for inbound connections
    ffecfaf util: Introduce read_file() and read_file_integer() function
    785214c tcp: Rename "retrans" to "retries"
    2002c7d arp/ndp: don't send messages on uninitialized tap interface
    391c15a test: Fix IPv6 address/prefix mismatch error
    95ab87b spec: use %selinux_requires_min macro, drop overlapping dependencies
    be1583f fwd: Don't explicitly exclude reverse-direction TCP ports for UDP
    fd3fc8d fwd: Exclude ports based on prior mapping state
    bdbdf4e Revert "fwd: Update all port maps before applying exclusions"
    2c6590d udp: Use IP_FREEBIND for flow sockets as well as listening sockets
    75b8bb9 tcp: Properly remove sockets from epoll loop when connection is closed
    a36031a seccomp.sh: Quote tr character ranges to prevent glob expansion
    1d16439 contrib/selinux: use regex instead of SELinux template
    f6b6118 tcp, udp: Don't exclude ports in {tcp,udp}_port_rebind()
    81942a2 fwd: Update all port maps before applying exclusions
    942bfdb fwd: Check forwarding mode in fwd_scan_ports_*() rather than caller
    06c3dcc fwd: Share port scanning logic between init and timer cases
    1754f61 fwd: Move port exclusion handling from procfs_scan_listen() to callers
    1bc7d54 fwd: Consolidate scans (not rebinds) in fwd.c
    260075b tcp, udp, fwd: Run all port scanning from a single timer
    1f2c08b icmp: Remove vestiges of ICMP timer
    57446ca passt: Move main event loop processing into passt_worker()
    aaa8f34 udp: Use epoll instance management for UDP flows
    ca93124 icmp: Use epoll instance management for ICMP flows
    dd5302d tcp, flow: Replace per-connection in_epoll flag with an epollid in flow_common
    05972c7 util: Move epoll registration out of sock_l4_sa()
    965ea66 epoll_ctl: Extract epoll operations
    8bfa47a util: Simplify epoll_del() interface to take epollfd directly
    3a9dbe0 icmp: let icmp use mac address from flowside structure
    ad72098 tap: change signature of function tap_push_l2h()
    860a487 tcp: forward external source MAC address through tap interface
    627d5f7 udp: forward external source MAC address through tap interface
    5d35ac3 flow: add MAC address of LAN local remote hosts to flow
    7917155 arp/ndp: send ARP announcement / unsolicited NA when neigbour entry added
    e456c02 arp/ndp: respond with true MAC address of LAN local remote hosts
    45869d6 fwd: Add cache table for ARP/NDP contents
    3c46901 netlink: add subscription on changes in NDP/ARP table
    3b9c7f8 Add reverse Christmas tree to CONTRIBUTING.md
    7bb150c fwd: Fix misspelling
    b2ccb6d test: Fix the escaping issue in memory/passt test
    812a7c6 test: Update the threshold value for some perf tests
    4fb4c31 tap: Update some function comments for accuracy
    8a6def6 passt: Rename EPOLL_EVENTS to NUM_EPOLL_EVENTS
    720cc0b Fix the wrong command in CONTRIBUTING.md
    6d84c90 test: For missing static checkers, skip rather than failing tests
    5149f34 test: Add some missing quoting in exeter runner
    898cf50 test: Use ${} consistently in lib/exeter
    5da0316 isolation: keep CAP_DAC_OVERRIDE initially
    518d8c1 tcp: Clarify logic calculating how much guest data to ack
    a947839 tcp: On partial send (incomplete sendmsg()), request a retransmission right away
    b145441 tcp: Don't consider FIN flags with mismatching sequence
    8efa80b tcp: Completely ignore data segment in CLOSE-WAIT state, log a message
    b3217aa tcp: Fix ACK sequence on FIN to tap
    2a16cdf test: Add linting of Python test scripts
    81fd66a test: Don't delete exetool on make clean
    2274c3a cppcheck: Suppress variable scope warnings in dhcpv6()
    ee9b236 cppcheck: Suppress a buggy cppcheck warning
    065d199 cppcheck: Suppress the suppression of a suppression
    b4b3b08 clang-tidy: Suppress redundant expression warning
    4d9c35b test: Update passt.mbuto and passt.mem.mbuto
    a96a962 netlink: Don't require address to be global, just not link local
    7086781 test: Fix printf error when debug is enabled
    c54ef9e test: Update README.md
    f4729be test: Update mbuto profile to fix the symlink of /bin
    de28c20 test: Update lib/term for clearer output when DEBUG is enabled
    f07d7b0 test: fix 'make assets' failure as root
    e81c692 tap: Drop frames if no client connected

    https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7

Packages:

- Alpine Linux:
  https://pkgs.alpinelinux.org/packages?name=passt

- Arch Linux:
  https://www.archlinux.org/packages/extra/x86_64/passt/
  https://archlinuxarm.org/packages/aarch64/passt
  https://archlinuxarm.org/packages/armv7h/passt

- Chimera:
  https://pkgs.chimera-linux.org/packages?name=passt

- Clear Linux:
  https://github.com/clearlinux-pkgs/passt/

- Copr (CentOS Stream, EPEL, Fedora, Mageia):
  https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/9888020/
  permanent mirror: https://passt.top/builds/copr/0^20251209.gc3f1ba7/

- Debian tracker:
  https://tracker.debian.org/pkg/passt

- Fedora updates:
  https://bodhi.fedoraproject.org/updates/?packages=passt

- Gentoo versions:
  https://packages.gentoo.org/packages/net-misc/passt

- GNU Guix:
  https://packages.guix.gnu.org/packages/passt/

- Homebrew:
  https://formulae.brew.sh/formula/passt

- NixOS:
  https://github.com/NixOS/nixpkgs/tree/nixos-unstable/pkgs/by-name/pa/passt

- openSUSE:
  https://software.opensuse.org/package/passt

- OpenMandriva:
  https://github.com/OpenMandrivaAssociation/passt/tree/master

- PLD Linux:
  https://git.pld-linux.org/cgi-bin/gitweb.cgi?p=packages/passt.git

- Solus:
  https://github.com/getsolus/packages/tree/main/packages/p/passt

- Ubuntu tracker:
  https://launchpad.net/ubuntu/+source/passt

- Void Linux:
  https://voidlinux.org/packages/?q=passt

- Static builds:
  - Package for other RPM-based distributions, x86_64 only:
    https://passt.top/builds/latest/x86_64/passt-gc3f1ba7-1.x86_64.rpm

  - x86_64 static binaries:
    https://passt.top/builds/latest/x86_64/

  - Debian package, from x86_64 static build:
    https://passt.top/builds/latest/x86_64/passt_0c3f1ba7-1_all.deb

-- 
Stefano