ebpf: add sched_act_type and map it to sk_filter's verifier ops

In order to prepare eBPF support for tc action, we need to add sched_act_type, so that the eBPF verifier is aware of what helper function act_bpf may use, that it can load skb data and read out currently available skb fields. This is bascially analogous to 96be4325f443 ("ebpf: add sched_cls_type and map it to sk_filter's verifier ops"). BPF_PROG_TYPE_SCHED_CLS and BPF_PROG_TYPE_SCHED_ACT need to be separate since both will have a different set of functionality in future (classifier vs action), thus we won't run into ABI troubles when the point in time comes to diverge functionality from the classifier. The future plan for act_bpf would be that it will be able to write into skb->data and alter selected fields mirrored in struct __sk_buff. For an initial support, it's sufficient to map it to sk_filter_ops.

Daniel Borkmann committed 11 years ago

Commit 94caee81 parent 0fa74a43 files · +8 −0Browse files

Unified · Split

3 files

include/uapi/linux/bpf.h +1 −0
kernel/bpf/verifier.c +1 −0
net/core/filter.c +6 −0

include/uapi/linux/bpf.h+1−0

@@ -119,6 +119,7 @@ enum bpf_prog_type { · 118 unmodified lines
119	119	BPF_PROG_TYPE_UNSPEC,
120	120	BPF_PROG_TYPE_SOCKET_FILTER,
121	121	BPF_PROG_TYPE_SCHED_CLS,
	122	+ BPF_PROG_TYPE_SCHED_ACT,
122	123	};
123	124
124	125	#define BPF_PSEUDO_MAP_FD 1

kernel/bpf/verifier.c+1−0

@@ -1180,6 +1180,7 @@ static bool may_access_skb(enum bpf_prog_type type) · 1179 unmodified lines
1180	1180	switch (type) {
1181	1181	case BPF_PROG_TYPE_SOCKET_FILTER:
1182	1182	case BPF_PROG_TYPE_SCHED_CLS:
	1183	+ case BPF_PROG_TYPE_SCHED_ACT:
1183	1184	return true;
1184	1185	default:
1185	1186	return false;

net/core/filter.c+6−0

@@ -1263,10 +1263,16 @@ static struct bpf_prog_type_list sched_cls_type __read_mostly = { · 1262 unmodified lines
1263	1263	.type = BPF_PROG_TYPE_SCHED_CLS,
1264	1264	};
1265	1265
	1266	+static struct bpf_prog_type_list sched_act_type __read_mostly = {
	1267	+ .ops = &sk_filter_ops,
	1268	+ .type = BPF_PROG_TYPE_SCHED_ACT,
	1269	+};
	1270	+
1266	1271	static int __init register_sk_filter_ops(void)
1267	1272	{
1268	1273	bpf_register_prog_type(&sk_filter_type);
1269	1274	bpf_register_prog_type(&sched_cls_type);
	1275	+ bpf_register_prog_type(&sched_act_type);
1270	1276
1271	1277	return 0;
1272	1278	}

ebpf: add sched_act_type and map it to sk_filter's verifier ops

Keyboard shortcuts

General

Issues and pull requests

Issues, pull requests and Inbox

Repository code