Message ID | 1685598425-1296-11-git-send-email-yifeid@nvidia.com |
---|---|
State | New |
Headers | show
Return-Path: <kernel-team-bounces@lists.ubuntu.com> X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com (client-ip=91.189.94.19; helo=huckleberry.canonical.com; envelope-from=kernel-team-bounces@lists.ubuntu.com; receiver=<UNKNOWN>) Authentication-Results: legolas.ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=Nvidia.com header.i=@Nvidia.com header.a=rsa-sha256 header.s=selector2 header.b=CDZX6OJ4; dkim-atps=neutral Received: from huckleberry.canonical.com (huckleberry.canonical.com [91.189.94.19]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4QWwCQ12kyz20QB for <incoming@patchwork.ozlabs.org>; Thu, 1 Jun 2023 15:48:02 +1000 (AEST) Received: from localhost ([127.0.0.1] helo=huckleberry.canonical.com) by huckleberry.canonical.com with esmtp (Exim 4.86_2) (envelope-from <kernel-team-bounces@lists.ubuntu.com>) id 1q4bA7-0007fv-Iv; Thu, 01 Jun 2023 05:47:51 +0000 Received: from mail-sn1nam02on2050.outbound.protection.outlook.com ([40.107.96.50] helo=NAM02-SN1-obe.outbound.protection.outlook.com) by huckleberry.canonical.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.86_2) (envelope-from <yifeid@nvidia.com>) id 1q4bA1-0007TW-A9 for kernel-team@lists.ubuntu.com; Thu, 01 Jun 2023 05:47:45 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jJ15SeZSl+jWLYV44ymO/AiUMAN38tRvPT8UvxjEwQxinIzU9S7fiW/pYne6aPVzejsQL+l30wwv5AzEDejyqrSaYyM+cc0ICdoryXqL202VFoCFaxwvX5KfRwgFj8MzxWngrbEvPHkM/2rJIWsKxtML7GjJxJAbeMIKnK+asteTBXrtu0Ile7RNQWwlR7n7VdfueA9FBGh8HeOFznkTZDgCAldodV3PnOqFgWNjSOgAV+X8KuoZb3npptFuEVE+VIVyjAl/Ep8xsMEe+lBTSWkEXBTkXfI9A96CKMSGCdw8y2zuJJ4inn3+BXRcn2Q6yqf1lJ2eopCEzQDnTuy3yg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=zdCIRxsQGMpgReGT+GS9hBCc0r4uFJua7OU0s6KiiXY=; b=i5uUFDBMUcfX5y/8v7Elpby6bczRJJjVLS0CGIN9x18/JmY5qz7KcD7XWBhD30wCdF0f3+xBt5smSkwulYguAoV8xHhaHasBhl2QcDJTuYv0NGTiqJ1sSJPrQXFDeEi6W/49BvuikXGHuS0OdaBnXOldpz4RygoYVp0Wgvir0RWwrMidzwYYVIpPlRSAlQZ25jr0Kfv5TvQK8uODIYWux0otXf9PHKyuEyu+i4eF3phK+1jyJI486nWsijtxe3zeHAjIDtMpNJEopsUpCdwUDwC7gp1JChRU8x1/E4VpCPy0BQN5Ay45whgxB8HvcPjE4PGO52ToXaxQt869wHSkdg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 216.228.118.232) smtp.rcpttodomain=canonical.com smtp.mailfrom=nvidia.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=nvidia.com; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zdCIRxsQGMpgReGT+GS9hBCc0r4uFJua7OU0s6KiiXY=; b=CDZX6OJ4VLCCvhv2u7o0ZXIdOdW4OTKrSGWxRrpfHWh0kw+ZT9cVLusLxmaDFx3eah+eMQ/QD0PFaUrmlFeNP7fMKM9oE4QEzQZu2OQEhy/ps/mNG+xm4fXJHmRHFuR3wb0YykXfdyHEQgXTz+Rv3K1U3NsRF31GQSWRY1P4y57a0TUD2WgcnNHR+6lbRyTs3+enYadHDahXcdo/0vP9k55HWxyn5wO6focvov+oKscvH+rrs7xhp+HlUIXCir1QT8pMtcshsEdrNfVRaATCztCIMKzpvs4pJqpppTIh2E4iLubtNoOzFz71BNA84KLzqV+RloTsZGj7uBp2wBFdYg== Received: from MW4P220CA0011.NAMP220.PROD.OUTLOOK.COM (2603:10b6:303:115::16) by PH8PR12MB6723.namprd12.prod.outlook.com (2603:10b6:510:1ce::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6433.24; Thu, 1 Jun 2023 05:47:41 +0000 Received: from CO1NAM11FT028.eop-nam11.prod.protection.outlook.com (2603:10b6:303:115:cafe::74) by MW4P220CA0011.outlook.office365.com (2603:10b6:303:115::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6455.23 via Frontend Transport; Thu, 1 Jun 2023 05:47:41 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 216.228.118.232) smtp.mailfrom=nvidia.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=nvidia.com; Received-SPF: Pass (protection.outlook.com: domain of nvidia.com designates 216.228.118.232 as permitted sender) receiver=protection.outlook.com; client-ip=216.228.118.232; helo=mail.nvidia.com; pr=C Received: from mail.nvidia.com (216.228.118.232) by CO1NAM11FT028.mail.protection.outlook.com (10.13.175.214) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6455.23 via Frontend Transport; Thu, 1 Jun 2023 05:47:40 +0000 Received: from drhqmail203.nvidia.com (10.126.190.182) by mail.nvidia.com (10.127.129.5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.986.5; Wed, 31 May 2023 22:47:27 -0700 Received: from drhqmail201.nvidia.com (10.126.190.180) by drhqmail203.nvidia.com (10.126.190.182) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.986.37; Wed, 31 May 2023 22:47:27 -0700 Received: from mtl123.mtl.labs.mlnx (10.127.8.10) by mail.nvidia.com (10.126.190.180) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.986.37 via Frontend Transport; Wed, 31 May 2023 22:47:26 -0700 Received: from sw-mtx-008.mtx.labs.mlnx. (sw-mtx-008.mtx.labs.mlnx [10.9.150.35]) by mtl123.mtl.labs.mlnx (8.14.4/8.14.4) with ESMTP id 3515l65Y018950; Thu, 1 Jun 2023 08:47:23 +0300 From: Tony Duan <yifeid@nvidia.com> To: <kernel-team@lists.ubuntu.com> Subject: [SRU][J:linux-bluefield][PATCH v3 10/11] netfilter: nf_conntrack: allow early drop of offloaded UDP conns Date: Thu, 1 Jun 2023 00:47:04 -0500 Message-ID: <1685598425-1296-11-git-send-email-yifeid@nvidia.com> X-Mailer: git-send-email 1.8.3.1 In-Reply-To: <1685598425-1296-1-git-send-email-yifeid@nvidia.com> References: <1685598425-1296-1-git-send-email-yifeid@nvidia.com> MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CO1NAM11FT028:EE_|PH8PR12MB6723:EE_ X-MS-Office365-Filtering-Correlation-Id: 0f075a97-1b2c-4774-825b-08db6263b6a9 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:216.228.118.232; CTRY:US; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:mail.nvidia.com; PTR:dc7edge1.nvidia.com; CAT:NONE; SFS:(13230028)(4636009)(136003)(396003)(376002)(346002)(39860400002)(451199021)(46966006)(36840700001)(40470700004)(40460700003)(8676002)(336012)(2616005)(83380400001)(47076005)(186003)(36860700001)(6916009)(4326008)(2906002)(70206006)(70586007)(6666004)(316002)(478600001)(54906003)(5660300002)(26005)(966005)(41300700001)(8936002)(40480700001)(7636003)(36756003)(82740400003)(356005)(82310400005)(86362001); DIR:OUT; SFP:1101; X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jun 2023 05:47:40.7966 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 0f075a97-1b2c-4774-825b-08db6263b6a9 X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=43083d15-7273-40c1-b7db-39efd9ccc17a; Ip=[216.228.118.232]; Helo=[mail.nvidia.com] X-MS-Exchange-CrossTenant-AuthSource: CO1NAM11FT028.eop-nam11.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR12MB6723 X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.20 Precedence: list List-Id: Kernel team discussions <kernel-team.lists.ubuntu.com> List-Unsubscribe: <https://lists.ubuntu.com/mailman/options/kernel-team>, <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe> List-Archive: <https://lists.ubuntu.com/archives/kernel-team> List-Post: <mailto:kernel-team@lists.ubuntu.com> List-Help: <mailto:kernel-team-request@lists.ubuntu.com?subject=help> List-Subscribe: <https://lists.ubuntu.com/mailman/listinfo/kernel-team>, <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe> Cc: bodong@nvidia.com, vlad@nvidia.com, dann.frazier@canonical.com Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: kernel-team-bounces@lists.ubuntu.com Sender: "kernel-team" <kernel-team-bounces@lists.ubuntu.com> |
Series |
net/sched: act_ct: offload UDP NEW connections
|
expand
|
diff --git a/net/netfilter/nf_conntrack_core.c b/net/netfilter/nf_conntrack_core.c index 85467dc..1384ebe 100644 --- a/net/netfilter/nf_conntrack_core.c +++ b/net/netfilter/nf_conntrack_core.c @@ -1355,9 +1355,6 @@ static unsigned int early_drop_list(struct net *net, hlist_nulls_for_each_entry_rcu(h, n, head, hnnode) { tmp = nf_ct_tuplehash_to_ctrack(h); - if (test_bit(IPS_OFFLOAD_BIT, &tmp->status)) - continue; - if (nf_ct_is_expired(tmp)) { nf_ct_gc_expired(tmp); continue; @@ -1424,11 +1421,14 @@ static bool gc_worker_skip_ct(const struct nf_conn *ct) static bool gc_worker_can_early_drop(const struct nf_conn *ct) { const struct nf_conntrack_l4proto *l4proto; + u8 protonum = nf_ct_protonum(ct); + if (test_bit(IPS_OFFLOAD_BIT, &ct->status) && protonum != IPPROTO_UDP) + return false; if (!test_bit(IPS_ASSURED_BIT, &ct->status)) return true; - l4proto = nf_ct_l4proto_find(nf_ct_protonum(ct)); + l4proto = nf_ct_l4proto_find(protonum); if (l4proto->can_early_drop && l4proto->can_early_drop(ct)) return true; @@ -1485,7 +1485,8 @@ static void gc_worker(struct work_struct *work) if (test_bit(IPS_OFFLOAD_BIT, &tmp->status)) { nf_ct_offload_timeout(tmp); - continue; + if (!nf_conntrack_max95) + continue; } if (expired_count > GC_SCAN_EXPIRED_MAX) {