linux/net/ipv4/ip_output.c, branch v3.0

ipv4: Don't use ufo handling on later transformed packets

2011-07-02T00:33:19Z

We might call ip_ufo_append_data() for packets that will be IPsec transformed later. This function should be used just for real udp packets. So we check for rt->dst.header_len which is only nonzero on IPsec handling and call ip_ufo_append_data() just if rt->dst.header_len is zero. Signed-off-by: Steffen Klassert Signed-off-by: David S. Miller

ipv4: Fix IPsec slowpath fragmentation problem

2011-06-28T03:34:26Z

ip_append_data() builds packets based on the mtu from dst_mtu(rt->dst.path). On IPsec the effective mtu is lower because we need to add the protocol headers and trailers later when we do the IPsec transformations. So after the IPsec transformations the packet might be too big, which leads to a slowpath fragmentation then. This patch fixes this by building the packets based on the lower IPsec mtu from dst_mtu(&rt->dst) and adapts the exthdr handling to this. Signed-off-by: Steffen Klassert Signed-off-by: David S. Miller

ipv4: Fix packet size calculation in __ip_append_data

2011-06-28T03:34:25Z

Git commit 59104f06 (ip: take care of last fragment in ip_append_data) added a check to see if we exceed the mtu when we add trailer_len. However, the mtu is already subtracted by the trailer length when the xfrm transfomation bundles are set up. So IPsec packets with mtu size get fragmented, or if the DF bit is set the packets will not be send even though they match the mtu perfectly fine. This patch actually reverts commit 59104f06. Signed-off-by: Steffen Klassert Signed-off-by: David S. Miller

ipv4: Fix packet size calculation for raw IPsec packets in __ip_append_data

2011-06-09T21:49:59Z

We assume that transhdrlen is positive on the first fragment which is wrong for raw packets. So we don't add exthdrlen to the packet size for raw packets. This leads to a reallocation on IPsec because we have not enough headroom on the skb to place the IPsec headers. This patch fixes this by adding exthdrlen to the packet size whenever the send queue of the socket is empty. This issue was introduced with git commit 1470ddf7 (inet: Remove explicit write references to sk/inet in ip_append_data) Signed-off-by: Steffen Klassert Signed-off-by: David S. Miller

ipv4: Always call ip_options_build() after rest of IP header is filled in.

2011-05-13T21:21:27Z

This will allow ip_options_build() to reliably look at the values of iph->{daddr,saddr} Signed-off-by: David S. Miller

ipv4: Pass explicit daddr arg to ip_send_reply().

2011-05-10T20:32:46Z

This eliminates an access to rt->rt_src. Signed-off-by: David S. Miller

ipv4: Pass flow key down into ip_append_*().

2011-05-09T04:24:07Z

This way rt->rt_dst accesses are unnecessary. Signed-off-by: David S. Miller

ipv4: Pass flow keys down into datagram packet building engine.

2011-05-09T04:24:06Z

This way ip_output.c no longer needs rt->rt_{src,dst}. We already have these keys sitting, ready and waiting, on the stack or in a socket structure. Signed-off-by: David S. Miller

ipv4: Don't use rt->rt_{src,dst} in ip_queue_xmit().

2011-05-08T22:28:28Z

Now we can pick it out of the provided flow key. Signed-off-by: David S. Miller

inet: Pass flowi to ->queue_xmit().

2011-05-08T22:28:28Z

This allows us to acquire the exact route keying information from the protocol, however that might be managed. It handles all of the possibilities, from the simplest case of storing the key in inet->cork.fl to the more complex setup SCTP has where individual transports determine the flow. Signed-off-by: David S. Miller