mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-11-11 21:38:32 +08:00
e27cca96cd
TCP encapsulation of IKE and IPsec messages (RFC 8229) is implemented as a TCP ULP, overriding in particular the sendmsg and recvmsg operations. A Stream Parser is used to extract messages out of the TCP stream using the first 2 bytes as length marker. Received IKE messages are put on "ike_queue", waiting to be dequeued by the custom recvmsg implementation. Received ESP messages are sent to XFRM, like with UDP encapsulation. Some of this code is taken from the original submission by Herbert Xu. Currently, only IPv4 is supported, like for UDP encapsulation. Co-developed-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sabrina Dubroca <sd@queasysnail.net> Acked-by: David S. Miller <davem@davemloft.net> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
40 lines
924 B
C
40 lines
924 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef _NET_ESPINTCP_H
|
|
#define _NET_ESPINTCP_H
|
|
|
|
#include <net/strparser.h>
|
|
#include <linux/skmsg.h>
|
|
|
|
void __init espintcp_init(void);
|
|
|
|
int espintcp_push_skb(struct sock *sk, struct sk_buff *skb);
|
|
int espintcp_queue_out(struct sock *sk, struct sk_buff *skb);
|
|
bool tcp_is_ulp_esp(struct sock *sk);
|
|
|
|
struct espintcp_msg {
|
|
struct sk_buff *skb;
|
|
struct sk_msg skmsg;
|
|
int offset;
|
|
int len;
|
|
};
|
|
|
|
struct espintcp_ctx {
|
|
struct strparser strp;
|
|
struct sk_buff_head ike_queue;
|
|
struct sk_buff_head out_queue;
|
|
struct espintcp_msg partial;
|
|
void (*saved_data_ready)(struct sock *sk);
|
|
void (*saved_write_space)(struct sock *sk);
|
|
struct work_struct work;
|
|
bool tx_running;
|
|
};
|
|
|
|
static inline struct espintcp_ctx *espintcp_getctx(const struct sock *sk)
|
|
{
|
|
struct inet_connection_sock *icsk = inet_csk(sk);
|
|
|
|
/* RCU is only needed for diag */
|
|
return (__force void *)icsk->icsk_ulp_data;
|
|
}
|
|
#endif
|