Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(bpf): implement stack bypass #458

Merged
merged 28 commits into from
Mar 1, 2024
Merged

feat(bpf): implement stack bypass #458

merged 28 commits into from
Mar 1, 2024

Commits on Feb 12, 2024

  1. ci(kernel-test): update vm images and test against udp port conflicts

    @jschwinger233
    jschwinger233 committed Feb 12, 2024
    Configuration menu
    Copy the full SHA
    d52acf5 View commit details
    Browse the repository at this point in the history

  2. Avoid wan_ingress bpf mishandling packets from world

    @jschwinger233
    jschwinger233 committed Feb 12, 2024
    Configuration menu
    Copy the full SHA
    fcfd54b View commit details
    Browse the repository at this point in the history

  3. bpf: delete "security check" in wan_ingress

    @jschwinger233
    jschwinger233 committed Feb 12, 2024
    Configuration menu
    Copy the full SHA
    7d6509b View commit details
    Browse the repository at this point in the history

  4. ci: Bind lan+wan to the same interface

    @jschwinger233
    jschwinger233 committed Feb 12, 2024
    Configuration menu
    Copy the full SHA
    4d9f59c View commit details
    Browse the repository at this point in the history

  5. bpf: wan_ingress returns TC_ACK_PIPE

    @jschwinger233
    jschwinger233 committed Feb 12, 2024
    Configuration menu
    Copy the full SHA
    b05f969 View commit details
    Browse the repository at this point in the history

Commits on Feb 13, 2024

  1. bpf: add dae0_ingress and dae0peer_ingress, remove wan_ingress

    @jschwinger233
    jschwinger233 committed Feb 13, 2024
    Configuration menu
    Copy the full SHA
    418033e View commit details
    Browse the repository at this point in the history

Commits on Feb 19, 2024

  1. control: wan tcp 

    - listen tcp inside daens
- setup routing inside daens
- attach new bpf prog to dae0 + dae0peer
    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    418f545 View commit details
    Browse the repository at this point in the history

  2. control: wan udp

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    14b8138 View commit details
    Browse the repository at this point in the history

  3. bpf: lan_ingress

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    906f254 View commit details
    Browse the repository at this point in the history

  4. control: lan

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    5fe6006 View commit details
    Browse the repository at this point in the history

  5. ci: skip ipv6 test for now

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    8ee5987 View commit details
    Browse the repository at this point in the history

  6. Remove unnecessary setup: sysctl and link monitor on dae0

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    b8fc304 View commit details
    Browse the repository at this point in the history

  7. ci: Bump kernel version for test

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    e7517f2 View commit details
    Browse the repository at this point in the history

  8. control: remove AutoConfigFirewallRule

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    ac66f3e View commit details
    Browse the repository at this point in the history

  9. control: don't setupRoutingPolicy on host

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    d3fd284 View commit details
    Browse the repository at this point in the history

  10. bpf: support IPv6

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    6bbb1b1 View commit details
    Browse the repository at this point in the history

  11. control: install routes in netns

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    3719808 View commit details
    Browse the repository at this point in the history

  12. ci: Add back IPv6 test

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    85d8f16 View commit details
    Browse the repository at this point in the history

  13. control: set lo up in daens

    @jschwinger233
    jschwinger233 committed Feb 19, 2024
    Configuration menu
    Copy the full SHA
    8ee97ea View commit details
    Browse the repository at this point in the history

Commits on Feb 21, 2024

  1. bpf: Fix skb when redirecting from wg0 to veth

    @jschwinger233
    jschwinger233 committed Feb 21, 2024
    Configuration menu
    Copy the full SHA
    94b7992 View commit details
    Browse the repository at this point in the history

  2. control: bind dae0 regardless of wan or lan

    @jschwinger233
    jschwinger233 committed Feb 21, 2024
    Configuration menu
    Copy the full SHA
    59daed6 View commit details
    Browse the repository at this point in the history

Commits on Feb 22, 2024

  1. control: Avoid spammy dmesg info messages 

    Avoid spammy dmesg reported by @umlka:

[   16.726876] dae0peer: Caught tx_queue_len zero misconfig
[   16.786837] dae0: Caught tx_queue_len zero misconfig
    @jschwinger233
    jschwinger233 committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    f5565d0 View commit details
    Browse the repository at this point in the history

Commits on Feb 26, 2024

  1. fixes according to review

    @jschwinger233
    jschwinger233 committed Feb 26, 2024
    Configuration menu
    Copy the full SHA
    d53497e View commit details
    Browse the repository at this point in the history

  2. docs: update docs for auto_config_firewall_rule and how it works

    @jschwinger233
    jschwinger233 committed Feb 26, 2024
    Configuration menu
    Copy the full SHA
    7265674 View commit details
    Browse the repository at this point in the history

Commits on Feb 27, 2024

  1. Merge branch 'main' into gray/exp/wan-redirect-to-dae0

    @sumire88
    sumire88 authored Feb 27, 2024
    Configuration menu
    Copy the full SHA
    16dfabc View commit details
    Browse the repository at this point in the history

  2. control: bind routing policy to dae netns

    @jschwinger233
    jschwinger233 committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    9ad68bc View commit details
    Browse the repository at this point in the history

  3. config: mark auto_config_firewall as deprecated, properly

    @jschwinger233
    jschwinger233 committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    7c924d1 View commit details
    Browse the repository at this point in the history

Commits on Feb 29, 2024

  1. bpf: drop packets not redirected from wan/lan 

    skb->mark will be reset when going across netns (skb_scrub_packet), so
this commit sets a special value in cb[0] which can survive bpf_redirect
and netns crossing.

This solves issues like:

level=warning msg="No AddrPort presented: reading map: key [[::ffff:0.0.0.0]:68, 17, 255.255.255.255:67]: lookup: key does not exist"
    @jschwinger233
    jschwinger233 committed Feb 29, 2024
    Configuration menu
    Copy the full SHA
    a1a4012 View commit details
    Browse the repository at this point in the history