Re: [PATCH net-next 07/14] gtp: Support encapsulation of IPv6 packets
From: Harald Welte <laforge@gnumonks.org>
Date: 2017-09-19 12:13:13
On Mon, Sep 18, 2017 at 05:38:57PM -0700, Tom Herbert wrote:
Allow IPv6 mobile subscriber packets. This entails adding an IPv6 mobile subscriber address to pdp context and IPv6 specific variants to find pdp contexts by address.
Please note that there are three different PDP contexts for IP: * IPv4 only (what gtp.c implements so far) * IPv6 only * dual IPv4+IPv6 (called IPv46) This information will have to be provisioned by the control plane via netlink for each PDP context. The kernel module then needs to make sure that on a v4-only context no IPv6 packets are accepted and vice-versa. Your proposed patch is missing this kind of screening function and I would imagine it could introduce all kinds of security problems :/ -- - Harald Welte [off-list ref] http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)