[PATCH v2 0/4] tcp: md5: Fix overlap between vrf and non-vrf keys · Leonard Crestez <hidden> · 2021-10-13
[PATCH v2 1/4] tcp: md5: Fix overlap between vrf and non-vrf keys · Leonard Crestez <hidden> · 2021-10-13
Re: [PATCH v2 1/4] tcp: md5: Fix overlap between vrf and non-vrf keys · David Ahern <hidden> · 2021-10-14
[PATCH v2 2/4] tcp: md5: Allow MD5SIG_FLAG_IFINDEX with ifindex=0 · Leonard Crestez <hidden> · 2021-10-13
Re: [PATCH v2 2/4] tcp: md5: Allow MD5SIG_FLAG_IFINDEX with ifindex=0 · David Ahern <hidden> · 2021-10-14
Re: [PATCH v2 2/4] tcp: md5: Allow MD5SIG_FLAG_IFINDEX with ifindex=0 · Leonard Crestez <hidden> · 2021-10-14
Re: [PATCH v2 2/4] tcp: md5: Allow MD5SIG_FLAG_IFINDEX with ifindex=0 · David Ahern <hidden> · 2021-10-14
[PATCH v2 3/4] selftests: nettest: Add --{do,no}-bind-key-ifindex · Leonard Crestez <hidden> · 2021-10-13
Re: [PATCH v2 3/4] selftests: nettest: Add --{do,no}-bind-key-ifindex · David Ahern <hidden> · 2021-10-14
Re: [PATCH v2 3/4] selftests: nettest: Add --{do,no}-bind-key-ifindex · Leonard Crestez <hidden> · 2021-10-15
[PATCH v2 4/4] selftests: net/fcnal: Test --{do,no}-bind-key-ifindex · Leonard Crestez <hidden> · 2021-10-13
Re: [PATCH v2 4/4] selftests: net/fcnal: Test --{do,no}-bind-key-ifindex · David Ahern <hidden> · 2021-10-14

Re: [PATCH v2 2/4] tcp: md5: Allow MD5SIG_FLAG_IFINDEX with ifindex=0

From: David Ahern <hidden>
Date: 2021-10-14 03:09:50
Also in: lkml

On 10/13/21 12:50 AM, Leonard Crestez wrote:

Multiple VRFs are generally meant to be "separate" but right now md5
keys for the default VRF also affect connections inside VRFs if the IP
addresses happen to overlap.

So far the combination of TCP_MD5SIG_IFINDEX with tcpm_ifindex == 0

TCP_MD5SIG_IFINDEX does not exist in net-next and it was not added by
patch 1 or this patch.

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help