On Wed, Oct 20, 2021 at 06:48:25PM IST, Maxim Mikityanskiy wrote:

On 2021-10-20 06:56, Kumar Kartikeya Dwivedi wrote:

quoted

On Tue, Oct 19, 2021 at 08:16:52PM IST, Maxim Mikityanskiy wrote:

quoted

The new helpers (bpf_ct_lookup_tcp and bpf_ct_lookup_udp) allow to query
connection tracking information of TCP and UDP connections based on
source and destination IP address and port. The helper returns a pointer
to struct nf_conn (if the conntrack entry was found), which needs to be
released with bpf_ct_release.

Signed-off-by: Maxim Mikityanskiy <redacted>
Reviewed-by: Tariq Toukan <tariqt@nvidia.com>

The last discussion on this [0] suggested that stable BPF helpers for conntrack
were not desired, hence the recent series [1] to extend kfunc support to modules
and base the conntrack work on top of it, which I'm working on now (supporting
both CT lookup and insert).

If you have conntrack lookup, I can base my solution on top of yours. As it
supports modules, it's even better. What is the current status of your work?
When do you plan to submit a series? Please add me to Cc when you do.

Great, I'll post the lookup stuff separately next week, and Cc you.

Thanks!

Thanks for reviewing!

quoted

[0]: https://lore.kernel.org/bpf/CAADnVQJTJzxzig=1vvAUMXELUoOwm2vXq0ahP4mfhBWGsCm9QA@mail.gmail.com (local)
[1]: https://lore.kernel.org/bpf/CAADnVQKDPG+U-NwoAeNSU5Ef9ZYhhGcgL4wBkFoP-E9h8-XZhw@mail.gmail.com (local)

--
Kartikeya

--
Kartikeya