Daniel Borkmann b2197755b2 bpf: add support for persistent maps/progs ... This work adds support for "persistent" eBPF maps/programs. The term "persistent" is to be understood that maps/programs have a facility that lets them survive process termination. This is desired by various eBPF subsystem users. Just to name one example: tc classifier/action. Whenever tc parses the ELF object, extracts and loads maps/progs into the kernel, these file descriptors will be out of reach after the tc instance exits. So a subsequent tc invocation won't be able to access/relocate on this resource, and therefore maps cannot easily be shared, f.e. between the ingress and egress networking data path. The current workaround is that Unix domain sockets (UDS) need to be instrumented in order to pass the created eBPF map/program file descriptors to a third party management daemon through UDS' socket passing facility. This makes it a bit complicated to deploy shared eBPF maps or programs (programs f.e. for tail calls) among various processes. We've been brainstorming on how we could tackle this issue and various approches have been tried out so far, which can be read up further in the below reference. The architecture we eventually ended up with is a minimal file system that can hold map/prog objects. The file system is a per mount namespace singleton, and the default mount point is /sys/fs/bpf/. Any subsequent mounts within a given namespace will point to the same instance. The file system allows for creating a user-defined directory structure. The objects for maps/progs are created/fetched through bpf(2) with two new commands (BPF_OBJ_PIN/BPF_OBJ_GET). I.e. a bpf file descriptor along with a pathname is being passed to bpf(2) that in turn creates (we call it eBPF object pinning) the file system nodes. Only the pathname is being passed to bpf(2) for getting a new BPF file descriptor to an existing node. The user can use that to access maps and progs later on, through bpf(2). Removal of file system nodes is being managed through normal VFS functions such as unlink(2), etc. The file system code is kept to a very minimum and can be further extended later on. The next step I'm working on is to add dump eBPF map/prog commands to bpf(2), so that a specification from a given file descriptor can be retrieved. This can be used by things like CRIU but also applications can inspect the meta data after calling BPF_OBJ_GET. Big thanks also to Alexei and Hannes who significantly contributed in the design discussion that eventually let us end up with this architecture here. Reference: https://lkml.org/lkml/2015/10/15/925 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-11-02 22:48:39 -05:00
..
android	…
byteorder	…
caif	…
can	can: avoid using timeval for uapi	2015-10-13 17:42:34 +02:00
cifs	…
dvb	[media] DocBook: Change format for enum dmx_output documentation	2015-06-09 17:47:38 -03:00
genwqe	…
hdlc	…
hsi	HSI: cmt_speech: fix timestamp interface	2015-06-23 02:40:03 +02:00
iio	iio: Add I/Q modifiers	2015-05-23 10:49:55 +01:00
isdn	…
mmc	…
netfilter	netfilter: nfnetlink_log: allow to attach conntrack	2015-10-05 17:32:14 +02:00
netfilter_arp	…
netfilter_bridge	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2015-06-23 14:08:54 -07:00
netfilter_ipv4	…
netfilter_ipv6	netfilter: ip6t_REJECT: added missing icmpv6 codes	2015-08-26 20:32:35 +02:00
nfsd	…
raid	…
spi	…
sunrpc	…
tc_act	…
tc_ematch	…
usb	cdc: add header guards	2015-09-15 21:53:24 -07:00
wimax	…
Kbuild	uapi: add mpls_iptunnel.h	2015-10-18 22:40:04 -07:00
a.out.h	…
acct.h	…
adb.h	…
adfs_fs.h	…
affs_hardblocks.h	…
agpgart.h	…
aio_abi.h	…
am437x-vpfe.h	…
apm_bios.h	…
arcfb.h	…
atalk.h	…
atm.h	…
atm_eni.h	…
atm_he.h	…
atm_idt77105.h	…
atm_nicstar.h	…
atm_tcp.h	…
atm_zatm.h	atm: remove 'struct zatm_t_hist'	2015-10-05 03:16:46 -07:00
atmapi.h	…
atmarp.h	…
atmbr2684.h	…
atmclip.h	…
atmdev.h	…
atmioc.h	…
atmlec.h	…
atmmpc.h	…
atmppp.h	…
atmsap.h	…
atmsvc.h	…
audit.h	Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit	2015-09-08 13:34:59 -07:00
auto_fs.h	…
auto_fs4.h	…
auxvec.h	…
ax25.h	…
b1lli.h	…
baycom.h	…
bcache.h	…
bcm933xx_hcs.h	…
bfs_fs.h	…
binfmts.h	…
blkpg.h	…
blktrace_api.h	…
bpf.h	bpf: add support for persistent maps/progs	2015-11-02 22:48:39 -05:00
bpf_common.h	…
bpqether.h	…
bsg.h	…
btrfs.h	…
can.h	…
capability.h	…
capi.h	…
cciss_defs.h	…
cciss_ioctl.h	…
cdrom.h	…
cgroupstats.h	…
chio.h	…
cm4000_cs.h	…
cn_proc.h	…
coda.h	…
coda_psdev.h	…
coff.h	…
connector.h	…
const.h	…
cramfs_fs.h	…
cryptouser.h	crypto: user - Add CRYPTO_MSG_DELRNG	2015-06-22 15:49:27 +08:00
cuda.h	…
cyclades.h	…
cycx_cfm.h	…
dcbnl.h	dcb : Fix incorrect documentation for struct dcb_app	2015-06-23 07:00:41 -07:00
dccp.h	…
dlm.h	…
dlm_device.h	dlm: fix lvb copy for user locks	2015-08-25 14:41:50 -05:00
dlm_netlink.h	…
dlm_plock.h	…
dlmconstants.h	…
dm-ioctl.h	dm stats: report precise_timestamps and histogram in @stats_list output	2015-08-18 17:20:03 -04:00
dm-log-userspace.h	…
dn.h	…
dqblk_xfs.h	…
edd.h	…
efs_fs_sb.h	…
elf-em.h	elf-em.h: move EM_MICROBLAZE to the common header	2015-09-10 06:54:15 +02:00
elf-fdpic.h	…
elf.h	…
elfcore.h	…
errno.h	…
errqueue.h	…
ethtool.h	clarify implementation of ethtool's get_ts_info op	2015-07-17 19:59:04 -07:00
eventpoll.h	…
fadvise.h	…
falloc.h	…
fanotify.h	…
fb.h	…
fcntl.h	…
fd.h	…
fdreg.h	…
fib_rules.h	fib: Add fib rule match on tunnel id	2015-07-21 10:39:06 -07:00
fiemap.h	…
filter.h	…
firewire-cdev.h	…
firewire-constants.h	…
flat.h	…
fou.h	…
fs.h	…
fsl_hypervisor.h	…
fuse.h	fuse: device fd clone	2015-07-01 16:26:08 +02:00
futex.h	…
gameport.h	…
gen_stats.h	…
genetlink.h	…
gfs2_ondisk.h	…
gigaset_dev.h	…
gsmmux.h	tty: linux/gsmmux.h needs linux/types.h	2015-07-23 17:48:43 -07:00
hash_info.h	…
hdlc.h	…
hdlcdrv.h	…
hdreg.h	…
hid.h	…
hiddev.h	…
hidraw.h	…
hpet.h	…
hsr_netlink.h	…
hw_breakpoint.h	…
hyperv.h	Drivers: hv: fcopy: full handshake support	2015-05-24 12:17:42 -07:00
hysdn_if.h	…
i2c-dev.h	…
i2c.h	i2c: add FUNC flag for slave capabilities	2015-06-01 08:07:08 +09:00
i2o-dev.h	…
i8k.h	…
icmp.h	…
icmpv6.h	…
if.h	…
if_addr.h	…
if_addrlabel.h	…
if_alg.h	…
if_arcnet.h	arcnet: fix indentation of if_arcnet.h	2015-09-23 08:44:22 +02:00
if_arp.h	…
if_bonding.h	…
if_bridge.h	bridge: vlan: add per-vlan struct and move to rhashtables	2015-09-29 13:36:06 -07:00
if_cablemodem.h	…
if_eql.h	…
if_ether.h	ether: add IEEE 1722 ethertype - TSN	2015-09-09 22:06:29 -07:00
if_fc.h	…
if_fddi.h	…
if_frad.h	…
if_hippi.h	…
if_infiniband.h	…
if_link.h	geneve: implement support for IPv6-based tunnels	2015-10-30 12:10:51 +09:00
if_ltalk.h	…
if_packet.h	packet: add extended BPF fanout mode	2015-08-17 14:22:48 -07:00
if_phonet.h	…
if_plip.h	…
if_ppp.h	…
if_pppol2tp.h	…
if_pppox.h	…
if_slip.h	…
if_team.h	…
if_tun.h	macvtap/tun: cross-endian support for little-endian hosts	2015-06-01 15:48:56 +02:00
if_tunnel.h	ip_gre: Add support to collect tunnel metadata.	2015-08-10 14:03:54 -07:00
if_vlan.h	…
if_x25.h	…
igmp.h	…
ila.h	net: Identifier Locator Addressing module	2015-08-17 21:33:06 -07:00
in.h	api: fix compatibility of linux/in.h with netinet/in.h	2015-06-29 18:56:21 -07:00
in6.h	…
in_route.h	…
inet_diag.h	net: inet_diag: export IPV6_V6ONLY sockopt	2015-06-24 02:51:39 -07:00
inotify.h	…
input.h	…
ioctl.h	…
ip.h	net: ipv4 sysctl option to ignore routes when nexthop link is down	2015-06-24 02:15:54 -07:00
ip6_tunnel.h	…
ip_vs.h	ipvs: add more mcast parameters for the sync daemon	2015-08-21 09:10:11 -07:00
ipc.h	…
ipmi.h	…
ipmi_msgdefs.h	…
ipsec.h	…
ipv6.h	net: ipv6 sysctl option to ignore routes when nexthop link is down	2015-08-13 21:27:19 -07:00
ipv6_route.h	ipv6: Create percpu rt6_info	2015-05-25 13:25:35 -04:00
ipx.h	…
irda.h	…
irqnr.h	…
isdn.h	…
isdn_divertif.h	…
isdn_ppp.h	…
isdnif.h	…
iso_fs.h	…
ivtv.h	…
ivtvfb.h	…
ixjuser.h	…
jffs2.h	…
joystick.h	…
kcmp.h	…
kd.h	…
kdev_t.h	…
kernel-page-flags.h	proc: export idle flag via kpageflags	2015-09-10 13:29:01 -07:00
kernel.h	…
kernelcapi.h	…
kexec.h	…
keyboard.h	…
keyctl.h	…
kfd_ioctl.h	drm/amdkfd: add H/W debugger IOCTL set definitions	2015-06-03 11:32:07 +03:00
kvm.h	Patch queue for ppc - 2015-08-22	2015-08-22 14:57:59 -07:00
kvm_para.h	…
l2tp.h	…
libc-compat.h	api: fix compatibility of linux/in.h with netinet/in.h	2015-06-29 18:56:21 -07:00
limits.h	…
llc.h	…
loop.h	…
lp.h	…
lwtunnel.h	lwtunnel: remove source and destination UDP port config option	2015-09-24 14:31:37 -07:00
magic.h	bpf: add support for persistent maps/progs	2015-11-02 22:48:39 -05:00
major.h	…
map_to_7segment.h	…
matroxfb.h	…
mdio.h	…
media-bus-format.h	…
media.h	…
mei.h	mei: add async event notification ioctls	2015-08-03 17:30:00 -07:00
membarrier.h	sys_membarrier(): system-wide memory barrier (generic, x86)	2015-09-11 15:21:34 -07:00
memfd.h	…
mempolicy.h	…
meye.h	…
mic_common.h	misc: mic: Common MIC header file changes in preparation for SCIF	2015-05-24 12:13:36 -07:00
mic_ioctl.h	…
mii.h	…
minix_fs.h	…
mman.h	…
mmtimer.h	…
module.h	…
mpls.h	mpls: Use definition for reserved label checks	2015-08-03 22:35:00 -07:00
mpls_iptunnel.h	mpls: ip tunnel support	2015-07-21 10:39:05 -07:00
mqueue.h	…
mroute.h	…
mroute6.h	…
msdos_fs.h	…
msg.h	…
mtio.h	…
n_r3964.h	…
nbd.h	…
ncp.h	…
ncp_fs.h	…
ncp_mount.h	…
ncp_no.h	…
ndctl.h	libnvdimm: Add DSM support for Address Range Scrub commands	2015-07-27 22:53:19 -04:00
neighbour.h	net: add explicit logging and stat for neighbour table overflow	2015-08-10 13:46:21 -07:00
net.h	…
net_dropmon.h	…
net_namespace.h	…
net_tstamp.h	…
netconf.h	ipv4: add support for linkdown sysctl to netconf	2015-07-08 23:34:53 -07:00
netdevice.h	…
netfilter.h	netfilter: don't pull include/linux/netfilter.h from netns headers	2015-06-18 21:14:31 +02:00
netfilter_arp.h	…
netfilter_bridge.h	…
netfilter_decnet.h	…
netfilter_ipv4.h	…
netfilter_ipv6.h	…
netlink.h	net: Add support for filtering neigh dump by master device	2015-09-29 21:33:54 -07:00
netlink_diag.h	…
netrom.h	…
nfc.h	NFC: netlink: Add missing NFC_ATTR comments	2015-10-27 03:55:10 +01:00
nfs.h	…
nfs2.h	…
nfs3.h	…
nfs4.h	NFS: Update NFS4_BITMAP_SIZE	2015-08-27 19:44:53 -04:00
nfs4_mount.h	…
nfs_fs.h	…
nfs_idmap.h	…
nfs_mount.h	…
nfsacl.h	nfsd: Add macro NFS_ACL_MASK for ACL	2015-07-20 14:58:46 -04:00
nl80211.h	cfg80211: Add multiple scan plans for scheduled scan	2015-10-13 10:35:26 +02:00
nubus.h	…
nvme.h	NVMe: Add nvme subsystem reset IOCTL	2015-08-18 11:56:13 -06:00
nvram.h	…
omap3isp.h	…
omapfb.h	…
oom.h	…
openvswitch.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-10-24 06:54:12 -07:00
packet_diag.h	…
param.h	…
parport.h	…
patchkey.h	…
pci.h	…
pci_regs.h	PCI: Restore PCI_MSIX_FLAGS_BIRMASK definition	2015-07-14 18:27:46 -05:00
perf_event.h	bpf: introduce bpf_perf_event_output() helper	2015-10-22 06:42:15 -07:00
personality.h	…
pfkeyv2.h	…
pg.h	…
phantom.h	…
phonet.h	…
pkt_cls.h	bpf: add bpf_redirect() helper	2015-09-17 21:09:07 -07:00
pkt_sched.h	net_sched: gred: add TCA_GRED_LIMIT attribute	2015-05-12 18:22:49 -04:00
pktcdvd.h	…
pmu.h	…
poll.h	…
posix_types.h	…
ppdev.h	…
ppp-comp.h	…
ppp-ioctl.h	…
ppp_defs.h	…
pps.h	…
prctl.h	capabilities: ambient capabilities	2015-09-04 16:54:41 -07:00
psci.h	…
ptp_clock.h	…
ptrace.h	seccomp, ptrace: add support for dumping seccomp filters	2015-10-27 19:55:13 -07:00
qnx4_fs.h	…
qnxtypes.h	…
quota.h	…
radeonfb.h	…
random.h	…
raw.h	…
rds.h	net/rds: Declare SO_RDS_TRANSPORT and RDS_TRANS_* constants in uapi/linux/rds.h	2015-05-31 21:47:23 -07:00
reboot.h	…
reiserfs_fs.h	…
reiserfs_xattr.h	…
resource.h	…
rfkill.h	…
romfs_fs.h	…
rose.h	…
route.h	…
rtc.h	…
rtnetlink.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-10-20 06:08:27 -07:00
scc.h	…
sched.h	…
scif_ioctl.h	misc: mic: SCIF header file and IOCTL interface	2015-05-24 12:13:36 -07:00
screen_info.h	…
sctp.h	…
sdla.h	…
seccomp.h	…
securebits.h	capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISE	2015-09-04 16:54:41 -07:00
selinux_netlink.h	…
sem.h	…
serial.h	…
serial_core.h	serial: stm32-usart: Add STM32 USART Driver	2015-06-10 17:34:26 -07:00
serial_reg.h	ARM: OMAP1: Move UART defines to prepare for sparse IRQ	2015-05-20 09:01:20 -07:00
serio.h	…
shm.h	…
signal.h	…
signalfd.h	…
smiapp.h	…
snmp.h	net: track success and failure of TCP PMTU probing	2015-07-21 22:36:33 -07:00
sock_diag.h	sock_diag: define destruction multicast groups	2015-06-15 19:49:22 -07:00
socket.h	…
sockios.h	…
sonet.h	…
sonypi.h	…
sound.h	…
soundcard.h	…
stat.h	…
stddef.h	…
string.h	…
suspend_ioctls.h	…
swab.h	…
synclink.h	…
sysctl.h	…
sysinfo.h	…
target_core_user.h	target: use stringify.h instead of own definition	2015-09-11 00:32:36 -07:00
taskstats.h	…
tcp.h	tcp: add tcpi_segs_in and tcpi_segs_out to tcp_info	2015-05-21 23:25:21 -04:00
tcp_metrics.h	…
telephony.h	…
termios.h	…
thermal.h	…
time.h	…
times.h	…
timex.h	…
tiocl.h	…
tipc.h	…
tipc_config.h	…
tipc_netlink.h	…
toshiba.h	toshiba_acpi: Add /dev/toshiba_acpi device	2015-07-24 14:15:10 -07:00
tty.h	NFC: nci: add generic uart support	2015-06-11 23:37:37 +02:00
tty_flags.h	tty: fix comment of ASYNCB_SPD_HI	2015-05-24 12:49:16 -07:00
types.h	…
udf_fs_i.h	…
udp.h	…
uhid.h	…
uinput.h	…
uio.h	…
ultrasound.h	…
un.h	…
unistd.h	…
unix_diag.h	…
usbdevice_fs.h	…
usbip.h	…
userfaultfd.h	userfaultfd: remove kernel header include from uapi header	2015-10-01 21:42:35 -04:00
utime.h	…
utsname.h	…
uuid.h	…
uvcvideo.h	…
v4l2-common.h	…
v4l2-controls.h	[media] Driver for Toshiba TC358743 HDMI to CSI-2 bridge	2015-07-17 09:59:28 -03:00
v4l2-dv-timings.h	…
v4l2-mediabus.h	[media] videodev2.h: add support for transfer functions	2015-06-05 11:45:45 -03:00
v4l2-subdev.h	…
veth.h	…
vfio.h	vfio: powerpc/spapr: Support Dynamic DMA windows	2015-06-11 15:16:55 +10:00
vhost.h	vhost: cross-endian support for legacy devices	2015-06-01 15:48:55 +02:00
videodev2.h	[media] videodev2.h: fix copy-and-paste error in V4L2_MAP_XFER_FUNC_DEFAULT	2015-06-18 14:34:46 -03:00
virtio_9p.h	…
virtio_balloon.h	include/uapi/linux/virtio_balloon.h: include linux/virtio_types.h	2015-06-01 15:46:54 +02:00
virtio_blk.h	…
virtio_config.h	…
virtio_console.h	…
virtio_gpu.h	virtgpu: include linux/types.h to avoid warning.	2015-06-05 12:31:12 +10:00
virtio_ids.h	Add virtio gpu driver.	2015-06-03 14:17:38 +02:00
virtio_input.h	…
virtio_net.h	virtio_net: document VIRTIO_NET_CTRL_GUEST_OFFLOADS	2015-07-01 10:11:17 +02:00
virtio_pci.h	virtio: define virtio_pci_cfg_cap in header.	2015-07-07 14:27:05 +03:00
virtio_ring.h	virtio: Fix typecast of pointer in vring_init()	2015-07-07 14:27:04 +03:00
virtio_rng.h	…
virtio_scsi.h	…
virtio_types.h	…
vm_sockets.h	…
vsp1.h	[media] media: uapi: vsp1: Use __u32 instead of u32	2015-07-06 08:25:50 -03:00
vt.h	…
wait.h	…
wanrouter.h	…
watchdog.h	…
wil6210_uapi.h	…
wimax.h	…
wireless.h	…
x25.h	…
xattr.h	…
xfrm.h	…
xilinx-v4l2-controls.h	…
zorro.h	…
zorro_ids.h	…