Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sock/skb: Add IPv6 Support #1361

Merged
merged 1 commit into from
Aug 17, 2023
Merged

Conversation

kevsecurity
Copy link
Contributor

The sock and skb types currently support IPv4 addresses and CIDRs, and in fact the whole subsystem assumes network operations are only IPv4 or AF_INET.

This commit adds IPv6 support by allowing IPv6 addresses and CIDRs to be specified for arg matching for sock and skb types; collects IPv6 addresses from sockets and datagrams where the family is AF_INET6; and reports said addresses correctly in user space.

@kevsecurity kevsecurity requested review from mtardy and a team as code owners August 16, 2023 14:03
@netlify
Copy link

netlify bot commented Aug 16, 2023

Deploy Preview for tetragon ready!

Name Link
🔨 Latest commit 1e1cf54
🔍 Latest deploy log https://app.netlify.com/sites/tetragon/deploys/64dcd71d747c1a00087862fd
😎 Deploy Preview https://deploy-preview-1361--tetragon.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@kevsecurity kevsecurity force-pushed the pr/kevsecurity/add-ipv6-support branch 4 times, most recently from 4374e88 to fa2dbac Compare August 16, 2023 14:42
@kkourt kkourt self-requested a review August 16, 2023 15:39
Copy link
Contributor

@kkourt kkourt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks.

bpf/process/types/basic.h Show resolved Hide resolved
bpf/process/types/skb.h Show resolved Hide resolved
bpf/process/types/tuple.h Show resolved Hide resolved
bpf/process/types/basic.h Show resolved Hide resolved
The sock and skb types currently support IPv4 addresses and CIDRs, and
in fact the whole subsystem assumes network operations are only IPv4 or
AF_INET.

This commit adds IPv6 support by allowing IPv6 addresses and CIDRs to be
specified for arg matching for sock and skb types; collects IPv6
addresses from sockets and datagrams where the family is AF_INET6; and
reports said addresses correctly in user space.

Signed-off-by: Kevin Sheldrake <[email protected]>
@kevsecurity kevsecurity force-pushed the pr/kevsecurity/add-ipv6-support branch from fa2dbac to dddf7c8 Compare August 17, 2023 12:42
@kevsecurity kevsecurity merged commit 3cf9276 into main Aug 17, 2023
28 checks passed
@kevsecurity kevsecurity deleted the pr/kevsecurity/add-ipv6-support branch August 17, 2023 15:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants