Commit 11851cbd authored by Antonio Quartulli's avatar Antonio Quartulli Committed by Paolo Abeni
Browse files

ovpn: implement TCP transport 



With this change ovpn is allowed to communicate to peers also via TCP.
Parsing of incoming messages is implemented through the strparser API.

Note that ovpn redefines sk_prot and sk_socket->ops for the TCP socket
used to communicate with the peer.
For this reason it needs to access inet6_stream_ops, which is declared
as extern in the IPv6 module, but it is not fully exported.

Therefore this patch is also adding EXPORT_SYMBOL_GPL(inet6_stream_ops)
to net/ipv6/af_inet6.c.

Cc: David Ahern <dsahern@kernel.org>
Cc: Eric Dumazet <edumazet@google.com>
Cc: Jakub Kicinski <kuba@kernel.org>
Cc: Paolo Abeni <pabeni@redhat.com>
Cc: Simon Horman <horms@kernel.org>
Signed-off-by: default avatarAntonio Quartulli <antonio@openvpn.net>
Link: https://patch.msgid.link/20250415-b4-ovpn-v26-11-577f6097b964@openvpn.net


Reviewed-by: default avatarSabrina Dubroca <sd@queasysnail.net>
Tested-by: default avatarOleksandr Natalenko <oleksandr@natalenko.name>
Signed-off-by: default avatarPaolo Abeni <pabeni@redhat.com>
parent 04ca1495

drivers/net/Kconfig

+1 −0
Original line number Diff line number Diff line
@@ -125,6 +125,7 @@ config OVPN 
	select CRYPTO_AES

	select CRYPTO_GCM

	select CRYPTO_CHACHA20POLY1305

	select STREAM_PARSER

	help

	  This module enhances the performance of the OpenVPN userspace software

	  by offloading the data channel processing to kernelspace.

drivers/net/ovpn/Makefile

+1 −0
Original line number Diff line number Diff line
@@ -18,4 +18,5 @@ ovpn-y += peer.o 
ovpn-y += pktid.o

ovpn-y += socket.o

ovpn-y += stats.o

ovpn-y += tcp.o

ovpn-y += udp.o

drivers/net/ovpn/io.c

+4 −0
Original line number Diff line number Diff line
@@ -22,6 +22,7 @@ 
#include "crypto_aead.h"

#include "netlink.h"

#include "proto.h"

#include "tcp.h"

#include "udp.h"

#include "skb.h"

#include "socket.h"
@@ -211,6 +212,9 @@ void ovpn_encrypt_post(void *data, int ret) 
	case IPPROTO_UDP:

		ovpn_udp_send_skb(peer, sock->sock, skb);

		break;

	case IPPROTO_TCP:

		ovpn_tcp_send_skb(peer, sock->sock, skb);

		break;

	default:

		/* no transport configured yet */

		goto err_unlock;

drivers/net/ovpn/main.c

+3 −0
Original line number Diff line number Diff line
@@ -22,6 +22,7 @@ 
#include "io.h"

#include "peer.h"

#include "proto.h"

#include "tcp.h"

#include "udp.h"



static int ovpn_net_init(struct net_device *dev)
@@ -177,6 +178,8 @@ static int __init ovpn_init(void) 
		goto unreg_rtnl;

	}



	ovpn_tcp_init();



	return 0;



unreg_rtnl:

drivers/net/ovpn/ovpnpriv.h

+1 −0
Original line number Diff line number Diff line
@@ -10,6 +10,7 @@ 
#ifndef _NET_OVPN_OVPNSTRUCT_H_

#define _NET_OVPN_OVPNSTRUCT_H_



#include <linux/workqueue.h>

#include <net/gro_cells.h>

#include <uapi/linux/if_link.h>

#include <uapi/linux/ovpn.h>