105b916361
This is a reimplementation, partially building on the earlier draft, that uses L4 sockets (SOCK_DGRAM, SOCK_STREAM) instead of SOCK_RAW, providing L4-L2 translation functionality without requiring any security capability. Conceptually, this follows the design presented at: https://gitlab.com/abologna/kubevirt-and-kvm/-/blob/master/Networking.md The most significant novelty here comes from TCP and UDP translation layers. In particular, the TCP state and translation logic follows the intent of being minimalistic, without reimplementing a full TCP stack in either direction, and synchronising as much as possible the TCP dynamic and flows between guest and host kernel. Another important introduction concerns addressing, port translation and forwarding. The Layer 4 implementations now attempt to bind on all unbound ports, in order to forward connections in a transparent way. While at it: - the qemu 'tap' back-end can't be used as-is by qrap anymore, because of explicit checks now introduced in qemu to ensure that the corresponding file descriptor is actually a tap device. For this reason, qrap now operates on a 'socket' back-end type, accounting for and building the additional header reporting frame length - provide a demo script that sets up namespaces, addresses and routes, and starts the daemon. A virtual machine started in the network namespace, wrapped by qrap, will now directly interface with passt and communicate using Layer 4 sockets provided by the host kernel. Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
39 lines
979 B
C
39 lines
979 B
C
#define UNIX_SOCK_PATH "/tmp/passt.socket"
|
|
|
|
/**
|
|
* struct ctx - Execution context
|
|
* @epollfd: file descriptor for epoll instance
|
|
* @fd_unix: AF_UNIX socket for tap file descriptor
|
|
* @v4: Enable IPv4 transport
|
|
* @mac: Host MAC address
|
|
* @mac_guest: Guest MAC address
|
|
* @addr4: IPv4 address for external, routable interface
|
|
* @mask4: IPv4 netmask, network order
|
|
* @gw4: Default IPv4 gateway, network order
|
|
* @dns4: IPv4 DNS address, network order
|
|
* @v6: Enable IPv6 transport
|
|
* @addr6: IPv6 address for external, routable interface
|
|
* @gw6: Default IPv6 gateway
|
|
* @dns4: IPv6 DNS address
|
|
* @ifn: Name of routable interface
|
|
*/
|
|
struct ctx {
|
|
int epollfd;
|
|
int fd_unix;
|
|
unsigned char mac[ETH_ALEN];
|
|
unsigned char mac_guest[ETH_ALEN];
|
|
|
|
int v4;
|
|
unsigned long addr4;
|
|
unsigned long mask4;
|
|
unsigned long gw4;
|
|
unsigned long dns4;
|
|
|
|
int v6;
|
|
struct in6_addr addr6;
|
|
struct in6_addr addr6_guest;
|
|
struct in6_addr gw6;
|
|
struct in6_addr dns6;
|
|
|
|
char ifn[IF_NAMESIZE];
|
|
};
|