Marco Angaroni 3ec10d3a2b ipvs: update real-server binding of outgoing connections in SIP-pe ... Previous patch that introduced handling of outgoing packets in SIP persistent-engine did not call ip_vs_check_template() in case packet was matching a connection template. Assumption was that real-server was healthy, since it was sending a packet just in that moment. There are however real-server fault conditions requiring that association between call-id and real-server (represented by connection template) gets updated. Here is an example of the sequence of events: 1) RS1 is a back2back user agent that handled call-id1 and call-id2 2) RS1 is down and was marked as unavailable 3) new message from outside comes to IPVS with call-id1 4) IPVS reschedules the message to RS2, which becomes new call handler 5) RS2 forwards the message outside, translating call-id1 to call-id2 6) inside pe->conn_out() IPVS matches call-id2 with existing template 7) IPVS does not change association call-id2 <-> RS1 8) new message comes from client with call-id2 9) IPVS reschedules the message to a real-server potentially different from RS2, which is now the correct destination This patch introduces ip_vs_check_template() call in the handling of outgoing packets for SIP-pe. And also introduces a second optional argument for ip_vs_check_template() that allows to check if dest associated to a connection template is the same dest that was identified as the source of the packet. This is to change the real-server bound to a particular call-id independently from its availability status: the idea is that it's more reliable, for in->out direction (where internal network can be considered trusted), to always associate a call-id with the last real-server that used it in one of its messages. Think about above sequence of events where, just after step 5, RS1 returns instead to be available. Comparison of dests is done by simply comparing pointers to struct ip_vs_dest; there should be no cases where struct ip_vs_dest keeps its memory address, but represent a different real-server in terms of ip-address / port. Fixes: 39b9722315 ("ipvs: handle connections started by real-servers") Signed-off-by: Marco Angaroni <marcoangaroni@gmail.com> Acked-by: Julian Anastasov <ja@ssi.bg> Signed-off-by: Simon Horman <horms@verge.net.au>		2016-06-06 09:47:25 +09:00
..
ipset	netfilter: ipset: fix race condition in ipset save, swap and delete	2016-03-28 17:57:45 +02:00
ipvs	ipvs: update real-server binding of outgoing connections in SIP-pe	2016-06-06 09:47:25 +09:00
Kconfig	netfilter: tee: select NF_DUP_IPV6 unconditionally	2016-02-08 12:58:28 +01:00
Makefile	netfilter: nf_tables: add forward expression to the netdev family	2016-01-04 17:48:38 +01:00
core.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2015-10-24 06:54:12 -07:00
nf_conntrack_acct.c	…
nf_conntrack_amanda.c	…
nf_conntrack_broadcast.c	…
nf_conntrack_core.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-15 13:32:48 -04:00
nf_conntrack_ecache.c	netfilter: conntrack: move expectation event helper to ecache.c	2016-04-12 23:01:57 +02:00
nf_conntrack_expect.c	netfilter: conntrack: use a single expectation table for all namespaces	2016-05-06 11:50:01 +02:00
nf_conntrack_extend.c	…
nf_conntrack_ftp.c	netfilter: nf_ct_helper: Fix helper unregister count.	2016-05-30 12:21:22 +02:00
nf_conntrack_h323_asn1.c	…
nf_conntrack_h323_main.c	…
nf_conntrack_h323_types.c	…
nf_conntrack_helper.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf	2016-06-01 17:54:19 -07:00
nf_conntrack_irc.c	netfilter: nf_ct_helper: Fix helper unregister count.	2016-05-30 12:21:22 +02:00
nf_conntrack_l3proto_generic.c	…
nf_conntrack_labels.c	netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used'	2016-04-18 20:39:48 +02:00
nf_conntrack_netbios_ns.c	…
nf_conntrack_netlink.c	netfilter: conntrack: use a single expectation table for all namespaces	2016-05-06 11:50:01 +02:00
nf_conntrack_pptp.c	netfilter: nf_conntrack: push zone object into functions	2015-08-11 12:29:01 +02:00
nf_conntrack_proto.c	…
nf_conntrack_proto_dccp.c	libnl: nla_put_be64(): align on a 64-bit area	2016-04-23 20:13:24 -04:00
nf_conntrack_proto_generic.c	netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple	2015-09-18 22:00:04 +02:00
nf_conntrack_proto_gre.c	netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple	2015-09-18 22:00:04 +02:00
nf_conntrack_proto_sctp.c	netfilter: conntrack: don't acquire lock during seq_printf	2016-04-19 20:26:25 +02:00
nf_conntrack_proto_tcp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2016-04-24 00:12:08 -04:00
nf_conntrack_proto_udp.c	netfilter: conntrack: introduce clash resolution on insertion race	2016-05-05 16:39:50 +02:00
nf_conntrack_proto_udplite.c	netfilter: conntrack: introduce clash resolution on insertion race	2016-05-05 16:39:50 +02:00
nf_conntrack_sane.c	netfilter: nf_ct_helper: Fix helper unregister count.	2016-05-30 12:21:22 +02:00
nf_conntrack_seqadj.c	net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool	2015-08-17 21:33:06 -07:00
nf_conntrack_sip.c	netfilter: nf_ct_helper: Fix helper unregister count.	2016-05-30 12:21:22 +02:00
nf_conntrack_snmp.c	…
nf_conntrack_standalone.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf	2016-06-01 17:54:19 -07:00
nf_conntrack_tftp.c	netfilter: nf_ct_helper: Fix helper unregister count.	2016-05-30 12:21:22 +02:00
nf_conntrack_timeout.c	netfilter: cttimeout: add netns support	2015-12-14 12:48:58 +01:00
nf_conntrack_timestamp.c	…
nf_dup_netdev.c	net: remove skb_sender_cpu_clear()	2016-03-01 17:36:47 -05:00
nf_internals.h	netfilter: nf_queue: fix nf_queue_nf_hook_drop()	2015-07-23 16:17:58 +02:00
nf_log.c	netfilter: nf_log: wait for rcu grace after logger unregistration	2015-09-17 13:37:31 +02:00
nf_log_common.c	…
nf_nat_amanda.c	…
nf_nat_core.c	netfilter: conntrack: use a single nat bysource table for all namespaces	2016-05-09 16:45:49 +02:00
nf_nat_ftp.c	…
nf_nat_helper.c	…
nf_nat_irc.c	…
nf_nat_proto_common.c	…
nf_nat_proto_dccp.c	net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool	2015-08-17 21:33:06 -07:00
nf_nat_proto_sctp.c	…
nf_nat_proto_tcp.c	net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool	2015-08-17 21:33:06 -07:00
nf_nat_proto_udp.c	net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool	2015-08-17 21:33:06 -07:00
nf_nat_proto_udplite.c	net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool	2015-08-17 21:33:06 -07:00
nf_nat_proto_unknown.c	…
nf_nat_redirect.c	netfilter: nf_nat_redirect: add missing NULL pointer check	2015-10-27 06:54:56 +01:00
nf_nat_sip.c	…
nf_nat_tftp.c	…
nf_queue.c	netfilter: nf_queue: Make the queue_handler pernet	2016-05-25 11:54:22 +02:00
nf_sockopt.c	…
nf_synproxy_core.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf	2015-09-05 21:57:42 -07:00
nf_tables_api.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf	2016-06-01 17:54:19 -07:00
nf_tables_core.c	netfilter: nf_tables: fix nf_log_trace based tracing	2015-12-09 16:53:46 +01:00
nf_tables_inet.c	netfilter: nf_tables: release objects on netns destruction	2015-12-28 18:34:35 +01:00
nf_tables_netdev.c	netfilter: nf_tables_netdev: fix error path in module initialization	2016-01-18 13:53:37 +01:00
nf_tables_trace.c	libnl: nla_put_be64(): align on a 64-bit area	2016-04-23 20:13:24 -04:00
nfnetlink.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-02-23 00:09:14 -05:00
nfnetlink_acct.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-15 13:32:48 -04:00
nfnetlink_cthelper.c	netfilter: nfnetlink: pass down netns pointer to call() and call_rcu()	2015-12-28 18:41:41 +01:00
nfnetlink_cttimeout.c	netfilter: conntrack: use a single hashtable for all namespaces	2016-05-05 16:39:47 +02:00
nfnetlink_log.c	nfnetlink: remove nfnetlink_alloc_skb	2016-02-18 11:42:19 -05:00
nfnetlink_queue.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf	2016-06-01 17:54:19 -07:00
nft_bitwise.c	…
nft_byteorder.c	netfilter: nft_byteorder: avoid unneeded le/be conversion steps	2016-01-13 14:02:59 +01:00
nft_cmp.c	…
nft_compat.c	netfilter: nft_compat: check match/targetinfo attr size	2016-03-11 11:37:56 +01:00
nft_counter.c	libnl: nla_put_be64(): align on a 64-bit area	2016-04-23 20:13:24 -04:00
nft_ct.c	netfilter: nftables: add connlabel set support	2016-05-05 16:27:59 +02:00
nft_dup_netdev.c	netfilter: nf_tables: add packet duplication to the netdev family	2016-01-03 21:04:23 +01:00
nft_dynset.c	libnl: nla_put_be64(): align on a 64-bit area	2016-04-23 20:13:24 -04:00
nft_exthdr.c	…
nft_fwd_netdev.c	netfilter: nf_tables: add forward expression to the netdev family	2016-01-04 17:48:38 +01:00
nft_hash.c	rhashtable: accept GFP flags in rhashtable_walk_init	2016-04-05 10:56:32 +02:00
nft_immediate.c	…
nft_limit.c	libnl: nla_put_be64(): align on a 64-bit area	2016-04-23 20:13:24 -04:00
nft_log.c	netfilter: nf_tables: Use pkt->net instead of computing net from the passed net_devices	2015-09-18 21:58:49 +02:00
nft_lookup.c	…
nft_masq.c	netfilter: nft_masq: support port range	2016-03-02 20:05:27 +01:00
nft_meta.c	netfilter: meta: add PRANDOM support	2016-02-29 13:55:59 +01:00
nft_nat.c	…
nft_payload.c	netfilter: nft_payload: add packet mangling support	2015-11-25 13:54:51 +01:00
nft_queue.c	netfilter: nf_tables: kill nft_pktinfo.ops	2015-09-18 21:58:01 +02:00
nft_rbtree.c	netfilter: nft_rbtree: allow adjacent intervals with dynamic updates	2016-04-25 15:32:41 +02:00
nft_redir.c	…
nft_reject.c	…
nft_reject_inet.c	ipv4: Push struct net down into nf_send_reset	2015-09-29 20:21:31 +02:00
x_tables.c	netfilter: x_tables: don't reject valid target size on some architectures	2016-06-02 14:09:33 +02:00
xt_AUDIT.c	…
xt_CHECKSUM.c	…
xt_CLASSIFY.c	…
xt_CONNSECMARK.c	…
xt_CT.c	netfilter: cttimeout: add netns support	2015-12-14 12:48:58 +01:00
xt_DSCP.c	…
xt_HL.c	…
xt_HMARK.c	…
xt_IDLETIMER.c	netfilter: IDLETIMER: fix race condition when destroy the target	2016-04-29 14:28:48 +02:00
xt_LED.c	…
xt_LOG.c	netfilter: x_tables: Use par->net instead of computing from the passed net devices	2015-09-18 21:58:25 +02:00
xt_NETMAP.c	…
xt_NFLOG.c	netfilter: x_tables: Use par->net instead of computing from the passed net devices	2015-09-18 21:58:25 +02:00
xt_NFQUEUE.c	…
xt_RATEEST.c	…
xt_REDIRECT.c	…
xt_SECMARK.c	…
xt_TCPMSS.c	netfilter: xt_TCPMSS: handle CHECKSUM_COMPLETE in tcpmss_tg6()	2016-01-18 12:18:17 +01:00
xt_TCPOPTSTRIP.c	net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool	2015-08-17 21:33:06 -07:00
xt_TEE.c	netfilter: tee: select NF_DUP_IPV6 unconditionally	2016-02-08 12:58:28 +01:00
xt_TPROXY.c	inet: refactor inet[6]_lookup functions to take skb	2016-02-11 03:54:14 -05:00
xt_TRACE.c	…
xt_addrtype.c	netfilter: x_tables: Use par->net instead of computing from the passed net devices	2015-09-18 21:58:25 +02:00
xt_bpf.c	…
xt_cgroup.c	netfilter: implement xt_cgroup cgroup2 path match	2015-12-14 20:34:55 +01:00
xt_cluster.c	…
xt_comment.c	…
xt_connbytes.c	…
xt_connlabel.c	netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used'	2016-04-18 20:39:48 +02:00
xt_connlimit.c	netfilter: nf_conntrack: Add a struct net parameter to l4_pkt_to_tuple	2015-09-18 22:00:04 +02:00
xt_connmark.c	…
xt_conntrack.c	…
xt_cpu.c	…
xt_dccp.c	…
xt_devgroup.c	…
xt_dscp.c	…
xt_ecn.c	…
xt_esp.c	…
xt_hashlimit.c	…
xt_helper.c	…
xt_hl.c	…
xt_ipcomp.c	…
xt_iprange.c	…
xt_ipvs.c	ipvs: Pass ipvs into conn_out_get	2015-09-24 09:34:41 +09:00
xt_l2tp.c	…
xt_length.c	…
xt_limit.c	…
xt_mac.c	…
xt_mark.c	…
xt_multiport.c	…
xt_nat.c	…
xt_nfacct.c	netfilter: nfacct: per network namespace support	2015-08-07 11:50:56 +02:00
xt_osf.c	netfilter: xt_osf: remove unused variable	2016-02-29 13:59:43 +01:00
xt_owner.c	netfilter: xt_owner: use skb_to_full_sk() helper	2015-11-08 20:56:39 -05:00
xt_physdev.c	…
xt_pkttype.c	…
xt_policy.c	…
xt_quota.c	…
xt_rateest.c	…
xt_realm.c	…
xt_recent.c	netfilter: x_tables: Use par->net instead of computing from the passed net devices	2015-09-18 21:58:25 +02:00
xt_repldata.h	…
xt_sctp.c	…
xt_set.c	…
xt_socket.c	tcp/dccp: do not touch listener sk_refcnt under synflood	2016-04-04 22:11:20 -04:00
xt_state.c	…
xt_statistic.c	…
xt_string.c	…
xt_tcpmss.c	…
xt_tcpudp.c	…
xt_time.c	…
xt_u32.c	…