mbox series

[Openvpn-devel,net,0/5] ovpn: fix UDP route cache and endpoint handling

Message ID cover.1785253480.git.ralf@mandelbit.com
Headers
Series ovpn: fix UDP route cache and endpoint handling |

Message

Ralf Lici July 28, 2026, 3:50 p.m. UTC 
  Hi,

This series fixes several related issues in ovpn's UDP endpoint and
route-cache handling.

It preserves IPv6 scope IDs supplied through netlink, handles
unspecified source addresses correctly, invalidates cached routes when
mutable socket route inputs change, avoids in-place updates of
RCU-published peer binds, and prevents stale IPv6 routes from being
cached across FIB updates.

Support for honoring UDP sockets bound to a device or local address will
follow separately for net-next, after these route-cache fixes are
available there.

Cheers,

Ralf Lici
Mandelbit Srl

---
Ralf Lici (5):
  ovpn: preserve IPv6 scope id for netlink peer endpoints
  ovpn: skip UDP source validation for unspecified addresses
  ovpn: track UDP socket route key for peer dst cache
  ovpn: avoid in-place updates of peer bind local address
  ovpn: avoid caching stale IPv6 dst after FIB changes

 drivers/net/ovpn/netlink.c |   6 ++
 drivers/net/ovpn/peer.c    |  37 ++++---
 drivers/net/ovpn/peer.h    |  19 +++-
 drivers/net/ovpn/udp.c     | 212 ++++++++++++++++++++++++++++++-------
 include/net/dst_cache.h    |  13 +++
 net/core/dst_cache.c       |  16 ++-
 6 files changed, 248 insertions(+), 55 deletions(-)