From patchwork Tue Jul 28 15:50:10 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ralf Lici X-Patchwork-Id: 34 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:fd0b:b0:87d:ab56:3700 with SMTP id cw11csp806156mac; Tue, 28 Jul 2026 08:50:47 -0700 (PDT) X-Forwarded-Encrypted: i=2; AHgh+RpkmWIW7pcuekNd4oFhNEH85G07Km7Chp9Y20aCAoT01r18tyaf9vgXLLG7Sw4i8qep65XO5yOdqRk=@openvpn.net X-Received: by 2002:a05:6820:2005:b0:6aa:fe65:4cd7 with SMTP id 006d021491bc7-6ac9696eb75mr1550996eaf.2.1785253847468; Tue, 28 Jul 2026 08:50:47 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1785253847; cv=none; d=google.com; s=arc-20260327; b=G5buUN7JiSQ9rE6WGyM9QjKcvYKujkU2PspxKxITfPdkOLEEj0wurXFxikUxw7NCpe g22j7J0FXH98PCyTqfKyq3+InpqAu3zhXG470Ka4IvQszGrdRP3hMZJX4YdIkQ2zhrua kZyAnICBON7S3oNgwpfhQCpyt7s6NCg+I+FFEcuPWgAxAiJpuwNxxFjBZ8TEIRk1Q7dW XpnlNYBM5KUs3k3+7OCj85Gq1cxX3owaawuvmZ3zHaLpK2KM+SLl0RReFB4T7ELgk7kg h7Gl3cqqi6xvYKwo5/4gHIgffX7Rdv1Zf4g0CFfGZTYTbO0chsdFWz2bqPtQTsi2OGh2 bSxg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=errors-to:content-transfer-encoding:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:message-id:date:to:from:dkim-signature:dkim-signature :dkim-signature:dkim-signature; bh=lVbIoqkmrCTYYkgrlwmPDH74W3S60Pnq815blCsyP58=; fh=4NbAC/LsuMLI0S0hprUlLSLCiHwg6SCAifhH718Jh0Q=; b=WJzQ5iFZir6J/jUnU6u+tYo1uUmjl+GWG/WBwEAdZXHTVBeTn8HC1Q+k3bo/Dzh1OK Tljcy/PvAHwCxJ5vF86hrrUSnoEoCjBEA5uiJqfw5657NTKIMaXY2OSz4KmEVjsNXZw1 jibjw6eioGfTrf4GBSlMpaz8Mb/LFAq/DoagGlSojzyVxT1AOsmNEXYelThY+nxkyeKS E2GyCGBRhh1LY1txtaeJbhrV274NkpPrpYYe01bzg7WNj8mVey1Iz2F/XrZw6orFgp8l mAB8e/hCR5BJK4AeSEk7j9Jp6OqalwXO5sELKlemDpBD5oCiefTKCpR3r16ZUDY6TFLh B2og==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=JvXkg9sM; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=c9KyMXFC; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=LhkB5sjc; dkim=neutral (body hash did not verify) header.i=@mandelbit.com header.s=MBO0001 header.b=Xm3kgGvZ; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 586e51a60fabf-458869656f2si209712fac.181.2026.07.28.08.50.47 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 28 Jul 2026 08:50:47 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=JvXkg9sM; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=c9KyMXFC; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=LhkB5sjc; dkim=neutral (body hash did not verify) header.i=@mandelbit.com header.s=MBO0001 header.b=Xm3kgGvZ; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:Message-ID:Date:To:From:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Owner; bh=lVbIoqkmrCTYYkgrlwmPDH74W3S60Pnq815blCsyP58=; b=JvXkg9sMPNggf7gZdXvWdy4AmF xrzNnot5IJSxL7FXcw/dsTukulIs9yHvHYsAG+WV3W6ZQYJ2PUapwhbIPgfTYTdKEz5xnD4ae/8og UoHTC3KRICL+mIPJ0wknQnAQyMhIGIfLVaad/HnWjSvhXDFzgRRMedZMoUu8dt+znfwI=; Received: from [127.0.0.1] (helo=sfs-ml-2.v29.lw.sourceforge.com) by sfs-ml-2.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1wok4o-0005rM-NB; Tue, 28 Jul 2026 15:50:43 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-2.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1wok4k-0005ql-Op for openvpn-devel@lists.sourceforge.net; Tue, 28 Jul 2026 15:50:40 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:Message-ID: Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=pM5g0jU02z5/bTvDLfoNW8nSxhGdiiVY9ZoCRT8rvJk=; b=c9KyMXFCNwkbrBMh/UTkJoy1kQ W2HaTkR56/kGlLm1FK4B3ddoeCAnOaYSuQorVp+oa9rVgEFq8dH+DT7sbcHZSf+j9g+4vx+VIRM/d gDpZ0+54DbYnFaJ7ByFM1zG/tIEyXfAXFsFFP0rcytfXMQ42J2D595oe1n9Xu+r/9t+I=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:Message-ID:Date:Subject:Cc:To:From :Sender:Reply-To:Content-Type:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To: References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post: List-Owner:List-Archive; bh=pM5g0jU02z5/bTvDLfoNW8nSxhGdiiVY9ZoCRT8rvJk=; b=L hkB5sjcATclD/Ll1T6V/Fg60xbq3eGDAU4zJTn5vdnf7O92Iqm0j9SgzktHp3oAwxZZ7Dm9/THuW3 bE6B9PIrc+cjLQvEdRdV+6AWeHdY9FUSEWpcdO9y0cZqPYsMVxI093kqGYegsb0vxhQsW+luNXorL A8iKt69+zi8h4qbU=; Received: from mout-b-112.mailbox.org ([195.10.208.42]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1wok4j-00027K-TH for openvpn-devel@lists.sourceforge.net; Tue, 28 Jul 2026 15:50:39 +0000 Received: from smtp202.mailbox.org (unknown [10.196.197.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-112.mailbox.org (Postfix) with ESMTPS id 4h8g0P4tzfz5wrL; Tue, 28 Jul 2026 17:50:29 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandelbit.com; s=MBO0001; t=1785253829; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=pM5g0jU02z5/bTvDLfoNW8nSxhGdiiVY9ZoCRT8rvJk=; b=Xm3kgGvZI4qQr3Js88V+k2z/0LpxQfA1hb8q7cGvallymZWNU+wYfg/mFiNUyW8YnX9T9+ UEptJ/jgQ8LKg9q9kJq1Omi9qYU6UvWr9COqlws9Syx3V/d5TpGxYSiRZpcWKXYg+pDfdx bPDwQ7Zrko9ziBJBGp6b5SX9U8MkoBG+KxY8nBI08NCEzNnpvA3aRD/0m3IU0GuQJDhZCI Ls/m6TbzPNDS2hUKekTZXFx749WzCDUGjPW6hG1K5tZtGdxwCgfeiRP/0l71W4lfgfbBXe h2JusVxMe9a/EKG85q/Pt3tHdVqAaNiXW8GJRuycH0g1R2vA5F5XIZ5J9fKh2g== From: Ralf Lici To: openvpn-devel@lists.sourceforge.net Date: Tue, 28 Jul 2026 17:50:10 +0200 Message-ID: MIME-Version: 1.0 X-Spam-Score: -0.2 (/) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-2.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Hi, This series fixes several related issues in ovpn's UDP endpoint and route-cache handling. It preserves IPv6 scope IDs supplied through netlink, handles unspecified source addresses correctly, invalidates cached routes when mutable socket route inputs change, avoids in-place updates of RCU- [...] Content analysis details: (-0.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Headers-End: 1wok4j-00027K-TH Subject: [Openvpn-devel] [PATCH ovpn net 0/5] ovpn: fix UDP route cache and endpoint handling X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: 1871974338442242214 X-GMAIL-MSGID: 1871974338442242214 Hi, This series fixes several related issues in ovpn's UDP endpoint and route-cache handling. It preserves IPv6 scope IDs supplied through netlink, handles unspecified source addresses correctly, invalidates cached routes when mutable socket route inputs change, avoids in-place updates of RCU-published peer binds, and prevents stale IPv6 routes from being cached across FIB updates. Support for honoring UDP sockets bound to a device or local address will follow separately for net-next, after these route-cache fixes are available there. Cheers, Ralf Lici Mandelbit Srl --- Ralf Lici (5): ovpn: preserve IPv6 scope id for netlink peer endpoints ovpn: skip UDP source validation for unspecified addresses ovpn: track UDP socket route key for peer dst cache ovpn: avoid in-place updates of peer bind local address ovpn: avoid caching stale IPv6 dst after FIB changes drivers/net/ovpn/netlink.c | 6 ++ drivers/net/ovpn/peer.c | 37 ++++--- drivers/net/ovpn/peer.h | 19 +++- drivers/net/ovpn/udp.c | 212 ++++++++++++++++++++++++++++++------- include/net/dst_cache.h | 13 +++ net/core/dst_cache.c | 16 ++- 6 files changed, 248 insertions(+), 55 deletions(-)