From patchwork Wed Sep 16 08:35:09 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ralf Lici X-Patchwork-Id: 43 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:6446:b0:8a0:ea1f:253a with SMTP id n6csp5930088mag; Wed, 16 Sep 2026 01:35:51 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvBxiMoAgYxxKMaR94VQUMqNE4plyJh9m5MhuQ1Yv3tVQkLD1tdFuuaMR+CSVfxFpXwW2LSfnzP5cxvg=@openvpn.net X-Received: by 2002:a05:6870:e242:b0:43a:19fb:8b99 with SMTP id 586e51a60fabf-48476c4a622mr3301605fac.9.1789547750801; Wed, 16 Sep 2026 01:35:50 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1789547750; cv=none; d=google.com; s=arc-20260327; b=KdGyKIRjxfeoMzgfSt3SbvWO+mK0Mv6QhbAH2QK2CBY0UPBQBX8rW8LsK69F4jPlC0 5ZMKDspKmuW9i0vgGj5jW+odsVzqNnsh9M5MreszrlSXlZRqPerHHMhoRiqXf+/fuBSn 4TnypabfIDrBhOdPX/N/R5YlHiS7UasOR6mqWqcxmUbmfHC0Xg2CPCZwvSXU/0vDtrHq CahSvO41wNBsuFRxfaGMSppMjD0Cd/WzKLFk6kZR2vPalAV5/FWd9lwV2nc5UXuwHJ5h EmAYYFudLcNUuxj3Sg3qwDzPUnlm3ssn5JnZV0ee+c98Il6tyFCrsT/shrRXA4lYJQZt cKMA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=errors-to:content-transfer-encoding:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:message-id:date:to:from:dkim-signature:dkim-signature :dkim-signature:dkim-signature; bh=O+Uowqkh0LXjJvahZnZZRj78JZe771kqEXaGFIQM154=; fh=4NbAC/LsuMLI0S0hprUlLSLCiHwg6SCAifhH718Jh0Q=; b=IntjhWTLY4mrWK0iHjsYwn7lTeYNFNk8S89ZU8I6d+wZusZ16An/3kmbXWQyH36F2P AfWR1kwFz2LnUPdO1o8HJpDQh2SOAYsTY5SpWhG2CIPDWW3imMSqDMLwpcGv8ydcuNHc YRoXM+1brdRQ3AUV/mHllEsFEnDFRkl/dD7K69RXkkrR0TrIfixf7jdcMcXWeDShrAEv Ql3ibpYdsQMKFJb7+ctrtFBJRl9FToMgKIWPfuRaqe6GuLpbturAh5rh/jtneKYOoLJy +7msctK4TLtMI9Qz8KgsVEae4QvZ+afhifxLZy3cjoRdzumJQl/SDtRjLPRVIG32lp6a rmEg==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=Uq0Gxe36; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b="UPEKj/7R"; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=cPSCYFCp; dkim=neutral (body hash did not verify) header.i=@mandelbit.com header.s=MBO0001 header.b=LL9K4xmQ; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 586e51a60fabf-484279156dcsi2335970fac.6.2026.09.16.01.35.50 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Sep 2026 01:35:50 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=Uq0Gxe36; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b="UPEKj/7R"; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=cPSCYFCp; dkim=neutral (body hash did not verify) header.i=@mandelbit.com header.s=MBO0001 header.b=LL9K4xmQ; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:Message-ID:Date:To:From:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Owner; bh=O+Uowqkh0LXjJvahZnZZRj78JZe771kqEXaGFIQM154=; b=Uq0Gxe36D0KMNCZIKxo5+9K3It ZmIYPW7LDHn4yXOo/LYhrxjWqairwASdPcEznx9+9Aki9WdO4wjrowmS0tOPLM00p/+123AHQ6qjD T5D2v2jq5idnjN9v0kqrjNt8pefiRkSnaZ4sVGo84azc7EQz/9j3r4CVyRWS4DGQKbyg=; Received: from [127.0.0.1] (helo=sfs-ml-4.v29.lw.sourceforge.com) by sfs-ml-4.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1x6l7L-0002Jh-LD; Wed, 16 Sep 2026 08:35:47 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-4.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1x6l7F-0002JG-19 for openvpn-devel@lists.sourceforge.net; Wed, 16 Sep 2026 08:35:41 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:Message-ID: Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=0vfEvmgam01NVpeCoZBHNRlynfRnI/bqXu0rQKrkZHE=; b=UPEKj/7RO7WTVNP5SvFEwF45NQ WO9lRtIeQWRoC6UTtE+UEJkRCyxWVkJsdG2SbfE+/Vg2SWkXMG5EOCRTgZZc0UCLvkku1kVa/zWod qZUbAZ+mOw1YLKHSAHCimAHmtiqQa0oAUeX4mctiI2YW27k7TycKBsmCAl373zNkEgK0=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:Message-ID:Date:Subject:To:From: Sender:Reply-To:Cc:Content-Type:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To: References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post: List-Owner:List-Archive; bh=0vfEvmgam01NVpeCoZBHNRlynfRnI/bqXu0rQKrkZHE=; b=c PSCYFCp62dO99/6Yf/SvrzIwp9bGWZvTZtTny1oV37HhKvWy3QMKosZPTZNntJMrl8E3zGfji899x zCJukj2HG6Lq9Y5fTm7DQwpsBo0i1RIT97RqnPTlNj8AfnhvtrddzxI6dcbAjT+3iZhoZJuBKAlXr 6kGCJNcwCgbGXPTs=; Received: from mout-b-206.mailbox.org ([195.10.208.51]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1x6l7B-00053D-EH for openvpn-devel@lists.sourceforge.net; Wed, 16 Sep 2026 08:35:40 +0000 Received: from smtp2.mailbox.org (smtp2.mailbox.org [IPv6:2001:67c:2050:b231:465::2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-206.mailbox.org (Postfix) with ESMTPS id 4hlBzN4yWYzSQ for ; Wed, 16 Sep 2026 10:35:28 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandelbit.com; s=MBO0001; t=1789547728; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=0vfEvmgam01NVpeCoZBHNRlynfRnI/bqXu0rQKrkZHE=; b=LL9K4xmQ0GeZrlxSdW+ICxx9HsiaPyxy0P2mSdhpJlrxQAgJgQfxjSoUZhIsUsT7jDFVbk 68ZP/1+gUq3aylWmF05YkJ+bC0CB2rjaHE0Nt22jIs47fVWbNqnQdI+Tcqffj7ZteKhWm4 26FJjVK9ytLqStxitNJ1LLtxk8Jj6i3qNJQHJi6/IYJ5RT2F4tGH4CxOwcv3bhh/u6VPh1 WFwCb7T787ViJRqs5zyqlBYL/baLcAcs2IW57yLlGgI2V5PxBv2QrczBdbIvCJKxFp18eN 68PjWME6gE0yWqq5HfzcaEBHCkG0OgSjkffr3Ky1HfeBHwEUVjMPwgkahmmTHw== Authentication-Results: outgoing_mbo_mout; dkim=none; spf=pass (outgoing_mbo_mout: domain of ralf@mandelbit.com designates 2001:67c:2050:b231:465::2 as permitted sender) smtp.mailfrom=ralf@mandelbit.com From: Ralf Lici To: openvpn-devel@lists.sourceforge.net Date: Wed, 16 Sep 2026 10:35:09 +0200 Message-ID: MIME-Version: 1.0 X-Rspamd-Queue-Id: 4hlBzN4yWYzSQ X-Spam-Score: -0.2 (/) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-1.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Hi, This series adds support for preserving GSO and GRO batching across ovpn, including forwarded TCP traffic. The transmit patches let GSO skbs reach ovpn, complete each inner packet's checksum before en [...] Content analysis details: (-0.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid X-Headers-End: 1x6l7B-00053D-EH Subject: [Openvpn-devel] [RFC ovpn net-next v3 0/9] ovpn: preserve GSO and GRO batching X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: 1876476822323303246 X-GMAIL-MSGID: 1876476822323303246 Hi, This series adds support for preserving GSO and GRO batching across ovpn, including forwarded TCP traffic. The transmit patches let GSO skbs reach ovpn, complete each inner packet's checksum before encryption, and, when the layout permits, put the encrypted records into a UDP GSO skb. Ordinary packets and frag-list GSO children retain the existing in-place path. On receive, ovpn uses UDP GRO to collect compatible encrypted records in a frag-list and then decrypts them individually. The series also includes an AEAD helper refactor and small transmit and receive prefetch changes. The patch messages contain the measurements. The final patch adds an opt-in direct GRO mode for discussion. Unlike the default full-stack mode, it consumes DATA_V2 records in the GRO callback and bypasses parts of the outer receive stack, including TC, netfilter, socket XFRM policy and normal UDP accounting. Its advantage over the prefetched full-stack path is small in my latest 100-Gbit/s tests. Direct GRO also depends on a generic GRO ownership change in the preceding patch. That change, the skb_gro_receive_list export and UDP tunnel GRO callback accounting touch broader networking code. These prerequisites would need discussion on netdev before any merge (this RFC is first for feedback on the ovpn design). Thanks, Ralf Lici Mandelbit Srl --- Changes since v2 https://lore.kernel.org/openvpn-devel/cover.1789540779.git.ralf@mandelbit.com/ - Unclone incoming GRO aggregates before segmenting them in 5/9. (Sashiko) - Fix endianness bug serializing 1-byte netlink attr from 4-byte enum in 9/9. (Sashiko) Changes since v1 https://lore.kernel.org/openvpn-devel/cover.1789485693.git.ralf@mandelbit.com/ - Fix a couple of wrong assumptions in 5/9 ("ovpn: coalesce UDP data records with GRO"). (Sashiko) Ralf Lici (9): ovpn: advertise checksum offload for GSO packets ovpn: accept frag-list GSO input ovpn: refactor AEAD encryption helpers ovpn: convert GSO input into UDP GSO output ovpn: coalesce UDP data records with GRO ovpn: prefetch encrypted records before GRO batch decryption ovpn: prefetch GSO segments before in-place encryption net: gro: honor skbs consumed by protocol callbacks ovpn: add opt-in direct GRO receive mode Documentation/netlink/specs/rt-link.yaml | 12 + drivers/net/ovpn/crypto_aead.c | 182 +++++++--- drivers/net/ovpn/crypto_aead.h | 4 + drivers/net/ovpn/io.c | 281 +++++++++++++-- drivers/net/ovpn/io.h | 17 +- drivers/net/ovpn/main.c | 20 +- drivers/net/ovpn/ovpnpriv.h | 2 + drivers/net/ovpn/proto.h | 4 + drivers/net/ovpn/skb.h | 27 +- drivers/net/ovpn/stats.h | 16 +- drivers/net/ovpn/tcp.c | 4 +- drivers/net/ovpn/udp.c | 337 ++++++++++++++++-- include/net/gro.h | 19 +- include/uapi/linux/if_link.h | 6 + net/core/gro.c | 1 + net/ipv4/udp_offload.c | 3 +- tools/testing/selftests/net/ovpn/Makefile | 1 + tools/testing/selftests/net/ovpn/common.sh | 4 +- tools/testing/selftests/net/ovpn/ovpn-cli.c | 40 ++- .../selftests/net/ovpn/test-gro-direct.sh | 10 + tools/testing/selftests/net/ovpn/test.sh | 65 ++++ 21 files changed, 924 insertions(+), 131 deletions(-) create mode 100755 tools/testing/selftests/net/ovpn/test-gro-direct.sh base-commit: b8e9e7d82e7eefd5d2d528469d94ec20e96b38c3