From patchwork Wed Sep 16 11:46:08 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ralf Lici X-Patchwork-Id: 44 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:6446:b0:8a0:ea1f:253a with SMTP id n6csp6082522mag; Wed, 16 Sep 2026 04:47:14 -0700 (PDT) X-Forwarded-Encrypted: i=2; AKwUvBzviyemZMHGX+pQ34l9LisDFb7PbOoJO1Y4oPMGjeiQAwmz6Lq+G5ZcYd5ugcLU8G183RTu7BBuyRw=@openvpn.net X-Received: by 2002:a05:6808:1a03:b0:492:3ed0:9073 with SMTP id 5614622812f47-4ca4ac0e558mr4297881b6e.4.1789559233528; Wed, 16 Sep 2026 04:47:13 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1789559233; cv=none; d=google.com; s=arc-20260327; b=l5uCwewwt9ntidQaSsnX2V0aZR4g/oKIwEt1ogelYoolY+QhOAzzh8QhnIGt4n7p+6 8p9FcDKjyxyx/3ABjO3FJUAHAZhNUcskWaz49ZNYQk0GqByLLdpEsBH7j5x8RES6x0F2 HoJDPuTUFzM44ROaGJIFpjo1CuyDM87R7gZq1EuXHSqSD1kxpWFFYrCAG7e9DnJqXCoR Q2fZu+wGVa9CyChlTY/GRM3kixH/2bsrEZTrRZtSxFXWui8nsXSoEoONOOR0DhilD9xT XrO8NGxGpqfdqiWFgcxhSdO3qqeq67LghL28GtXcY8L8cjQ0WGBjNvrpTWRadAHU6Y8g VZNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=errors-to:content-transfer-encoding:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:message-id:date:to:from:dkim-signature:dkim-signature :dkim-signature:dkim-signature; bh=XCRFhW3ziccFjT5cU0iXK0NjpVNv/dAdhwofEOqGKBY=; fh=4NbAC/LsuMLI0S0hprUlLSLCiHwg6SCAifhH718Jh0Q=; b=CXl3qmh9O5e6VUmDlIuN8ahCigO+vWGdZQ92/AB6DRQLGU45WwFi9AiCgFXhNWKtdk xZs7KlUtIy56HKSLNFGEgIVTZ2lFwXdaK63pWE+Qv9PcTFEU69dskIyf/QT0MnaVdX0x 9Ln5MAmm0PowjlUOzRESNCn7La+hXAvf9sY5AUHDXliqzT8o3DfTXLYYGX2ygRAInm8U lmBN5aAD3o5iPo28SvNbagCSiRrgQKLfa32XwmKGT/tLRuFgVJy5i6yLizKDuqvJG3by DRmRBWkE82oFajjFTzSzEPru8eq/egU4cdt5Hv60XiKs1P3l3ZqpBT1TVoeQUR3MC26r yWhQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=WbKUMfwe; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=ix2eLzMy; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=NNUMf63R; dkim=neutral (body hash did not verify) header.i=@mandelbit.com header.s=MBO0001 header.b=LPynboem; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id 5614622812f47-4ca24b044e0si3435837b6e.54.2026.09.16.04.47.13 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Sep 2026 04:47:13 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=pass header.i=@lists.sourceforge.net header.s=beta header.b=WbKUMfwe; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=ix2eLzMy; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=NNUMf63R; dkim=neutral (body hash did not verify) header.i=@mandelbit.com header.s=MBO0001 header.b=LPynboem; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.sourceforge.net; s=beta; h=Content-Transfer-Encoding:Content-Type: List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id: Subject:MIME-Version:Message-ID:Date:To:From:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Owner; bh=XCRFhW3ziccFjT5cU0iXK0NjpVNv/dAdhwofEOqGKBY=; b=WbKUMfweRuYSBhQQsnIxakJwY2 lMryhPx7n8Sy3jrGXNnhDYKYWxUdcYUDzM10/Vzk8tDaA2xHTulOhqvVHw3syhVTK14oJpDrN4LWs ljVOuRaVfv667MLY83jqR7J/+zWgFpH7Vag9uPyMnpTsqurvuYkvjbhMJG6XoEs6WdgY=; Received: from [127.0.0.1] (helo=sfs-ml-1.v29.lw.sourceforge.com) by sfs-ml-1.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1x6o6a-00029D-6F; Wed, 16 Sep 2026 11:47:09 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-1.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1x6o6X-00028y-RR for openvpn-devel@lists.sourceforge.net; Wed, 16 Sep 2026 11:47:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:Message-ID: Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=n3GzVMrECKtBOHbFO9h5sc9cqXoas/R5oMDgIY8QUgU=; b=ix2eLzMyZVgXNuqYGFawxT2EoD +YOOlpkrqKykR4uW1NUfBs1Dcd4Q9MJsgeOQfcUJw6ca5NY8twhRFoee6YJ+Saw9mtEnOEYuEpVIZ RIyis+dG+iFYu0gInAF337ghm9ImrLNNjJw6T+J2pLogUYLxz4ntOUEv/LYn1k8iO8bg=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:Message-ID:Date:Subject:To:From: Sender:Reply-To:Cc:Content-Type:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To: References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post: List-Owner:List-Archive; bh=n3GzVMrECKtBOHbFO9h5sc9cqXoas/R5oMDgIY8QUgU=; b=N NUMf63RQdC4mfzQ7f2zdCyzL6GUqIGD6/Z9ljIOa0FBpYXj2xAfwPNPisL8ztRZuQI+gOqyPB1LRr aMmk70wHMCa5Ao1E3qajRCAu5wvbxAHXmPl069quf9f79UHx/mEwSZv9j5RYb0Vg29sqep/YnbBUe 9fF8go2hg61kKj+A=; Received: from mout-b-201.mailbox.org ([195.10.208.61]) by sfi-mx-1.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1x6o6T-0005OR-FP for openvpn-devel@lists.sourceforge.net; Wed, 16 Sep 2026 11:47:07 +0000 Received: from smtp1.mailbox.org (smtp1.mailbox.org [10.196.197.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-b-201.mailbox.org (Postfix) with ESMTPS id 4hlHCm5gCkzLlVR for ; Wed, 16 Sep 2026 13:46:28 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandelbit.com; s=MBO0001; t=1789559188; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=n3GzVMrECKtBOHbFO9h5sc9cqXoas/R5oMDgIY8QUgU=; b=LPynboemhE4RmhAwpdRM0OaTTgQ4dvgck5ePf1U+lHpKwFtThhotDTMaxUn5Igbad+oB1i zdudXv7eb0+eVn6ZXmbUgxZoBgiK+z0zKIm6E/8mB7feEhF1mIKxNJ1U2BvpabxWghmqgN 1K15dD7/OvtU3RMgmlOTFGxyxXfKrTTJG8DBAv12b76ZmVZ8laXlO9FNSIt1T7UG5QyCpr 1HIboIDdunNkFLNQpOzqpTSw/f/18z7nrPh9HwOYSxwEBntliQxdqHxYcKNQbrc2tiN0xa Mysq/vqbwNnaKWl2LuXhHZTIPxQW0xKu0gyJg/Yr/eyftmWvfk/T6/6m6ef0WA== From: Ralf Lici To: openvpn-devel@lists.sourceforge.net Date: Wed, 16 Sep 2026 13:46:08 +0200 Message-ID: MIME-Version: 1.0 X-Spam-Score: -0.2 (/) X-Spam-Report: Spam detection software, running on the system "sfi-spamd-2.hosts.colo.sdot.me", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Hi, This series adds support for preserving GSO and GRO batching across ovpn, including forwarded TCP traffic. The transmit patches let GSO skbs reach ovpn, complete each inner packet's checksum before en [...] Content analysis details: (-0.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain X-Headers-End: 1x6o6T-0005OR-FP Subject: [Openvpn-devel] [RFC ovpn net-next v4 0/9] ovpn: preserve GSO and GRO batching X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: 1876488862411169756 X-GMAIL-MSGID: 1876488862411169756 Hi, This series adds support for preserving GSO and GRO batching across ovpn, including forwarded TCP traffic. The transmit patches let GSO skbs reach ovpn, complete each inner packet's checksum before encryption, and, when the layout permits, put the encrypted records into a UDP GSO skb. Ordinary packets and frag-list GSO children retain the existing in-place path. On receive, ovpn uses UDP GRO to collect compatible encrypted records in a frag-list and then decrypts them individually. The series also includes an AEAD helper refactor and small transmit and receive prefetch changes. The patch messages contain the measurements. The final patch adds an opt-in direct GRO mode for discussion. Unlike the default full-stack mode, it consumes DATA_V2 records in the GRO callback and bypasses parts of the outer receive stack, including TC, netfilter, socket XFRM policy and normal UDP accounting. Its advantage over the prefetched full-stack path is small in my latest 100-Gbit/s tests. Direct GRO also depends on a generic GRO ownership change in the preceding patch. That change, the skb_gro_receive_list export and UDP tunnel GRO callback accounting touch broader networking code. These prerequisites would need discussion on netdev before any merge (this RFC is first for feedback on the ovpn design). Thanks, Ralf Lici Mandelbit Srl --- Changes since v3 https://lore.kernel.org/openvpn-devel/cover.1789546917.git.ralf@mandelbit.com/ - Make each GRO record's skb header private before modifying it in 5/9. (Sashiko) - Leave VLAN-tagged packets to the normal receive stack in direct GRO mode in 9/9. (Sashiko) Changes since v2 https://lore.kernel.org/openvpn-devel/cover.1789540779.git.ralf@mandelbit.com/ - Unclone incoming GRO aggregates before segmenting them in 5/9. (Sashiko) - Fix endianness bug serializing 1-byte netlink attr from 4-byte enum in 9/9. (Sashiko) Changes since v1 https://lore.kernel.org/openvpn-devel/cover.1789485693.git.ralf@mandelbit.com/ - Fix a couple of wrong assumptions in 5/9 ("ovpn: coalesce UDP data records with GRO"). (Sashiko) Ralf Lici (9): ovpn: advertise checksum offload for GSO packets ovpn: accept frag-list GSO input ovpn: refactor AEAD encryption helpers ovpn: convert GSO input into UDP GSO output ovpn: coalesce UDP data records with GRO ovpn: prefetch encrypted records before GRO batch decryption ovpn: prefetch GSO segments before in-place encryption net: gro: honor skbs consumed by protocol callbacks ovpn: add opt-in direct GRO receive mode Documentation/netlink/specs/rt-link.yaml | 12 + drivers/net/ovpn/crypto_aead.c | 182 +++++++-- drivers/net/ovpn/crypto_aead.h | 4 + drivers/net/ovpn/io.c | 281 ++++++++++++-- drivers/net/ovpn/io.h | 17 +- drivers/net/ovpn/main.c | 20 +- drivers/net/ovpn/ovpnpriv.h | 2 + drivers/net/ovpn/proto.h | 4 + drivers/net/ovpn/skb.h | 27 +- drivers/net/ovpn/stats.h | 16 +- drivers/net/ovpn/tcp.c | 4 +- drivers/net/ovpn/udp.c | 362 ++++++++++++++++-- include/net/gro.h | 19 +- include/uapi/linux/if_link.h | 6 + net/core/gro.c | 1 + net/ipv4/udp_offload.c | 3 +- tools/testing/selftests/net/ovpn/Makefile | 1 + tools/testing/selftests/net/ovpn/common.sh | 4 +- tools/testing/selftests/net/ovpn/ovpn-cli.c | 40 +- .../selftests/net/ovpn/test-gro-direct.sh | 10 + tools/testing/selftests/net/ovpn/test.sh | 65 ++++ 21 files changed, 949 insertions(+), 131 deletions(-) create mode 100755 tools/testing/selftests/net/ovpn/test-gro-direct.sh base-commit: b8e9e7d82e7eefd5d2d528469d94ec20e96b38c3