]> git.baikalelectronics.ru Git - kernel.git/commit
bpf: Allow to retrieve cgroup v1 classid from v2 hooks
authorDaniel Borkmann <daniel@iogearbox.net>
Fri, 27 Mar 2020 15:58:53 +0000 (16:58 +0100)
committerAlexei Starovoitov <ast@kernel.org>
Sat, 28 Mar 2020 02:40:38 +0000 (19:40 -0700)
commit3b0669385d37bab83cdfa2d0ddfa4019d78b97f1
treeb6f8be3cebc0fc9da54c1494b9d4d05e554eac14
parent930088a6a66e9dcf382d2f92fc45e8046ac8118f
bpf: Allow to retrieve cgroup v1 classid from v2 hooks

Today, Kubernetes is still operating on cgroups v1, however, it is
possible to retrieve the task's classid based on 'current' out of
connect(), sendmsg(), recvmsg() and bind-related hooks for orchestrators
which attach to the root cgroup v2 hook in a mixed env like in case
of Cilium, for example, in order to then correlate certain pod traffic
and use it as part of the key for BPF map lookups.

Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/555e1c69db7376c0947007b4951c260e1074efc3.1585323121.git.daniel@iogearbox.net
include/net/cls_cgroup.h
net/core/filter.c