kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Only set ifindex in attributes if hardware offload is set.

Browse Source
This commit is contained in:
gamemann
2021-11-12 21:23:44 +00:00
parent d9d6167b4b
commit ed89cfed28
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/xdpfw.c
View File

@@ -137,7 +137,7 @@ int findmapfd(struct bpf_object *bpf_obj, const char *mapname)
* *
* @return BPF's program FD. * @return BPF's program FD.
*/ */
int loadbpfobj(const char *filename, int ifidx) int loadbpfobj(const char *filename, __u8 offload, int ifidx)
{ {
int fd = -1; int fd = -1;
@@ -145,9 +145,14 @@ int loadbpfobj(const char *filename, int ifidx)
struct bpf_prog_load_attr attrs = struct bpf_prog_load_attr attrs =
{ {
.prog_type = BPF_PROG_TYPE_XDP, .prog_type = BPF_PROG_TYPE_XDP,
.ifindex = ifidx,
}; };
// If we want to offload the XDP program, we must send the ifindex item to the interface's index.
if (offload)
{
attrs.ifindex = ifidx;
}
attrs.file = filename; attrs.file = filename;
// Check if we can access the BPF object file. // Check if we can access the BPF object file.
@@ -423,7 +428,7 @@ int main(int argc, char *argv[])
const char *filename = "/etc/xdpfw/xdpfw_kern.o"; const char *filename = "/etc/xdpfw/xdpfw_kern.o";
// Get XDP's ID. // Get XDP's ID.
progfd = loadbpfobj(filename, ifidx); progfd = loadbpfobj(filename, cmd.offload, ifidx);
if (progfd <= 0) if (progfd <= 0)
{ {