flow_dissector: Add flag to stop parsing when an IPv6 flow label is seen

Add an input flag to flow dissector on rather dissection should be
stopped when a flow label is encountered. Presumably, the flow label
is derived from a sufficient hash of an inner transport packet so
further dissection is not needed (that is ports are not included in
the flow hash). Using the flow label instead of ports has the additional
benefit that packet fragments should hash to same value as non-fragments
for a flow (assuming that the same flow label is used).

We set this flag by default in for skb_get_hash.

Signed-off-by: Tom Herbert <tom@herbertland.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 4 insertions, 1 deletions

diff --git a/net/core/flow_dissector.c b/net/core/flow_dissector.c
index 94fd841f341f..094e34354627 100644
--- a/net/core/flow_dissector.c
+++ b/net/core/flow_dissector.c
@@ -239,6 +239,8 @@ ipv6:
                                                                      target_container);
                                 key_tags->flow_label = ntohl(flow_label);
                         }
+                        if (flags & FLOW_DISSECTOR_F_STOP_AT_FLOW_LABEL)
+                                goto out_good;
                 }
 
                 if (flags & FLOW_DISSECTOR_F_STOP_AT_L3)
@@ -599,7 +601,8 @@ EXPORT_SYMBOL(flow_hash_from_keys);
 static inline u32 ___skb_get_hash(const struct sk_buff *skb,
                                   struct flow_keys *keys, u32 keyval)
 {
-        if (!skb_flow_dissect_flow_keys(skb, keys, 0))
+        if (!skb_flow_dissect_flow_keys(skb, keys,
+                                        FLOW_DISSECTOR_F_STOP_AT_FLOW_LABEL))
                 return 0;
 
         return __flow_hash_from_keys(keys, keyval);