commits October 2024

commits@lists.open-mesh.org

1 participants
54 discussions

[linux-merge]linux integration; annotated tag, v5.4.284, created. v5.4.284
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

The annotated tag, v5.4.284 has been created at a5f66b27894f244c20612fa481f7e0636003179a (tag) tagging 661f109c057497c8baf507a2562ceb9f9fb3cbc2 (commit) replaces v5.4.281 tagged by Greg Kroah-Hartman on Thu Sep 12 11:04:12 2024 +0200 - Shortlog ------------------------------------------------------------ This is the 5.4.284 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmbirowACgkQONu9yGCS aT50ww//X5S6LV/0C9V3+lq0zLBl6X6D0yyNlV4KFISFWoFPo2N13uxQ6+ZQliB5 gYNRH1b/RBJxa50LjydvCtkJTsWuraZ0uW+tx6GvsfjlC7HeRqGDzOAcFehM9Fjc d/nn7J32amJZ2un8Xnf/B16z+WEbBzIq8ca1K2iPb/1+JQsgDFn0LGmyzNUOrdet Q2fpsaAzdCa72v9CzKALpK/rgAv8PIcx2dObp3YOX7ccKumP2qWg8s4dLhzYgSZ2 MQNy55IxBKM7xKlqDPwaBgZipfAUHPPZrHlWYwEVQNIukn9l5ymjfhj8Wv6AqbgO KxvSNNpOnsw7ShdczumTY0JimUxziPXVcrZMX04L1a65rWrILiCjLpWPKxIhIRyL MIjvVg7GOWjDes+zJaKAO/X0A9oMY/inVLVrQqfWF+igXKsfwaylEqHX/qrdALZL /TIE7LV3iVNRm7qq3f4T8lCOGiy+gIhEgnWomzo6caulgQtnm6qmRkAgq/Siuzj1 AMQt8d/3RNU6EQIuBFGKtYdLo9ccU1BNW773ekF3+szvmGrwp9vlGHCLixIdJt/a bGp2+nBr7eOWCjj3Lcm1x3vt+GY5FHBeZJEFLQ+sgSJC16o6UxXFLJeiCLOnLmaA r1Q3CrCCawFWDz8MBvM6xX1/XWmattoaUilMRLkqmP0SRKWmgIg= =Ii83 -----END PGP SIGNATURE----- ----------------------------------------------------------------------- -- linux integration

1 0

[linux-merge]linux integration; annotated tag, v4.19.322, created. v4.19.322
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

The annotated tag, v4.19.322 has been created at 2f88059a49dc9c8451023714a4f52b018fd68d7f (tag) tagging de2cffe297563c815c840cfa14b77a0868b61e53 (commit) replaces v4.19.319 tagged by Greg Kroah-Hartman on Thu Sep 12 11:03:01 2024 +0200 - Shortlog ------------------------------------------------------------ This is the 4.19.322 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmbirkUACgkQONu9yGCS aT736A/+LcXYSUiRx7vgnw3cyPEAkGaxTlFD9rwlKtHuK62SLxd/rTwECLwDVnsn 1fRLTT01+GZ3h2RPMOpXhK9la3G09hDwuNUJNLBBM7iPHSrRTMC1UO9ixA/L8/Vh 9N7Sc4589vpmnchcAK7ojoueNDrfiJLaVtteYGG9xQXnGLUjn5nxvZLCrYyYKhGK HnFOAKYbwWkx2/6+r9eG2bcJKnwrhTHs6szHHPdCKJgoOwa8v0qEVuIJeITetOxj ucKbzCWoJVSrCQEYjpL4nR30Iz7V4ZsOZcCfST13YkimleTbOL26yqfePVnBgRqI xk+8Wd0vJIj8QgJMQJCKm/URCwoc/27H5b8gY2UaCDT9xtnZgb3HUbUQZzkqw4ji +o/Gnu01oQqLeTCVvL8EUYJ+o1B3rL58pLb0hfDMfp790YQ95/lFzD9M0LGoy7V0 JfcvZBqmRsWIYCJtWlN+gSoqVUVJMA1oMw3O2thttoyjnb5ukR75a88abv7J/nzn LmqHwwt3YQjltzBpsUtTI8gqekI2jeepu7PpTo2+HUR+eSqiA7JY3OeNnL8wN0Fz uK7iOnJlbfabUfSt63MVPkWPjs47WLwIZn+F2O4kf1b/5ZcX0uYqLt/v/OIK+ZOw coqRNQJ17wnLrpwPF+DNopCNLsD5Mj/J6eWLT6OXABTphQZiIvc= =B8T0 -----END PGP SIGNATURE----- ----------------------------------------------------------------------- -- linux integration

1 0

[linux-merge]linux integration; branch, batadv/net-next, updated. v6.12-rc1-2-g4436df478860b
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

The following commit has been merged in the batadv/net-next branch: commit 0f4e6f94760026b4c46873bc21b440e6cef9c0b6 Author: Simon Wunderlich <sw(a)simonwunderlich.de> Date: Mon Jun 3 10:16:14 2024 +0200 batman-adv: Start new development cycle This version will contain all the (major or even only minor) changes for Linux 6.13. The version number isn't a semantic version number with major and minor information. It is just encoding the year of the expected publishing as Linux -rc1 and the number of published versions this year (starting at 0). Signed-off-by: Simon Wunderlich <sw(a)simonwunderlich.de> diff --git a/net/batman-adv/main.h b/net/batman-adv/main.h index 3d4c36ae2e1ad..97ea71a052f8c 100644 --- a/net/batman-adv/main.h +++ b/net/batman-adv/main.h @@ -13,7 +13,7 @@ #define BATADV_DRIVER_DEVICE "batman-adv" #ifndef BATADV_SOURCE_VERSION -#define BATADV_SOURCE_VERSION "2024.2" +#define BATADV_SOURCE_VERSION "2024.3" #endif /* B.A.T.M.A.N. parameters */ -- linux integration

1 0

[linux-merge]linux integration; branch, batadv/net-next, updated. v6.12-rc1-2-g4436df478860b
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

The following commit has been merged in the batadv/net-next branch: commit 4436df478860bb5da1864df2cd20f281a210f139 Author: Erick Archer <erick.archer(a)outlook.com> Date: Fri Jun 7 18:19:12 2024 +0200 batman-adv: Add flex array to struct batadv_tvlv_tt_data The "struct batadv_tvlv_tt_data" uses a dynamically sized set of trailing elements. Specifically, it uses an array of structures of type "batadv_tvlv_tt_vlan_data". So, use the preferred way in the kernel declaring a flexible array [1]. At the same time, prepare for the coming implementation by GCC and Clang of the __counted_by attribute. Flexible array members annotated with __counted_by can have their accesses bounds-checked at run-time via CONFIG_UBSAN_BOUNDS (for array indexing) and CONFIG_FORTIFY_SOURCE (for strcpy/memcpy-family functions). In this case, it is important to note that the attribute used is specifically __counted_by_be since variable "num_vlan" is of type __be16. The following change to the "batadv_tt_tvlv_ogm_handler_v1" function: - tt_vlan = (struct batadv_tvlv_tt_vlan_data *)(tt_data + 1); - tt_change = (struct batadv_tvlv_tt_change *)(tt_vlan + num_vlan); + tt_change = (struct batadv_tvlv_tt_change *)((void *)tt_data + + flex_size); is intended to prevent the compiler from generating an "out-of-bounds" notification due to the __counted_by attribute. The compiler can do a pointer calculation using the vlan_data flexible array memory, or in other words, this may be calculated as an array offset, since it is the same as: &tt_data->vlan_data[num_vlan] Therefore, we go past the end of the array. In other "multiple trailing flexible array" situations, this has been solved by addressing from the base pointer, since the compiler either knows the full allocation size or it knows nothing about it (this case, since it came from a "void *" function argument). The order in which the structure batadv_tvlv_tt_data and the structure batadv_tvlv_tt_vlan_data are defined must be swap to avoid an incomplete type error. Also, avoid the open-coded arithmetic in memory allocator functions [2] using the "struct_size" macro and use the "flex_array_size" helper to clarify some calculations, when possible. Moreover, the new structure member also allow us to avoid the open-coded arithmetic on pointers in some situations. Take advantage of this. This code was detected with the help of Coccinelle, and audited and modified manually. Link: https://www.kernel.org/doc/html/next/process/deprecated.html#zero-length-an… [1] Link: https://www.kernel.org/doc/html/next/process/deprecated.html#open-coded-ari… [2] Reviewed-by: Kees Cook <keescook(a)chromium.org> Signed-off-by: Erick Archer <erick.archer(a)outlook.com> Signed-off-by: Sven Eckelmann <sven(a)narfation.org> Signed-off-by: Simon Wunderlich <sw(a)simonwunderlich.de> diff --git a/include/uapi/linux/batadv_packet.h b/include/uapi/linux/batadv_packet.h index 6e25753015dfa..439132a819eac 100644 --- a/include/uapi/linux/batadv_packet.h +++ b/include/uapi/linux/batadv_packet.h @@ -9,6 +9,7 @@ #include <asm/byteorder.h> #include <linux/if_ether.h> +#include <linux/stddef.h> #include <linux/types.h> /** @@ -592,19 +593,6 @@ struct batadv_tvlv_gateway_data { __be32 bandwidth_up; }; -/** - * struct batadv_tvlv_tt_data - tt data propagated through the tt tvlv container - * @flags: translation table flags (see batadv_tt_data_flags) - * @ttvn: translation table version number - * @num_vlan: number of announced VLANs. In the TVLV this struct is followed by - * one batadv_tvlv_tt_vlan_data object per announced vlan - */ -struct batadv_tvlv_tt_data { - __u8 flags; - __u8 ttvn; - __be16 num_vlan; -}; - /** * struct batadv_tvlv_tt_vlan_data - vlan specific tt data propagated through * the tt tvlv container @@ -618,6 +606,21 @@ struct batadv_tvlv_tt_vlan_data { __u16 reserved; }; +/** + * struct batadv_tvlv_tt_data - tt data propagated through the tt tvlv container + * @flags: translation table flags (see batadv_tt_data_flags) + * @ttvn: translation table version number + * @num_vlan: number of announced VLANs. In the TVLV this struct is followed by + * one batadv_tvlv_tt_vlan_data object per announced vlan + * @vlan_data: array of batadv_tvlv_tt_vlan_data objects + */ +struct batadv_tvlv_tt_data { + __u8 flags; + __u8 ttvn; + __be16 num_vlan; + struct batadv_tvlv_tt_vlan_data vlan_data[] __counted_by_be(num_vlan); +}; + /** * struct batadv_tvlv_tt_change - translation table diff data * @flags: status indicators concerning the non-mesh client (see diff --git a/net/batman-adv/translation-table.c b/net/batman-adv/translation-table.c index 2243cec18ecc8..6815d1262feba 100644 --- a/net/batman-adv/translation-table.c +++ b/net/batman-adv/translation-table.c @@ -28,6 +28,7 @@ #include <linux/net.h> #include <linux/netdevice.h> #include <linux/netlink.h> +#include <linux/overflow.h> #include <linux/rculist.h> #include <linux/rcupdate.h> #include <linux/skbuff.h> @@ -856,8 +857,7 @@ batadv_tt_prepare_tvlv_global_data(struct batadv_orig_node *orig_node, num_entries += atomic_read(&vlan->tt.num_entries); } - change_offset = sizeof(**tt_data); - change_offset += num_vlan * sizeof(*tt_vlan); + change_offset = struct_size(*tt_data, vlan_data, num_vlan); /* if tt_len is negative, allocate the space needed by the full table */ if (*tt_len < 0) @@ -876,7 +876,7 @@ batadv_tt_prepare_tvlv_global_data(struct batadv_orig_node *orig_node, (*tt_data)->ttvn = atomic_read(&orig_node->last_ttvn); (*tt_data)->num_vlan = htons(num_vlan); - tt_vlan = (struct batadv_tvlv_tt_vlan_data *)(*tt_data + 1); + tt_vlan = (*tt_data)->vlan_data; hlist_for_each_entry(vlan, &orig_node->vlan_list, list) { tt_vlan->vid = htons(vlan->vid); tt_vlan->crc = htonl(vlan->tt.crc); @@ -936,8 +936,7 @@ batadv_tt_prepare_tvlv_local_data(struct batadv_priv *bat_priv, total_entries += vlan_entries; } - change_offset = sizeof(**tt_data); - change_offset += num_vlan * sizeof(*tt_vlan); + change_offset = struct_size(*tt_data, vlan_data, num_vlan); /* if tt_len is negative, allocate the space needed by the full table */ if (*tt_len < 0) @@ -956,7 +955,7 @@ batadv_tt_prepare_tvlv_local_data(struct batadv_priv *bat_priv, (*tt_data)->ttvn = atomic_read(&bat_priv->tt.vn); (*tt_data)->num_vlan = htons(num_vlan); - tt_vlan = (struct batadv_tvlv_tt_vlan_data *)(*tt_data + 1); + tt_vlan = (*tt_data)->vlan_data; hlist_for_each_entry(vlan, &bat_priv->softif_vlan_list, list) { vlan_entries = atomic_read(&vlan->tt.num_entries); if (vlan_entries < 1) @@ -2916,7 +2915,6 @@ static bool batadv_send_tt_request(struct batadv_priv *bat_priv, { struct batadv_tvlv_tt_data *tvlv_tt_data = NULL; struct batadv_tt_req_node *tt_req_node = NULL; - struct batadv_tvlv_tt_vlan_data *tt_vlan_req; struct batadv_hard_iface *primary_if; bool ret = false; int i, size; @@ -2932,7 +2930,7 @@ static bool batadv_send_tt_request(struct batadv_priv *bat_priv, if (!tt_req_node) goto out; - size = sizeof(*tvlv_tt_data) + sizeof(*tt_vlan_req) * num_vlan; + size = struct_size(tvlv_tt_data, vlan_data, num_vlan); tvlv_tt_data = kzalloc(size, GFP_ATOMIC); if (!tvlv_tt_data) goto out; @@ -2944,12 +2942,10 @@ static bool batadv_send_tt_request(struct batadv_priv *bat_priv, /* send all the CRCs within the request. This is needed by intermediate * nodes to ensure they have the correct table before replying */ - tt_vlan_req = (struct batadv_tvlv_tt_vlan_data *)(tvlv_tt_data + 1); for (i = 0; i < num_vlan; i++) { - tt_vlan_req->vid = tt_vlan->vid; - tt_vlan_req->crc = tt_vlan->crc; + tvlv_tt_data->vlan_data[i].vid = tt_vlan->vid; + tvlv_tt_data->vlan_data[i].crc = tt_vlan->crc; - tt_vlan_req++; tt_vlan++; } @@ -3001,7 +2997,6 @@ static bool batadv_send_other_tt_response(struct batadv_priv *bat_priv, struct batadv_orig_node *res_dst_orig_node = NULL; struct batadv_tvlv_tt_change *tt_change; struct batadv_tvlv_tt_data *tvlv_tt_data = NULL; - struct batadv_tvlv_tt_vlan_data *tt_vlan; bool ret = false, full_table; u8 orig_ttvn, req_ttvn; u16 tvlv_len; @@ -3024,10 +3019,9 @@ static bool batadv_send_other_tt_response(struct batadv_priv *bat_priv, orig_ttvn = (u8)atomic_read(&req_dst_orig_node->last_ttvn); req_ttvn = tt_data->ttvn; - tt_vlan = (struct batadv_tvlv_tt_vlan_data *)(tt_data + 1); /* this node doesn't have the requested data */ if (orig_ttvn != req_ttvn || - !batadv_tt_global_check_crc(req_dst_orig_node, tt_vlan, + !batadv_tt_global_check_crc(req_dst_orig_node, tt_data->vlan_data, ntohs(tt_data->num_vlan))) goto out; @@ -3370,7 +3364,6 @@ static void batadv_handle_tt_response(struct batadv_priv *bat_priv, struct batadv_orig_node *orig_node = NULL; struct batadv_tvlv_tt_change *tt_change; u8 *tvlv_ptr = (u8 *)tt_data; - u16 change_offset; batadv_dbg(BATADV_DBG_TT, bat_priv, "Received TT_RESPONSE from %pM for ttvn %d t_size: %d [%c]\n", @@ -3383,10 +3376,7 @@ static void batadv_handle_tt_response(struct batadv_priv *bat_priv, spin_lock_bh(&orig_node->tt_lock); - change_offset = sizeof(struct batadv_tvlv_tt_vlan_data); - change_offset *= ntohs(tt_data->num_vlan); - change_offset += sizeof(*tt_data); - tvlv_ptr += change_offset; + tvlv_ptr += struct_size(tt_data, vlan_data, ntohs(tt_data->num_vlan)); tt_change = (struct batadv_tvlv_tt_change *)tvlv_ptr; if (tt_data->flags & BATADV_TT_FULL_TABLE) { @@ -3985,10 +3975,10 @@ static void batadv_tt_tvlv_ogm_handler_v1(struct batadv_priv *bat_priv, u8 flags, void *tvlv_value, u16 tvlv_value_len) { - struct batadv_tvlv_tt_vlan_data *tt_vlan; struct batadv_tvlv_tt_change *tt_change; struct batadv_tvlv_tt_data *tt_data; u16 num_entries, num_vlan; + size_t flex_size; if (tvlv_value_len < sizeof(*tt_data)) return; @@ -3998,17 +3988,18 @@ static void batadv_tt_tvlv_ogm_handler_v1(struct batadv_priv *bat_priv, num_vlan = ntohs(tt_data->num_vlan); - if (tvlv_value_len < sizeof(*tt_vlan) * num_vlan) + flex_size = flex_array_size(tt_data, vlan_data, num_vlan); + if (tvlv_value_len < flex_size) return; - tt_vlan = (struct batadv_tvlv_tt_vlan_data *)(tt_data + 1); - tt_change = (struct batadv_tvlv_tt_change *)(tt_vlan + num_vlan); - tvlv_value_len -= sizeof(*tt_vlan) * num_vlan; + tt_change = (struct batadv_tvlv_tt_change *)((void *)tt_data + + flex_size); + tvlv_value_len -= flex_size; num_entries = batadv_tt_entries(tvlv_value_len); - batadv_tt_update_orig(bat_priv, orig, tt_vlan, num_vlan, tt_change, - num_entries, tt_data->ttvn); + batadv_tt_update_orig(bat_priv, orig, tt_data->vlan_data, num_vlan, + tt_change, num_entries, tt_data->ttvn); } /** @@ -4039,8 +4030,8 @@ static int batadv_tt_tvlv_unicast_handler_v1(struct batadv_priv *bat_priv, tt_data = tvlv_value; tvlv_value_len -= sizeof(*tt_data); - tt_vlan_len = sizeof(struct batadv_tvlv_tt_vlan_data); - tt_vlan_len *= ntohs(tt_data->num_vlan); + tt_vlan_len = flex_array_size(tt_data, vlan_data, + ntohs(tt_data->num_vlan)); if (tvlv_value_len < tt_vlan_len) return NET_RX_SUCCESS; -- linux integration

1 0

[doc] backup-redmine,main: doc: batman-adv/DAT_DHCP_Snooping (5ebb31a9)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit 5ebb31a95fe5d1efa3d1f09f1a4c6b1b2c70e2e3 Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 08:27:15 2024 +0000 doc: batman-adv/DAT_DHCP_Snooping >--------------------------------------------------------------- 5ebb31a95fe5d1efa3d1f09f1a4c6b1b2c70e2e3 batman-adv/DAT_DHCP_Snooping.textile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/batman-adv/DAT_DHCP_Snooping.textile b/batman-adv/DAT_DHCP_Snooping.textile index a55b86a3..db0a8cf6 100644 --- a/batman-adv/DAT_DHCP_Snooping.textile +++ b/batman-adv/DAT_DHCP_Snooping.textile @@ -116,6 +116,8 @@ Patches: h3. DHCP Snooping +Status: _merged upstream_ + The first patch provides an alternative to filling the DAT DHT: It allows learning IP-MAC pairs not only via ARP spoofing but DHCP spoofing, too. The advantage is that for DHCP we already have the gateway feature which always uses unicast transmissions. h3. Noflood mark

1 0

[doc] backup-redmine,main: doc: batman-adv/DAT_DHCP_Snooping (04a8d021)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit 04a8d0217ec0146354d54bbfc1dff39d6cc72cbc Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 08:29:08 2024 +0000 doc: batman-adv/DAT_DHCP_Snooping >--------------------------------------------------------------- 04a8d0217ec0146354d54bbfc1dff39d6cc72cbc batman-adv/DAT_DHCP_Snooping.textile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/batman-adv/DAT_DHCP_Snooping.textile b/batman-adv/DAT_DHCP_Snooping.textile index db0a8cf6..cc80b0de 100644 --- a/batman-adv/DAT_DHCP_Snooping.textile +++ b/batman-adv/DAT_DHCP_Snooping.textile @@ -122,6 +122,8 @@ The first patch provides an alternative to filling the DAT DHT: It allows learni h3. Noflood mark +Status: _rejected_ (some opinion(s) were that it would be nice to have a more complete filter architecture, also this is not that straightforward/foolproof to administrate/configure) +_ The second patch allows to prevent forwarding a frame which batman-adv would otherwise flood. With a DHCP snooping in place and a lease timeout lower than the 5min. DAT timeout ARP Requests for addresses in the DHCP range can safely be dropped. The noflood mark can be configured like: <pre><code> @@ -135,7 +137,6 @@ $ ebtables -p ARP --logical-out br0 -o bat0 --arp-op Request --arp-ip-dst 10.84. This would result in the address range of 10.84.0.8-10.84.0.255 being marked for "noflood", while excempting 10.84.0.0-10.84.0.7. - h3. Result The following picture shows the amount of broadcasted ARP Request traffic before and after applying and configuring these patches at Freifunk Darmstadt (800 batman-adv nodes):

1 0

[doc] backup-redmine,main: doc: batman-adv/DAT_DHCP_Snooping (ad70fba1)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit ad70fba10ba7bcbfa6c11d6efc7451c1559deacb Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 06:50:44 2024 +0000 doc: batman-adv/DAT_DHCP_Snooping >--------------------------------------------------------------- ad70fba10ba7bcbfa6c11d6efc7451c1559deacb batman-adv/DAT_DHCP_Snooping.textile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/batman-adv/DAT_DHCP_Snooping.textile b/batman-adv/DAT_DHCP_Snooping.textile index 06496c45..a52a1629 100644 --- a/batman-adv/DAT_DHCP_Snooping.textile +++ b/batman-adv/DAT_DHCP_Snooping.textile @@ -163,7 +163,7 @@ Splitting the one DAT cache into a local DAT cache and a DAT DHT cache. Then inc h3. Result -These two patches decreased the overall ARP broadcast overhead by 89.86% and the ARP broadcast overhead from gateways by 96.22% in a ~180 nodes setup at Freifunk Lübeck, measured over one week before and after applying the patches on a specific mesh node's mesh-vpn interface. +These two patches decreased the overall ARP broadcast overhead by 89.86% and the ARP broadcast overhead from gateways by 96.22% in a ~180 nodes setup at Freifunk Lübeck (firmware v0.19.0+v0.15.5), measured over one week before and after applying the patches on a specific mesh node's mesh-vpn interface. <pre><code> Before: @@ -185,7 +185,7 @@ Broadcast ARP from gateways, 7 days, before vs. after: h4. More statistics -Before: +Before (average 2024-06-28T00:00:00+02:00 + 7 days): <pre><code> # PCAP-file bits/s pkts/s @@ -213,7 +213,7 @@ bcast-arp.others.req.grat.cap,0.00,0.00 bcast-arp.others.req.probe.cap,89.75,0.16 </code></pre> -After: +After (average 2024-08-06T00:00:00+02:00 + 7 days): <pre><code> # PCAP-file bits/s pkts/s

1 0

[doc] backup-redmine,main: doc: batman-adv/DAT_DHCP_Snooping (3d8bce7e)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit 3d8bce7e6a738365cba306717e4bac1b80d516c8 Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 07:33:06 2024 +0000 doc: batman-adv/DAT_DHCP_Snooping >--------------------------------------------------------------- 3d8bce7e6a738365cba306717e4bac1b80d516c8 batman-adv/DAT_DHCP_Snooping.textile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/batman-adv/DAT_DHCP_Snooping.textile b/batman-adv/DAT_DHCP_Snooping.textile index 29ddf736..91db60c9 100644 --- a/batman-adv/DAT_DHCP_Snooping.textile +++ b/batman-adv/DAT_DHCP_Snooping.textile @@ -282,3 +282,5 @@ _output: grat: batbla: </code></pre> + +One other interesting observation/note: The mentioned and tracked ESP devices above were regularly trying to reach a specific 10.130.x.255 address in our network. It seems that they have a broken IP stack implementation and even though DHCP offered them a /16 subnet, they seemed to wrongly assume a /24. Therefore likely wrongly trying to use/resolve 10.130.x.255 instead of our gateways at 10.130.0.250-255 for instance. The owner was contacted and seems to have disconnected some already. \ No newline at end of file

1 0

[doc] backup-redmine,main: doc: batman-adv/bcast-arp.gws.cap.stats.txt.png (ff84adb5)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit ff84adb5a0c4a03dd150e8362739c21a27ff39d9 Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 06:34:55 2024 +0000 doc: batman-adv/bcast-arp.gws.cap.stats.txt.png >--------------------------------------------------------------- ff84adb5a0c4a03dd150e8362739c21a27ff39d9 batman-adv/bcast-arp.gws.cap.stats.txt.png | Bin 0 -> 364005 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/batman-adv/bcast-arp.gws.cap.stats.txt.png b/batman-adv/bcast-arp.gws.cap.stats.txt.png new file mode 100644 index 00000000..c755c937 Binary files /dev/null and b/batman-adv/bcast-arp.gws.cap.stats.txt.png differ

1 0

[doc] backup-redmine,main: doc: batman-adv/DAT_DHCP_Snooping (494cb1ac)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit 494cb1ace694c2cddd2c8fd650393c5143ec0d14 Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 07:40:34 2024 +0000 doc: batman-adv/DAT_DHCP_Snooping >--------------------------------------------------------------- 494cb1ace694c2cddd2c8fd650393c5143ec0d14 batman-adv/DAT_DHCP_Snooping.textile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/batman-adv/DAT_DHCP_Snooping.textile b/batman-adv/DAT_DHCP_Snooping.textile index 91db60c9..a55b86a3 100644 --- a/batman-adv/DAT_DHCP_Snooping.textile +++ b/batman-adv/DAT_DHCP_Snooping.textile @@ -165,7 +165,7 @@ Splitting the one DAT cache into a local DAT cache and a DAT DHT cache. Then inc h3. Result -These two patches decreased the overall ARP broadcast overhead by 89.86% and the ARP broadcast overhead from gateways by 96.22% in a ~180 nodes setup at Freifunk Lübeck (firmware v0.19.0+v0.15.5), measured over one week before and after applying the patches on a specific mesh node's mesh-vpn interface. +These two patches decreased the overall ARP broadcast overhead by 89.86% and the ARP broadcast overhead from gateways by 96.22% in a ~180 nodes setup at "Freifunk Lübeck":https://map.luebeck.freifunk.net/ ("firmware v0.19.0+v0.15.5":https://git.chaotikum.org/freifunk-luebeck/site-ffhl/-/tree/v0.19.0?ref_type=tags, based on "Gluon v2023.2.3":https://github.com/freifunk-gluon/gluon/tree/v2023.2.3 / OpenWrt 23.05 and batman-adv v2024.2), measured over one week before and after applying the patches on a specific mesh node's mesh-vpn interface. <pre><code> Before:

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

commits October 2024