xfrm: extend MIGRATE with UDP encapsulation port
authorAntony Antony <antony@phenome.org>
Tue, 6 Jun 2017 10:12:13 +0000 (12:12 +0200)
committerSteffen Klassert <steffen.klassert@secunet.com>
Wed, 7 Jun 2017 06:25:58 +0000 (08:25 +0200)
commit4ab47d47af20addd6ecee1ece0205b1fbf483942
tree7159ac7737efd4cc51aa11ed14c99fffa7e188bb
parentd49c9dc1c84878b0c044af7519a80ccb814b3f9f
xfrm: extend MIGRATE with UDP encapsulation port

Add UDP encapsulation port to XFRM_MSG_MIGRATE using an optional
netlink attribute XFRMA_ENCAP.

The devices that support IKE MOBIKE extension (RFC-4555 Section 3.8)
could go to sleep for a few minutes and wake up. When it wake up the
NAT mapping could have expired, the device send a MOBIKE UPDATE_SA
message to migrate the IPsec SA. The change could be a change UDP
encapsulation port, IP address, or both.

Reported-by: Paul Wouters <pwouters@redhat.com>
Signed-off-by: Antony Antony <antony@phenome.org>
Reviewed-by: Richard Guy Briggs <rgb@tricolour.ca>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
include/net/xfrm.h
net/key/af_key.c
net/xfrm/xfrm_policy.c
net/xfrm/xfrm_state.c
net/xfrm/xfrm_user.c