[LEDE-DEV] [PATCH] Add ip_vs kernel netfilter modules to enable load balancing, capabilities

[Mauro Mozzarelli]

Hello John,


I sent the first patch using the output of git show, but there was 
something wrong and it was suggested to use git format-patch, so I sent 
the last using the following method:

I do a git pull for trunk first, then inside the trunk directory:

1. git checkout -b ipvs
2. I apply my changes
3. git add path to changed file(s)
4. git commit and edit comments
5. git show to show <commit> id.
    and
    git format-patch -1 <commit>

Then I take the output from git format-patch and I post it to the 
mailing list.

Please could you let me know what would be the correct procedure?


Mauro



On 27/02/17 10:30, John Crispin wrote:
>
> On 24/02/2017 12:42, Mauro Mozzarelli wrote:
>> IPVS (IP Virtual Server) implements transport-layer load balancing
>> inside the Linux kernel, so called Layer-4 switching. IPVS running on a
>> host acts as a load balancer at the front of a cluster of real servers,
>> it can direct requests for TCP/UDP based services to the real servers,
>> and makes services of the real servers to appear as a virtual service on
>> a single IP address.
>>
>> This patch adds kmod-nf-ipvs kernel modules option to LEDE kernel netfilter
>>
>> Signed-off-by: Mauro Mozzarelli <mauro at ezplanet.org>
> Hi Mauro,
>
> How do you send your patches ? patchwork fails to pick them up properly
>
> https://patchwork.ozlabs.org/patch/732113/
>
> 	John
>
>
>> ---
>>   package/kernel/linux/modules/netfilter.mk | 89
>> +++++++++++++++++++++++++++++++
>>   1 file changed, 89 insertions(+)
>>
>> diff --git a/package/kernel/linux/modules/netfilter.mk
>> b/package/kernel/linux/modules/netfilter.mk
>> index 6162dbc..9cef8fd 100644
>> --- a/package/kernel/linux/modules/netfilter.mk
>> +++ b/package/kernel/linux/modules/netfilter.mk
>> @@ -77,6 +77,17 @@ endef
>>   $(eval $(call KernelPackage,nf-conntrack))
>>
>>
>> +define KernelPackage/nf-conntrack-ftp
>> +  SUBMENU:=$(NF_MENU)
>> +  TITLE:=FTP connection tracking
>> +  KCONFIG:=CONFIG_NF_CONNTRACK_FTP
>> +  DEPENDS:=kmod-nf-conntrack
>> +  FILES:=$(LINUX_DIR)/net/netfilter/nf_conntrack_ftp.ko
>> +endef
>> +
>> +$(eval $(call KernelPackage,nf-conntrack-ftp))
>> +
>> +
>>   define KernelPackage/nf-conntrack6
>>     SUBMENU:=$(NF_MENU)
>>     TITLE:=Netfilter IPv6 connection tracking
>> @@ -271,6 +282,84 @@ define KernelPackage/ipt-ipset
>>   endef
>>   $(eval $(call KernelPackage,ipt-ipset))
>>
>> +IPVS_MODULES:= \
>> +    ipvs/ip_vs \
>> +    ipvs/ip_vs_lc \
>> +    ipvs/ip_vs_wlc \
>> +    ipvs/ip_vs_rr \
>> +    ipvs/ip_vs_wrr \
>> +    ipvs/ip_vs_lblc \
>> +    ipvs/ip_vs_lblcr \
>> +    ipvs/ip_vs_dh \
>> +    ipvs/ip_vs_sh \
>> +    ipvs/ip_vs_fo \
>> +    ipvs/ip_vs_ovf \
>> +    ipvs/ip_vs_nq \
>> +    ipvs/ip_vs_sed \
>> +    xt_ipvs
>> +
>> +define KernelPackage/nf-ipvs
>> +  SUBMENU:=Netfilter Extensions
>> +  TITLE:=IP Virtual Server modules
>> +  DEPENDS:=@IPV6 +kmod-lib-crc32c +kmod-ipt-conntrack +kmod-nf-conntrack
>> +  KCONFIG:= \
>> +    CONFIG_IP_VS \
>> +    CONFIG_IP_VS_IPV6=y \
>> +    CONFIG_IP_VS_DEBUG=n \
>> +    CONFIG_IP_VS_PROTO_TCP=y \
>> +    CONFIG_IP_VS_PROTO_UDP=y \
>> +    CONFIG_IP_VS_PROTO_AH_ESP=y \
>> +    CONFIG_IP_VS_PROTO_ESP=y \
>> +    CONFIG_IP_VS_PROTO_AH=y \
>> +    CONFIG_IP_VS_PROTO_SCTP=y \
>> +    CONFIG_IP_VS_TAB_BITS=12 \
>> +    CONFIG_IP_VS_RR \
>> +    CONFIG_IP_VS_WRR \
>> +    CONFIG_IP_VS_LC \
>> +    CONFIG_IP_VS_WLC \
>> +    CONFIG_IP_VS_FO \
>> +    CONFIG_IP_VS_OVF \
>> +    CONFIG_IP_VS_LBLC \
>> +    CONFIG_IP_VS_LBLCR \
>> +    CONFIG_IP_VS_DH \
>> +    CONFIG_IP_VS_SH \
>> +    CONFIG_IP_VS_SED \
>> +    CONFIG_IP_VS_NQ \
>> +    CONFIG_IP_VS_SH_TAB_BITS=8 \
>> +    CONFIG_IP_VS_NFCT=y \
>> +    CONFIG_NETFILTER_XT_MATCH_IPVS
>> +
>> +  FILES:=$(foreach
>> mod,$(IPVS_MODULES),$(LINUX_DIR)/net/netfilter/$(mod).ko)
>> +  $(call AddDepends/ipt,+kmod-ipt-conntrack,+kmod-nf-conntrack)
>> +endef
>> +$(eval $(call KernelPackage,nf-ipvs))
>> +
>> +define KernelPackage/nf-ipvs/description
>> + IPVS (IP Virtual Server) implements transport-layer load balancing
>> inside the Linux kernel
>> + so called Layer-4 switching.
>> +endef
>> +
>> +define KernelPackage/nf-ipvs-ftp
>> +  SUBMENU:=$(NF_MENU)
>> +  TITLE:=Virtual Server FTP protocol support
>> +  KCONFIG:=CONFIG_IP_VS_FTP
>> +  DEPENDS:=kmod-nf-ipvs +kmod-nf-nat +kmod-nf-conntrack-ftp
>> +  FILES:=$(LINUX_DIR)/net/netfilter/ipvs/ip_vs_ftp.ko
>> +endef
>> +
>> +$(eval $(call KernelPackage,nf-ipvs-ftp))
>> +
>> +
>> +define KernelPackage/nf-ipvs-sip
>> +  SUBMENU:=$(NF_MENU)
>> +  TITLE:=Virtual Server SIP protocol support
>> +  KCONFIG:=CONFIG_IP_VS_PE_SIP
>> +  DEPENDS:=kmod-nf-ipvs +kmod-nf-nathelper-extra
>> +  FILES:=$(LINUX_DIR)/net/netfilter/ipvs/ip_vs_pe_sip.ko
>> +endef
>> +
>> +$(eval $(call KernelPackage,nf-ipvs-sip))
>> +
>>
>>   define KernelPackage/ipt-nat
>>     TITLE:=Basic NAT targets