NetworkManager/contrib/debian
Beniamino Galvani 2e751865ea bpf: clat: rework to avoid pointer arithmetic
Avoid using pointer arithmetic in the BPF program, so that it requires
only CAP_BPF and not CAP_PERFMON. In this context "pointer arithmetic"
means adding a variable value to a packet pointer. This means that the
program no longer tries to parse variable-size headers (IPv4 options,
IPv6 extension headers). Those were already not supported before. It
also doesn't parse VLAN tags, but there should be no need for that. If
we use fixed offset, we can avoid using the parsing helpers from
libxdp.
2026-01-13 18:41:02 +01:00
..
REQUIRED_PACKAGES bpf: clat: rework to avoid pointer arithmetic 2026-01-13 18:41:02 +01:00