eBPF based TOA

[byxzone]

In BPF_PROG_TYPE_CGROUP_SOCK_ADDR program type, the struct sock cannot be accessed. I want to implement an eBPF-based TOA (Tcp Option Address) to restore the real client IP/PORT in LVS-FULLNAT mode, using BPF_CGROUP_INET4_GETPEERNAME attach mode

[chenhengqi]

Not familiar with BPF_PROG_TYPE_CGROUP_SOCK_ADDR , but you may use tc-bpf to implement TOA.

[byxzone]

In my impression, TC is before conntrack. Will this lead to the failure of fullnat?

[chenhengqi]

tc-bpf is pretty generic, it should be trivial to implement TOA or full NAT.