]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: match on tunnel metadata
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 2 Aug 2018 18:51:46 +0000 (20:51 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 3 Aug 2018 19:12:19 +0000 (21:12 +0200)
commit2b7178496f052399dcf0147a50c6686fa5c2050e
tree9ade4d7fd7477641b0f142588bcbed29c266016d
parentc5772b556846dd7e0c6f118ebb175e9f7a0377f1
netfilter: nf_tables: match on tunnel metadata

This patch allows us to match on the tunnel metadata that is available
of the packet. We can use this to validate if the packet comes from/goes
to tunnel and the corresponding tunnel ID.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nft_tunnel.c