]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: match on tunnel metadata
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 2 Aug 2018 18:51:46 +0000 (20:51 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 3 Aug 2018 19:12:19 +0000 (21:12 +0200)
commit34a324dc67249c158c141032f81745313ed7f05c
tree9ade4d7fd7477641b0f142588bcbed29c266016d
parent852303e23a59338263a8dd38848d3c5cbcd7fc86
netfilter: nf_tables: match on tunnel metadata

This patch allows us to match on the tunnel metadata that is available
of the packet. We can use this to validate if the packet comes from/goes
to tunnel and the corresponding tunnel ID.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nft_tunnel.c