4 commits

Author	SHA1	Message	Date
wenxu	a46c52d9f2	netfilter: nft_tunnel: Add NFTA_TUNNEL_MODE options ... nft "tunnel" expr match both the tun_info of RX and TX. This patch provide the NFTA_TUNNEL_MODE to individually match the tun_info of RX or TX. Signed-off-by: wenxu <wenxu@ucloud.cn> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>	2019-02-04 14:39:58 +01:00
Pablo Neira Ayuso	483f3fdcc7	netfilter: nft_tunnel: fix sparse errors ... [...] net/netfilter/nft_tunnel.c:117:25: expected unsigned int [unsigned] [usertype] flags net/netfilter/nft_tunnel.c:117:25: got restricted __be16 [usertype] <noident> [...] net/netfilter/nft_tunnel.c:246:33: expected restricted __be16 [addressable] [assigned] [usertype] tp_dst net/netfilter/nft_tunnel.c:246:33: got int Fixes: af308b94a2 ("netfilter: nf_tables: add tunnel support") Reported-by: kbuild test robot <lkp@intel.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>	2018-08-04 00:53:29 +02:00
Pablo Neira Ayuso	aaecfdb5c5	netfilter: nf_tables: match on tunnel metadata ... This patch allows us to match on the tunnel metadata that is available of the packet. We can use this to validate if the packet comes from/goes to tunnel and the corresponding tunnel ID. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>	2018-08-03 21:12:19 +02:00
Pablo Neira Ayuso	af308b94a2	netfilter: nf_tables: add tunnel support ... This patch implements the tunnel object type that can be used to configure tunnels via metadata template through the existing lightweight API from the ingress path. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>	2018-08-03 21:12:12 +02:00