Eyal Birger ccc007e4a7 net: sched: add em_ipt ematch for calling xtables matches ... The commit a new tc ematch for using netfilter xtable matches. This allows early classification as well as mirroning/redirecting traffic based on logic implemented in netfilter extensions. Current supported use case is classification based on the incoming IPSec state used during decpsulation using the 'policy' iptables extension (xt_policy). The module dynamically fetches the netfilter match module and calls it using a fake xt_action_param structure based on validated userspace provided parameters. As the xt_policy match does not access skb->data, no skb modifications are needed on match. Signed-off-by: Eyal Birger <eyal.birger@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-02-21 13:15:33 -05:00
..
tc_em_cmp.h	License cleanup: add SPDX license identifier to uapi header files with no license	2017-11-02 11:19:54 +01:00
tc_em_ipt.h	net: sched: add em_ipt ematch for calling xtables matches	2018-02-21 13:15:33 -05:00
tc_em_meta.h	License cleanup: add SPDX license identifier to uapi header files with no license	2017-11-02 11:19:54 +01:00
tc_em_nbyte.h	License cleanup: add SPDX license identifier to uapi header files with no license	2017-11-02 11:19:54 +01:00
tc_em_text.h	License cleanup: add SPDX license identifier to uapi header files with no license	2017-11-02 11:19:54 +01:00