projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2953d80) | patch
netfilter: nf_tables: add xfrm expression
authorFlorian Westphal <fw@strlen.de>
Mon, 3 Sep 2018 16:09:40 +0000 (18:09 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Sep 2018 09:40:08 +0000 (11:40 +0200)
commit6c47260250fc6114ce2012db13e1cd3938a27b73
treed74409b815de73b670c981d1450501531beee1a2tree | snapshot
parent2953d80ff04862b26a2e628fb3948868f54d753dcommit | diff
netfilter: nf_tables: add xfrm expression

supports fetching saddr/daddr of tunnel mode states, request id and spi.
If direction is 'in', use inbound skb secpath, else dst->xfrm.

Joint work with Máté Eckl.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h diff | blob | history
net/netfilter/Kconfig diff | blob | history
net/netfilter/Makefile diff | blob | history
net/netfilter/nft_xfrm.c [new file with mode: 0644] blob
Domain: System / Kernel;