diff options
| author | Ryoga Saito <contact@proelbtn.com> | 2021-08-17 08:39:37 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-08-30 01:51:36 +0200 |
| commit | 7a3f5b0de3647c854e34269c3332d7a1e902901a (patch) | |
| tree | 39039a7ed9680a98fa2bb36135f83d30ce708526 /include/net | |
| parent | 7bc416f1471686faa8030cd5338f6a5370e01b25 (diff) | |
| download | linux-stable-7a3f5b0de3647c854e34269c3332d7a1e902901a.tar.gz linux-stable-7a3f5b0de3647c854e34269c3332d7a1e902901a.tar.bz2 linux-stable-7a3f5b0de3647c854e34269c3332d7a1e902901a.zip | |
netfilter: add netfilter hooks to SRv6 data plane
This patch introduces netfilter hooks for solving the problem that
conntrack couldn't record both inner flows and outer flows.
This patch also introduces a new sysctl toggle for enabling lightweight
tunnel netfilter hooks.
Signed-off-by: Ryoga Saito <contact@proelbtn.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/net')
| -rw-r--r-- | include/net/lwtunnel.h | 3 | ||||
| -rw-r--r-- | include/net/netfilter/nf_hooks_lwtunnel.h | 7 |
2 files changed, 10 insertions, 0 deletions
diff --git a/include/net/lwtunnel.h b/include/net/lwtunnel.h index 05cfd6ff6528..6f15e6fa154e 100644 --- a/include/net/lwtunnel.h +++ b/include/net/lwtunnel.h @@ -51,6 +51,9 @@ struct lwtunnel_encap_ops { }; #ifdef CONFIG_LWTUNNEL + +DECLARE_STATIC_KEY_FALSE(nf_hooks_lwtunnel_enabled); + void lwtstate_free(struct lwtunnel_state *lws); static inline struct lwtunnel_state * diff --git a/include/net/netfilter/nf_hooks_lwtunnel.h b/include/net/netfilter/nf_hooks_lwtunnel.h new file mode 100644 index 000000000000..52e27920f829 --- /dev/null +++ b/include/net/netfilter/nf_hooks_lwtunnel.h @@ -0,0 +1,7 @@ +#include <linux/sysctl.h> +#include <linux/types.h> + +#ifdef CONFIG_SYSCTL +int nf_hooks_lwtunnel_sysctl_handler(struct ctl_table *table, int write, + void *buffer, size_t *lenp, loff_t *ppos); +#endif |