Pablo Neira Ayuso says: ==================== Netfilter/IPVS updates for net-next 1) Allow slightly larger IPVS connection table size from Kconfig for 64-bit arch, from Abhijeet Rastogi. 2) Since IPVS connection table might be larger than 2^20 after previous patch, allow to limit it depending on the available memory. Moreover, use kvmalloc. From Julian Anastasov. 3) Do not rebuild VLAN header in nft_payload when matching source and destination MAC address. 4) Remove nested rcu read lock side in ip_set_test(), from Florian Westphal. 5) Allow to update set size, also from Florian. 6) Improve NAT tuple selection when connection is closing, from Florian Westphal. 7) Support for resetting set element stateful expression, from Phil Sutter. 8) Use NLA_POLICY_MAX to narrow down maximum attribute value in nf_tables, from Florian Westphal. * tag 'nf-next-23-06-26' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next: netfilter: nf_tables: limit allowed range via nla_policy netfilter: nf_tables: Introduce NFT_MSG_GETSETELEM_RESET netfilter: snat: evict closing tcp entries on reply tuple collision netfilter: nf_tables: permit update of set size netfilter: ipset: remove rcu_read_lock_bh pair from ip_set_test netfilter: nft_payload: rebuild vlan header when needed ipvs: dynamically limit the connection hash table ipvs: increase ip_vs_conn_tab_bits range for 64BIT ====================
Showing the changes to include/uapi/linux (1 of 23 files). Show all
Unified · Split
| @@ -105,6 +105,7 @@ enum nft_verdicts { · 104 unmodified lines | |||
| 105 | * @NFT_MSG_DESTROYSETELEM: destroy a set element (enum nft_set_elem_attributes) | 105 | * @NFT_MSG_DESTROYSETELEM: destroy a set element (enum nft_set_elem_attributes) |
| 106 | * @NFT_MSG_DESTROYOBJ: destroy a stateful object (enum nft_object_attributes) | 106 | * @NFT_MSG_DESTROYOBJ: destroy a stateful object (enum nft_object_attributes) |
| 107 | * @NFT_MSG_DESTROYFLOWTABLE: destroy flow table (enum nft_flowtable_attributes) | 107 | * @NFT_MSG_DESTROYFLOWTABLE: destroy flow table (enum nft_flowtable_attributes) |
| 108 | * @NFT_MSG_GETSETELEM_RESET: get set elements and reset attached stateful expressions (enum nft_set_elem_attributes) | ||
| 108 | */ | 109 | */ |
| 109 | enum nf_tables_msg_types { | 110 | enum nf_tables_msg_types { |
| 110 | NFT_MSG_NEWTABLE, | 111 | NFT_MSG_NEWTABLE, |
| @@ -140,6 +141,7 @@ enum nf_tables_msg_types { · 29 unmodified lines | |||
| 140 | NFT_MSG_DESTROYSETELEM, | 141 | NFT_MSG_DESTROYSETELEM, |
| 141 | NFT_MSG_DESTROYOBJ, | 142 | NFT_MSG_DESTROYOBJ, |
| 142 | NFT_MSG_DESTROYFLOWTABLE, | 143 | NFT_MSG_DESTROYFLOWTABLE, |
| 144 | NFT_MSG_GETSETELEM_RESET, | ||
| 143 | NFT_MSG_MAX, | 145 | NFT_MSG_MAX, |
| 144 | }; | 146 | }; |
| 145 | 147 | ||