This allows to reuse xt_connlimit infrastructure from nf_tables. The upcoming nf_tables frontend can just pass in an nftables register as input key, this allows limiting by any nft-supported key, including concatenations. For xt_connlimit, pass in the zone and the ip/ipv6 address. With help from Yi-Hung Wei.
Showing the changes to include/uapi/linux (1 of 6 files). Show all
Unified · Split
| @@ -27,7 +27,7 @@ struct xt_connlimit_info { · 26 unmodified lines | |||
| 27 | __u32 flags; | 27 | __u32 flags; |
| 28 | 28 | ||
| 29 | /* Used internally by the kernel */ | 29 | /* Used internally by the kernel */ |
| 30 | struct xt_connlimit_data *data __attribute__((aligned(8))); | 30 | struct nf_conncount_data *data __attribute__((aligned(8))); |
| 31 | }; | 31 | }; |
| 32 | 32 | ||
| 33 | #endif /* _XT_CONNLIMIT_H */ | 33 | #endif /* _XT_CONNLIMIT_H */ |