This patch allows us to match on the tunnel metadata that is available of the packet. We can use this to validate if the packet comes from/goes to tunnel and the corresponding tunnel ID.
Showing the changes to include/uapi/linux (1 of 2 files). Show all
Unified · Split
| @@ -1647,4 +1647,19 @@ enum nft_tunnel_key_attributes { · 1646 unmodified lines | |||
| 1647 | }; | 1647 | }; |
| 1648 | #define NFTA_TUNNEL_KEY_MAX (__NFTA_TUNNEL_KEY_MAX - 1) | 1648 | #define NFTA_TUNNEL_KEY_MAX (__NFTA_TUNNEL_KEY_MAX - 1) |
| 1649 | 1649 | ||
| 1650 | enum nft_tunnel_keys { | ||
| 1651 | NFT_TUNNEL_PATH, | ||
| 1652 | NFT_TUNNEL_ID, | ||
| 1653 | __NFT_TUNNEL_MAX | ||
| 1654 | }; | ||
| 1655 | #define NFT_TUNNEL_MAX (__NFT_TUNNEL_MAX - 1) | ||
| 1656 | |||
| 1657 | enum nft_tunnel_attributes { | ||
| 1658 | NFTA_TUNNEL_UNSPEC, | ||
| 1659 | NFTA_TUNNEL_KEY, | ||
| 1660 | NFTA_TUNNEL_DREG, | ||
| 1661 | __NFTA_TUNNEL_MAX | ||
| 1662 | }; | ||
| 1663 | #define NFTA_TUNNEL_MAX (__NFTA_TUNNEL_MAX - 1) | ||
| 1664 | |||
| 1650 | #endif /* _LINUX_NF_TABLES_H */ | 1665 | #endif /* _LINUX_NF_TABLES_H */ |