This patch allows us to match on the tunnel metadata that is available of the packet. We can use this to validate if the packet comes from/goes to tunnel and the corresponding tunnel ID.
Showing the changes to include/uapi/linux (1 of 2 files). Show all
Unified · Split
| @@ -1647,4 +1647,19 @@ enum nft_tunnel_key_attributes { · 1646 unmodified lines | ||
| 1647 | 1647 | }; |
| 1648 | 1648 | #define NFTA_TUNNEL_KEY_MAX (__NFTA_TUNNEL_KEY_MAX - 1) |
| 1649 | 1649 | |
| 1650 | +enum nft_tunnel_keys { | |
| 1651 | + NFT_TUNNEL_PATH, | |
| 1652 | + NFT_TUNNEL_ID, | |
| 1653 | + __NFT_TUNNEL_MAX | |
| 1654 | +}; | |
| 1655 | +#define NFT_TUNNEL_MAX (__NFT_TUNNEL_MAX - 1) | |
| 1656 | + | |
| 1657 | +enum nft_tunnel_attributes { | |
| 1658 | + NFTA_TUNNEL_UNSPEC, | |
| 1659 | + NFTA_TUNNEL_KEY, | |
| 1660 | + NFTA_TUNNEL_DREG, | |
| 1661 | + __NFTA_TUNNEL_MAX | |
| 1662 | +}; | |
| 1663 | +#define NFTA_TUNNEL_MAX (__NFTA_TUNNEL_MAX - 1) | |
| 1664 | + | |
| 1650 | 1665 | #endif /* _LINUX_NF_TABLES_H */ |