Pablo Neira Ayuso says: ==================== Netfilter updates for net-next The following patchset contains Netfilter updates for net-next: 1) Remove #ifdef pollution around nf_ingress(), from Lukas Wunner. 2) Document ingress hook in netdevice, also from Lukas. 3) Remove htons() in tunnel metadata port netlink attributes, from Xin Long. 4) Missing erspan netlink attribute validation also from Xin Long. 5) Missing erspan version in tunnel, from Xin Long. 6) Missing attribute nest in NFTA_TUNNEL_KEY_OPTS_{VXLAN,ERSPAN} Patch from Xin Long. 7) Missing nla_nest_cancel() in tunnel netlink dump path, from Xin Long. 8) Remove two exported conntrack symbols with no clients, from Florian Westphal. 9) Add nft_meta_get_eval_time() helper to nft_meta, from Florian. 10) Add nft_meta_pkttype helper for loopback, also from Florian. 11) Add nft_meta_socket uid helper, from Florian Westphal. 12) Add nft_meta_cgroup helper, from Florian. 13) Add nft_meta_ifkind helper, from Florian. 14) Group all interface related meta selector, from Florian. 15) Add nft_prandom_u32() helper, from Florian. 16) Add nft_meta_rtclassid helper, from Florian. 17) Add support for matching on the slave device index, from Florian. This batch, among other things, contains updates for the netfilter tunnel netlink interface: This extension is still incomplete and lacking proper userspace support which is actually my fault, I did not find the time to go back and finish this. This update is breaking tunnel UAPI in some aspects to fix it but do it better sooner than never. ====================
Showing the changes to include/uapi/linux (1 of 7 files). Show all
Unified · Split
| @@ -805,6 +805,8 @@ enum nft_exthdr_attributes { · 804 unmodified lines | |||
| 805 | * @NFT_META_TIME_NS: time since epoch (in nanoseconds) | 805 | * @NFT_META_TIME_NS: time since epoch (in nanoseconds) |
| 806 | * @NFT_META_TIME_DAY: day of week (from 0 = Sunday to 6 = Saturday) | 806 | * @NFT_META_TIME_DAY: day of week (from 0 = Sunday to 6 = Saturday) |
| 807 | * @NFT_META_TIME_HOUR: hour of day (in seconds) | 807 | * @NFT_META_TIME_HOUR: hour of day (in seconds) |
| 808 | * @NFT_META_SDIF: slave device interface index | ||
| 809 | * @NFT_META_SDIFNAME: slave device interface name | ||
| 808 | */ | 810 | */ |
| 809 | enum nft_meta_keys { | 811 | enum nft_meta_keys { |
| 810 | NFT_META_LEN, | 812 | NFT_META_LEN, |
| @@ -840,6 +842,8 @@ enum nft_meta_keys { · 29 unmodified lines | |||
| 840 | NFT_META_TIME_NS, | 842 | NFT_META_TIME_NS, |
| 841 | NFT_META_TIME_DAY, | 843 | NFT_META_TIME_DAY, |
| 842 | NFT_META_TIME_HOUR, | 844 | NFT_META_TIME_HOUR, |
| 845 | NFT_META_SDIF, | ||
| 846 | NFT_META_SDIFNAME, | ||
| 843 | }; | 847 | }; |
| 844 | 848 | ||
| 845 | /** | 849 | /** |