Allow to match and mangle on inner headers / payload data after the transport header. There is a new field in the pktinfo structure that stores the inner header offset which is calculated only when requested. Only TCP and UDP supported at this stage.
Showing the changes to include/uapi (1 of 3 files). Show all
Unified · Split
| @@ -753,11 +753,13 @@ enum nft_dynset_attributes { · 752 unmodified lines | ||
| 753 | 753 | * @NFT_PAYLOAD_LL_HEADER: link layer header |
| 754 | 754 | * @NFT_PAYLOAD_NETWORK_HEADER: network header |
| 755 | 755 | * @NFT_PAYLOAD_TRANSPORT_HEADER: transport header |
| 756 | + * @NFT_PAYLOAD_INNER_HEADER: inner header / payload | |
| 756 | 757 | */ |
| 757 | 758 | enum nft_payload_bases { |
| 758 | 759 | NFT_PAYLOAD_LL_HEADER, |
| 759 | 760 | NFT_PAYLOAD_NETWORK_HEADER, |
| 760 | 761 | NFT_PAYLOAD_TRANSPORT_HEADER, |
| 762 | + NFT_PAYLOAD_INNER_HEADER, | |
| 761 | 763 | }; |
| 762 | 764 | |
| 763 | 765 | /** |