similar to connmarks, except labels are bit-based; i.e. all labels may be attached to a flow at the same time. Up to 128 labels are supported. Supporting more labels is possible, but requires increasing the ct offset delta from u8 to u16 type due to increased extension sizes. Mapping of bit-identifier to label name is done in userspace. The extension is enabled at run-time once "-m connlabel" netfilter rules are added.
Showing the changes to include/uapi/linux (1 of 10 files). Show all
Unified · Split
| @@ -0,0 +1,12 @@ | |||
| 1 | #include <linux/types.h> | ||
| 2 | |||
| 3 | #define XT_CONNLABEL_MAXBIT 127 | ||
| 4 | enum xt_connlabel_mtopts { | ||
| 5 | XT_CONNLABEL_OP_INVERT = 1 << 0, | ||
| 6 | XT_CONNLABEL_OP_SET = 1 << 1, | ||
| 7 | }; | ||
| 8 | |||
| 9 | struct xt_connlabel_mtinfo { | ||
| 10 | __u16 bit; | ||
| 11 | __u16 options; | ||
| 12 | }; | ||