This allows you to filter traffic by process control group (cgroup).
Showing the changes to include/uapi/linux (1 of 2 files). Show all
Unified · Split
| @@ -579,6 +579,7 @@ enum nft_exthdr_attributes { · 578 unmodified lines | ||
| 579 | 579 | * @NFT_META_CPU: cpu id through smp_processor_id() |
| 580 | 580 | * @NFT_META_IIFGROUP: packet input interface group |
| 581 | 581 | * @NFT_META_OIFGROUP: packet output interface group |
| 582 | + * @NFT_META_CGROUP: socket control group (skb->sk->sk_classid) | |
| 582 | 583 | */ |
| 583 | 584 | enum nft_meta_keys { |
| 584 | 585 | NFT_META_LEN, |
| @@ -604,6 +605,7 @@ enum nft_meta_keys { · 19 unmodified lines | ||
| 604 | 605 | NFT_META_CPU, |
| 605 | 606 | NFT_META_IIFGROUP, |
| 606 | 607 | NFT_META_OIFGROUP, |
| 608 | + NFT_META_CGROUP, | |
| 607 | 609 | }; |
| 608 | 610 | |
| 609 | 611 | /** |