Commit cfbd1125 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: nf_tables: add enum nft_flowtable_flags to uapi 



Expose the NFT_FLOWTABLE_HW_OFFLOAD flag through uapi.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 8ac2bd35

include/net/netfilter/nf_flow_table.h

+1 −1
Original line number Diff line number Diff line
@@ -62,7 +62,7 @@ struct nf_flowtable_type { 
};



enum nf_flowtable_flags {

	NF_FLOWTABLE_HW_OFFLOAD		= 0x1,

	NF_FLOWTABLE_HW_OFFLOAD		= 0x1,	/* NFT_FLOWTABLE_HW_OFFLOAD */

};



struct nf_flowtable {

include/uapi/linux/netfilter/nf_tables.h

+10 −0
Original line number Diff line number Diff line
@@ -1553,6 +1553,16 @@ enum nft_object_attributes { 
};

#define NFTA_OBJ_MAX		(__NFTA_OBJ_MAX - 1)



/**

 * enum nft_flowtable_flags - nf_tables flowtable flags

 *

 * @NFT_FLOWTABLE_HW_OFFLOAD: flowtable hardware offload is enabled

 */

enum nft_flowtable_flags {

	NFT_FLOWTABLE_HW_OFFLOAD	= 0x1,

	NFT_FLOWTABLE_MASK		= NFT_FLOWTABLE_HW_OFFLOAD

};



/**

 * enum nft_flowtable_attributes - nf_tables flow table netlink attributes

 *

net/netfilter/nf_tables_api.c

+1 −1
Original line number Diff line number Diff line
@@ -6375,7 +6375,7 @@ static int nf_tables_newflowtable(struct net *net, struct sock *nlsk, 
	if (nla[NFTA_FLOWTABLE_FLAGS]) {

		flowtable->data.flags =

			ntohl(nla_get_be32(nla[NFTA_FLOWTABLE_FLAGS]));

		if (flowtable->data.flags & ~NF_FLOWTABLE_HW_OFFLOAD)

		if (flowtable->data.flags & ~NFT_FLOWTABLE_MASK)

			goto err3;

	}

CRA Git | Maintained and supported by SUSTech CRA and CCSE