mbox series

[net-next,0/4] nf_tables_offload: vlan matching support

Message ID 20191119220555.17391-1-pablo@netfilter.org
Headers show
Series nf_tables_offload: vlan matching support | expand

Message

Pablo Neira Ayuso Nov. 19, 2019, 10:05 p.m. UTC
Hi David,

The following patchset contains Netfilter support for vlan matching
offloads:

1) Constify nft_reg_load() as a preparation patch.
2) Restrict rule matching to ingress interface type ARPHRD_ETHER.
3) Add new vlan_tci field to flow_dissector_key_vlan structure,
   to allow to set up vlan_id, vlan_dei and vlan_priority in one go.
4) C-VLAN matching support.

Please, directly apply to net-next if you are OK with this batch.

Thank you.

Pablo Neira Ayuso (4):
  netfilter: nf_tables: constify nft_reg_load{8,16,64}()
  netfilter: nf_tables_offload: allow ethernet interface type only
  netfilter: nft_payload: add VLAN offload support
  netfilter: nft_payload: add C-VLAN offload support

 include/net/flow_dissector.h      | 11 ++++++++---
 include/net/netfilter/nf_tables.h |  6 +++---
 net/netfilter/nft_cmp.c           |  6 ++++++
 net/netfilter/nft_meta.c          |  4 ++++
 net/netfilter/nft_payload.c       | 38 ++++++++++++++++++++++++++++++++++++++
 5 files changed, 59 insertions(+), 6 deletions(-)

Comments

David Miller Nov. 20, 2019, 7:21 p.m. UTC | #1
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Tue, 19 Nov 2019 23:05:51 +0100

> The following patchset contains Netfilter support for vlan matching
> offloads:
> 
> 1) Constify nft_reg_load() as a preparation patch.
> 2) Restrict rule matching to ingress interface type ARPHRD_ETHER.
> 3) Add new vlan_tci field to flow_dissector_key_vlan structure,
>    to allow to set up vlan_id, vlan_dei and vlan_priority in one go.
> 4) C-VLAN matching support.
> 
> Please, directly apply to net-next if you are OK with this batch.

Series applied, thanks.