From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.8 required=3.0 tests=BAYES_00,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8322AC4320A for ; Tue, 27 Jul 2021 21:23:15 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 6809860FA0 for ; Tue, 27 Jul 2021 21:23:15 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232013AbhG0VXO (ORCPT ); Tue, 27 Jul 2021 17:23:14 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:59486 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S234561AbhG0VXL (ORCPT ); Tue, 27 Jul 2021 17:23:11 -0400 Received: from mail-pl1-x629.google.com (mail-pl1-x629.google.com [IPv6:2607:f8b0:4864:20::629]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 3AB80C061A24 for ; Tue, 27 Jul 2021 14:22:27 -0700 (PDT) Received: by mail-pl1-x629.google.com with SMTP id k1so30518plt.12 for ; Tue, 27 Jul 2021 14:22:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=MAf7u4TJvs5Sv03AGISvam/0mpJzusFYzH1iCFFxX7w=; b=RWnugz+5AV737Gf+cyi+F/L4qo6NnU2NBvtxokZOKlsDxwPxaSYUu2sab01LSQlkRj o09/ztAXNOM8eZFwswoUPLdBEhl+jR6bKniGOK/0nglciRzG82oGYrkwt9GcOB1LGpyX 3EdZCWfOTTO0OIVdVGuGOZLa0VxcbYI9UHsPg= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=MAf7u4TJvs5Sv03AGISvam/0mpJzusFYzH1iCFFxX7w=; b=YwBdGWrjZqxf5dtaZtvoY89U3GrqHvFCmTxHKRMCBR06VZkbH8UnvFIVCMR5oFQ+OA m4Yi1tpZvEZHctAt6i/LTfsQxGroEgB5QqvMstq9zJDCKHsKqAk03DwKdKwvrYQMt/nm 1bKHepWl637kukEnLL+jmMg5ufGcvG4lcyurXmW3cs8mX72HfczqauU0y03E/IDwpSFJ wOLV2KG9rJdjWENCYnDurEzArQSfaT3Wr2HVSwm5BeFdzU023yc0yuplP0kwHwHPtIG0 v+Nm0M0zwPanl5aWpb8Fv/VFMDBKlSJq4OAMt0JnLcmcz06lzGoRSdoFcL7SV6TyeST6 eVFw== X-Gm-Message-State: AOAM530nlpx36/panRejCi3/BTGRFdITXgGwwxH2RbvJXPVVaUS7bpb+ GCq9WVZSOeIdFuqctZ5WSrNCzChyw3itOpfMaZ45aw== X-Google-Smtp-Source: ABdhPJwQBliYlJnfdssUkXjs3c/B4SZJzNwIVCGrM5vFGuthQVt5Tb4mIQhB6JsP+G1okjrNzoFt7eOfVZ8zT/WNqWo= X-Received: by 2002:a17:90b:1612:: with SMTP id la18mr15746789pjb.95.1627420946711; Tue, 27 Jul 2021 14:22:26 -0700 (PDT) MIME-Version: 1.0 References: <20210727190001.914-1-kbowman@cloudflare.com> <20210727195459.GA15181@salvia> <20210727211029.GA17432@salvia> In-Reply-To: <20210727211029.GA17432@salvia> From: Alex Forster Date: Tue, 27 Jul 2021 16:22:10 -0500 Message-ID: Subject: Re: [PATCH] netfilter: xt_NFLOG: allow 128 character log prefixes To: Pablo Neira Ayuso Cc: Kyle Bowman , kernel-team , Jozsef Kadlecsik , Florian Westphal , "David S. Miller" , Jakub Kicinski , netfilter-devel@vger.kernel.org, coreteam@netfilter.org, linux-kernel@vger.kernel.org, Network Development Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org > It should be possible to update iptables-nft to use nft_log from > userspace (instead of xt_LOG) which removes this limitation, there is > no need for a kernel upgrade. We have been able to migrate some parts of this workload to the nftables subsystem by treating network namespaces sort of like VRFs. Unfortunately, we have not been able to use nftables to handle all traffic, since it does not have an equivalent for xt_bpf. Alex Forster