netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Patrick McHardy <kaber@trash.net>
To: Pablo Neira Ayuso <pablo@netfilter.org>
Cc: Florian Westphal <fw@strlen.de>, netfilter-devel@vger.kernel.org
Subject: Re: nftables data type names
Date: Sun, 13 Apr 2014 16:21:02 +0200	[thread overview]
Message-ID: <20140413142102.GA3375@macbook.localnet> (raw)
In-Reply-To: <20140413123728.GA26141@localhost>

On Sun, Apr 13, 2014 at 02:37:28PM +0200, Pablo Neira Ayuso wrote:
> On Sun, Apr 13, 2014 at 12:57:53PM +0200, Patrick McHardy wrote:
> > 
> > What I've got now is:
> > 
> > Address types:
> > 
> >  ll_addr
> >  ipv4_addr
> >  ipv6_addr
> >  ether_addr
> > 
> > Protocol types:
> > 
> >  nf_proto
> >  inet_proto
> > 
> > (l3proto and l4proto don't exist as types)
> > 
> > Conntrack types:
> > 
> >  ct_state
> >  ct_dir
> >  ct_status
> >  ct_label
> > 
> > Packet type related types:
> > 
> >  mh_type
> >  iface_type
> >  icmp_type
> >  dccp_pkttype
> >  icmpv6_type
> >  ether_type
> > 
> > Interface related types:
> > 
> >  ifindex
> >  iface_type
> > 
> > Arp types:
> > 
> >  arp_op
> > 
> > Other types:
> > 
> >  mark
> >  time
> >  realm
> >  uid
> >  gid
> > 
> > And a few base types that are fine as they are.
> > 
> > The things I'm not sure about are:
> > 
> >  ifindex: this is a well established term I think, however it would be more
> >           consistent to use iface_index
> 
> We can have an alias for this perhaps so both work?

Sure. We have to decide for one for output however. I'd prefer to use iface_
for consistency.

> >  mark/realm: pkt_mark and pkt_realm/route_realm perhaps. Not sure
> 
> if we would ever have ct_mark, then the initial pkt_ prefix is good to
> have.

Well, its the data type, so ct_mark is unlikely to exist since the ct marks
are effectively packet marks. This is also the reason why I chose "mark"
without a prefix in the first place, but I now think using pkt_mark for
both is more precise about what the meaning of these values is.

> >  uid/gid: sk_uid/sk_gid?
> 
> I like the sk_ prefix also clearly specifies to users that this is
> related to the socket information.

Ok, will change.

> So following prefix_keytype looks good to me. The prefix just denotes
> the scope for which the keytype applies.

Yep.

      reply	other threads:[~2014-04-13 14:21 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-04-12 10:29 nftables data type names Patrick McHardy
2014-04-12 10:56 ` Florian Westphal
2014-04-12 11:03   ` Patrick McHardy
2014-04-13 10:57     ` Patrick McHardy
2014-04-13 12:37       ` Pablo Neira Ayuso
2014-04-13 14:21         ` Patrick McHardy [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20140413142102.GA3375@macbook.localnet \
    --to=kaber@trash.net \
    --cc=fw@strlen.de \
    --cc=netfilter-devel@vger.kernel.org \
    --cc=pablo@netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).