From: Phil Sutter <phil@nwl.cc>
To: Pablo Neira Ayuso <pablo@netfilter.org>
Cc: netfilter-devel@vger.kernel.org
Subject: [nft PATCH 0/5] Introduce boolean type and existence checks
Date: Fri, 10 Mar 2017 18:13:48 +0100 [thread overview]
Message-ID: <20170310171353.28868-1-phil@nwl.cc> (raw)
The following patch series implements a boolean datatype for use in a
boolean expression as right-hand side of a relational. Based upon that,
header existence matches are implemented for IPv6 extension and TCP
option headers as well as an existence match of a FIB entry.
Phil Sutter (5):
Introduce boolean datatype and boolean expression
exthdr: Add support for exthdr specific flags
exthdr: Implement existence check
fib: Support existence check
doc: Document boolean type and applications
doc/nft.xml | 134 ++++++++++++++++++++++++++++++++++++
include/datatype.h | 2 +
include/expression.h | 3 +
include/exthdr.h | 4 +-
include/linux/netfilter/nf_tables.h | 1 +
include/tcpopt.h | 3 +-
src/datatype.c | 19 +++++
src/evaluate.c | 17 ++++-
src/expression.c | 4 ++
src/exthdr.c | 39 ++++++++---
src/fib.c | 5 +-
src/netlink_delinearize.c | 5 +-
src/netlink_linearize.c | 1 +
src/parser_bison.y | 54 +++++++++++++++
src/scanner.l | 5 ++
src/tcpopt.c | 11 ++-
tests/py/inet/fib.t | 3 +
tests/py/inet/fib.t.payload | 10 +++
tests/py/inet/tcpopt.t | 3 +
tests/py/inet/tcpopt.t.payload.inet | 14 ++++
tests/py/ip6/exthdr.t | 19 +++++
tests/py/ip6/exthdr.t.payload.ip6 | 60 ++++++++++++++++
22 files changed, 399 insertions(+), 17 deletions(-)
create mode 100644 tests/py/ip6/exthdr.t
create mode 100644 tests/py/ip6/exthdr.t.payload.ip6
--
2.11.0
next reply other threads:[~2017-03-10 17:14 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-03-10 17:13 Phil Sutter [this message]
2017-03-10 17:13 ` [nft PATCH 1/5] Introduce boolean datatype and boolean expression Phil Sutter
2017-03-10 17:13 ` [nft PATCH 2/5] exthdr: Add support for exthdr specific flags Phil Sutter
2017-03-10 17:13 ` [nft PATCH 3/5] exthdr: Implement existence check Phil Sutter
2017-03-10 17:13 ` [nft PATCH 4/5] fib: Support " Phil Sutter
2017-03-10 18:07 ` Pablo Neira Ayuso
2017-03-10 21:41 ` Phil Sutter
2017-03-10 17:13 ` [nft PATCH 5/5] doc: Document boolean type and applications Phil Sutter
2017-03-10 18:14 ` Pablo Neira Ayuso
2017-03-10 18:02 ` [nft PATCH 0/5] Introduce boolean type and existence checks Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20170310171353.28868-1-phil@nwl.cc \
--to=phil@nwl.cc \
--cc=netfilter-devel@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).