[PATCH nft 0/2] gre and ipip tunnel support

[Pablo Neira Ayuso <pablo@netfilter.org>]

Hi,

This patchset adds support for gre and ipip tunnels, including support
for matching inner header fields.

First patch is larger because it adds the NFT_META_L4PROTO dependency
logic to restrict matches to IPPROTO_GRE. The second patch is
significantly smaller, because previous patches adding VxLAN and GRE
already provided the necessary infrastructure to add IPIP with minimal
updates.

No tests and documentation updates in this v1.

Pablo Neira Ayuso (2):
  src: add gre support
  src: add ipip support

 include/linux/netfilter/nf_tables.h |  1 +
 include/payload.h                   |  2 ++
 include/proto.h                     | 15 ++++++++
 src/evaluate.c                      | 40 ++++++++++++++++------
 src/netlink_delinearize.c           | 45 ++++++++++++++++++++++++
 src/parser_bison.y                  | 53 +++++++++++++++++++++++++++--
 src/payload.c                       | 47 +++++++++++++++++++++++++
 src/proto.c                         | 45 ++++++++++++++++++++++++
 src/scanner.l                       |  3 ++
 9 files changed, 237 insertions(+), 14 deletions(-)

--
2.30.2