[nf-next PATCH 0/2] Support resetting rules' state

[Phil Sutter <phil@nwl.cc>]

In order to "zero" a rule (in the 'iptables -Z' sense), users had to
dump (parts of) the ruleset in stateless form and restore it again after
removing the dumped parts.

Introduce a simpler method to reset any stateful elements of a rule or
all rules of a chain/table/family. Affects both counter and quota
expressions.

Phil Sutter (2):
  netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters
  netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET

 include/net/netfilter/nf_tables.h        |  5 ++-
 include/net/netfilter/nft_fib.h          |  2 +-
 include/net/netfilter/nft_meta.h         |  4 +-
 include/net/netfilter/nft_reject.h       |  3 +-
 include/uapi/linux/netfilter/nf_tables.h |  1 +
 net/ipv4/netfilter/nft_dup_ipv4.c        |  3 +-
 net/ipv6/netfilter/nft_dup_ipv6.c        |  3 +-
 net/netfilter/nf_tables_api.c            | 49 ++++++++++++++++--------
 net/netfilter/nft_bitwise.c              |  6 ++-
 net/netfilter/nft_byteorder.c            |  3 +-
 net/netfilter/nft_cmp.c                  |  9 +++--
 net/netfilter/nft_compat.c               |  9 +++--
 net/netfilter/nft_connlimit.c            |  3 +-
 net/netfilter/nft_counter.c              |  5 ++-
 net/netfilter/nft_ct.c                   |  6 ++-
 net/netfilter/nft_dup_netdev.c           |  3 +-
 net/netfilter/nft_dynset.c               |  7 ++--
 net/netfilter/nft_exthdr.c               |  9 +++--
 net/netfilter/nft_fib.c                  |  2 +-
 net/netfilter/nft_flow_offload.c         |  3 +-
 net/netfilter/nft_fwd_netdev.c           |  6 ++-
 net/netfilter/nft_hash.c                 |  4 +-
 net/netfilter/nft_immediate.c            |  3 +-
 net/netfilter/nft_last.c                 |  3 +-
 net/netfilter/nft_limit.c                |  5 ++-
 net/netfilter/nft_log.c                  |  3 +-
 net/netfilter/nft_lookup.c               |  3 +-
 net/netfilter/nft_masq.c                 |  3 +-
 net/netfilter/nft_meta.c                 |  5 ++-
 net/netfilter/nft_nat.c                  |  3 +-
 net/netfilter/nft_numgen.c               |  6 ++-
 net/netfilter/nft_objref.c               |  6 ++-
 net/netfilter/nft_osf.c                  |  3 +-
 net/netfilter/nft_payload.c              |  6 ++-
 net/netfilter/nft_queue.c                |  6 ++-
 net/netfilter/nft_quota.c                |  5 ++-
 net/netfilter/nft_range.c                |  3 +-
 net/netfilter/nft_redir.c                |  3 +-
 net/netfilter/nft_reject.c               |  3 +-
 net/netfilter/nft_rt.c                   |  2 +-
 net/netfilter/nft_socket.c               |  2 +-
 net/netfilter/nft_synproxy.c             |  3 +-
 net/netfilter/nft_tproxy.c               |  2 +-
 net/netfilter/nft_tunnel.c               |  2 +-
 net/netfilter/nft_xfrm.c                 |  2 +-
 45 files changed, 146 insertions(+), 81 deletions(-)

-- 
2.34.1