netfilter: nf_tables: variable sized set element keys / data

Browse source

This patch changes sets to support variable sized set element keys / data
up to 64 bytes each by using variable sized set extensions. This allows
to use concatenations with bigger data items suchs as IPv6 addresses.

As a side effect, small keys/data now don't require the full 16 bytes
of struct nft_data anymore but just the space they need.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Patrick McHardy 2015-04-11 02:27:39 +01:00 • committed by Pablo Neira Ayuso

parent d0a11fc3dc

commit 7d7402642e

5 changed files with 23 additions and 19 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

5

include/net/netfilter/nf_tables.h

View file

3

include/uapi/linux/netfilter/nf_tables.h

View file