netfilter: flow table support for IPv4

Browse source

This patch adds the IPv4 flow table type, that implements the datapath
flow table to forward IPv4 traffic. Rationale is:

1) Look up for the packet in the flow table, from the ingress hook.
2) If there's a hit, decrement ttl and pass it on to the neighbour layer
   for transmission.
3) If there's a miss, packet is passed up to the classic forwarding
   path.

This patch also supports layer 3 source and destination NAT.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2018-01-07 01:04:15 +01:00

parent ac2a66665e

commit 97add9f0d6

3 changed files with 294 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

8

net/ipv4/netfilter/Kconfig

View file

3

net/ipv4/netfilter/Makefile

View file

283

net/ipv4/netfilter/nf_flow_table_ipv4.c

View file