From: Pablo Neira Ayuso <pablo@netfilter.org>
To: netfilter-devel@vger.kernel.org
Cc: davem@davemloft.net, netdev@vger.kernel.org, kuba@kernel.org
Subject: [PATCH 0/6] Netfilter/IPVS updates for net-next
Date: Mon, 12 Oct 2020 03:38:13 +0200 [thread overview]
Message-ID: <20201012013819.23128-1-pablo@netfilter.org> (raw)
Hi,
The following patchset contains Netfilter/IPVS updates for net-next:
1) Inspect the reply packets coming from DR/TUN and refresh connection
state and timeout, from longguang yue and Julian Anastasov.
2) Series to add support for the inet ingress chain type in nf_tables.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Thank you.
----------------------------------------------------------------
The following changes since commit bc081a693a56061f68f736c5d596134ee3c87689:
Merge branch 'Offload-tc-vlan-mangle-to-mscc_ocelot-switch' (2020-10-11 11:19:25 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git HEAD
for you to fetch changes up to 793d5d61242695142460ce74f124281e0681fbc7:
netfilter: flowtable: reduce calls to pskb_may_pull() (2020-10-12 01:58:10 +0200)
----------------------------------------------------------------
Pablo Neira Ayuso (5):
netfilter: add nf_static_key_{inc,dec}
netfilter: add nf_ingress_hook() helper function
netfilter: add inet ingress support
netfilter: nf_tables: add inet ingress support
netfilter: flowtable: reduce calls to pskb_may_pull()
longguang.yue (1):
ipvs: inspect reply packets from DR/TUN real servers
include/net/netfilter/nf_tables.h | 6 ++
include/net/netfilter/nf_tables_ipv4.h | 33 +++++++++
include/net/netfilter/nf_tables_ipv6.h | 46 ++++++++++++
include/uapi/linux/netfilter.h | 1 +
net/netfilter/core.c | 129 ++++++++++++++++++++++++++-------
net/netfilter/ipvs/ip_vs_conn.c | 18 ++++-
net/netfilter/ipvs/ip_vs_core.c | 19 ++---
net/netfilter/nf_flow_table_core.c | 12 +--
net/netfilter/nf_flow_table_ip.c | 45 +++++++-----
net/netfilter/nf_tables_api.c | 14 ++--
net/netfilter/nft_chain_filter.c | 35 ++++++++-
11 files changed, 282 insertions(+), 76 deletions(-)
next reply other threads:[~2020-10-12 1:38 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-10-12 1:38 Pablo Neira Ayuso [this message]
2020-10-12 1:38 ` [PATCH 1/6] ipvs: inspect reply packets from DR/TUN real servers Pablo Neira Ayuso
2020-10-12 1:38 ` [PATCH 2/6] netfilter: add nf_static_key_{inc,dec} Pablo Neira Ayuso
2020-10-12 1:38 ` [PATCH 3/6] netfilter: add nf_ingress_hook() helper function Pablo Neira Ayuso
2020-10-12 1:38 ` [PATCH 4/6] netfilter: add inet ingress support Pablo Neira Ayuso
2020-10-12 1:38 ` [PATCH 5/6] netfilter: nf_tables: " Pablo Neira Ayuso
2020-10-12 1:38 ` [PATCH 6/6] netfilter: flowtable: reduce calls to pskb_may_pull() Pablo Neira Ayuso
2020-10-12 23:14 ` [PATCH 0/6] Netfilter/IPVS updates for net-next Jakub Kicinski
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20201012013819.23128-1-pablo@netfilter.org \
--to=pablo@netfilter.org \
--cc=davem@davemloft.net \
--cc=kuba@kernel.org \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).