* [PATCH nft] meta: add ibrpvid and ibrvproto support
@ 2019-08-14 6:59 wenxu
2019-08-14 7:47 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: wenxu @ 2019-08-14 6:59 UTC (permalink / raw)
To: pablo, fw; +Cc: netfilter-devel
From: wenxu <wenxu@ucloud.cn>
This can match the the pvid and vlan_proto of ibr
nft add rule bridge firewall zones meta ibrvproto 0x8100
nft add rule bridge firewall zones meta ibrpvid 100
Signed-off-by: wenxu <wenxu@ucloud.cn>
---
src/meta.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/src/meta.c b/src/meta.c
index 5901c99..d45d757 100644
--- a/src/meta.c
+++ b/src/meta.c
@@ -442,6 +442,12 @@ const struct meta_template meta_templates[] = {
[NFT_META_OIFKIND] = META_TEMPLATE("oifkind", &ifname_type,
IFNAMSIZ * BITS_PER_BYTE,
BYTEORDER_HOST_ENDIAN),
+ [NFT_META_BRI_IIFPVID] = META_TEMPLATE("ibrpvid", &integer_type,
+ 2 * BITS_PER_BYTE,
+ BYTEORDER_HOST_ENDIAN),
+ [NFT_META_BRI_IIFVPROTO] = META_TEMPLATE("ibrvproto", &integer_type,
+ 2 * BITS_PER_BYTE,
+ BYTEORDER_HOST_ENDIAN),
};
static bool meta_key_is_unqualified(enum nft_meta_keys key)
--
2.15.1
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCH nft] meta: add ibrpvid and ibrvproto support
2019-08-14 6:59 [PATCH nft] meta: add ibrpvid and ibrvproto support wenxu
@ 2019-08-14 7:47 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2019-08-14 7:47 UTC (permalink / raw)
To: wenxu; +Cc: fw, netfilter-devel
On Wed, Aug 14, 2019 at 02:59:36PM +0800, wenxu@ucloud.cn wrote:
> From: wenxu <wenxu@ucloud.cn>
>
> This can match the the pvid and vlan_proto of ibr
This allows you to match the bridge pvid and vlan protocol, for
instance:
> nft add rule bridge firewall zones meta ibrvproto 0x8100
> nft add rule bridge firewall zones meta ibrpvid 100
>
> Signed-off-by: wenxu <wenxu@ucloud.cn>
> ---
> src/meta.c | 6 ++++++
tests/py update is missing. Please update tests/py -j (json) too.
> 1 file changed, 6 insertions(+)
>
> diff --git a/src/meta.c b/src/meta.c
> index 5901c99..d45d757 100644
> --- a/src/meta.c
> +++ b/src/meta.c
> @@ -442,6 +442,12 @@ const struct meta_template meta_templates[] = {
> [NFT_META_OIFKIND] = META_TEMPLATE("oifkind", &ifname_type,
> IFNAMSIZ * BITS_PER_BYTE,
> BYTEORDER_HOST_ENDIAN),
> + [NFT_META_BRI_IIFPVID] = META_TEMPLATE("ibrpvid", &integer_type,
> + 2 * BITS_PER_BYTE,
> + BYTEORDER_HOST_ENDIAN),
> + [NFT_META_BRI_IIFVPROTO] = META_TEMPLATE("ibrvproto", &integer_type,
> + 2 * BITS_PER_BYTE,
> + BYTEORDER_HOST_ENDIAN),
> };
>
> static bool meta_key_is_unqualified(enum nft_meta_keys key)
> --
> 2.15.1
>
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-08-14 7:47 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-08-14 6:59 [PATCH nft] meta: add ibrpvid and ibrvproto support wenxu
2019-08-14 7:47 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).