diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-08-21 11:12:58 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-08-27 23:51:03 +0200 |
| commit | a937a5dc02db3c919431718c0030c54c2eaafd73 (patch) | |
| tree | 595b58bec9707f5c7c59258fbbc16a40f7bbc04d /Makefile.am | |
| parent | ffc40b38d58d3f754d20c0e586981b2f442a247e (diff) | |
src: add tunnel statement and expression support
This patch allows you to attach tunnel metadata through the tunnel
statement.
The following example shows how to redirect traffic to the erspan0
tunnel device which will take the tunnel configuration that is
specified by the ruleset.
table netdev x {
tunnel y {
id 10
ip saddr 192.168.2.10
ip daddr 192.168.2.11
sport 10
dport 20
ttl 10
erspan {
version 1
index 2
}
}
chain x {
type filter hook ingress device veth0 priority 0;
ip daddr 10.141.10.123 tunnel name y fwd to erspan0
}
}
This patch also allows to match on tunnel metadata via tunnel expression.
Joint work with Fernando.
Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'Makefile.am')
| -rw-r--r-- | Makefile.am | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/Makefile.am b/Makefile.am index e292d3b9..51dadbe6 100644 --- a/Makefile.am +++ b/Makefile.am @@ -100,6 +100,7 @@ noinst_HEADERS = \ include/statement.h \ include/tcpopt.h \ include/trace.h \ + include/tunnel.h \ include/utils.h \ include/xfrm.h \ include/xt.h \ @@ -243,6 +244,7 @@ src_libnftables_la_SOURCES = \ src/socket.c \ src/statement.c \ src/tcpopt.c \ + src/tunnel.c \ src/utils.c \ src/xfrm.c \ $(NULL) |