summaryrefslogtreecommitdiffstats
path: root/doc/nft.txt
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2022-08-29 13:46:21 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2022-08-30 13:09:01 +0200
commit187c6d01d35722618c2711bbc49262c286472c8f (patch)
treeb807d4e649ab7e677a400b99440bd2c5592f766e /doc/nft.txt
parent9a20f17a7a82ce5ba47047e6c3d2fc921cc1087d (diff)
optimize: expand implicit set element when merging into concatenation
Generalize the existing code to deal with implicit sets. When merging a ruleset like the following: udp dport 128 iifname "foo" #1 udp dport { 67, 123 } iifname "bar" #2 into a concatenation of statements, the following expansion need to be done for rule #2: 67 . "bar" 123 . "bar" The expansion logic consists of cloning the existing concatenation being built and then append each element in the implicit set. A list of ongoing concatenations being built is maintained, so further expansions are also supported. Extend test to cover for this use-case. Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1628 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'doc/nft.txt')
0 files changed, 0 insertions, 0 deletions