From caaba4ed83300450136405706162eeedc43c6417 Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Tue, 20 Aug 2019 11:21:42 +0200 Subject: nft: Introduce NFT_CL_SETS cache level In order to support anonymous sets, introduce an intermediate cache level between NFT_CL_CHAINS and NFT_CL_RULES. Actually chains are not needed to fetch sets, but given that sets are only needed for rules, put it late to not slow down fetching chains. Signed-off-by: Phil Sutter Acked-by: Pablo Neira Ayuso --- iptables/nft-cache.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'iptables/nft-cache.h') diff --git a/iptables/nft-cache.h b/iptables/nft-cache.h index cb7a7688..ed498835 100644 --- a/iptables/nft-cache.h +++ b/iptables/nft-cache.h @@ -13,6 +13,8 @@ int flush_rule_cache(struct nft_handle *h, const char *table, struct nftnl_chain_list * nft_chain_list_get(struct nft_handle *h, const char *table, const char *chain); +struct nftnl_set_list * +nft_set_list_get(struct nft_handle *h, const char *table, const char *set); struct nftnl_table_list *nftnl_table_list_get(struct nft_handle *h); #endif /* _NFT_CACHE_H_ */ -- cgit v1.2.3