diff options
| author | Laura Garcia Liebana <nevola@gmail.com> | 2017-02-23 12:11:08 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-03-06 17:59:14 +0100 |
| commit | 1ebd1e974e95ea90389064265523840968f50859 (patch) | |
| tree | 0e0874c800ff2c3961e709441e2c6632cfc6deb4 /include/libnftnl/expr.h | |
| parent | 059b9bf6fb31b971f79f83a01d9794288ab88a6e (diff) | |
expr: hash: support of symmetric hash
This patch provides symmetric hash support according to source
ip address and port, and destination ip address and port.
The new attribute NFTA_HASH_TYPE has been included to support
different types of hashing functions. Currently supported
NFT_HASH_JENKINS through jhash and NFT_HASH_SYM through symhash.
The main difference between both types are:
- jhash requires an expression with sreg, symhash doesn't.
- symhash supports modulus and offset, but not seed.
Examples:
nft add rule ip nat prerouting ct mark set jhash ip saddr mod 2
nft add rule ip nat prerouting ct mark set symhash mod 2
Signed-off-by: Laura Garcia Liebana <laura.garcia@zevenet.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/libnftnl/expr.h')
| -rw-r--r-- | include/libnftnl/expr.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/libnftnl/expr.h b/include/libnftnl/expr.h index 7d327ea..b06d1b1 100644 --- a/include/libnftnl/expr.h +++ b/include/libnftnl/expr.h @@ -229,6 +229,7 @@ enum { NFTNL_EXPR_HASH_MODULUS, NFTNL_EXPR_HASH_SEED, NFTNL_EXPR_HASH_OFFSET, + NFTNL_EXPR_HASH_TYPE, }; enum { |