diff options
| author | wenxu <wenxu@ucloud.cn> | 2019-01-24 22:23:49 +0800 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2019-01-28 07:36:22 +0100 |
| commit | 512795a673f999fb04b84dbbbe41174e9c581430 (patch) | |
| tree | 22becd9b9be0890253977be3709a87be73d8ac47 /doc/primary-expression.txt | |
| parent | 88ba0c92754d89c71dab11f701839522a5ddb5a9 (diff) | |
meta: add iifkind and oifkind support
This can be used to match the kind type of iif or oif
interface of the packet. Example:
add rule inet raw prerouting meta iifkind "vrf" accept
Signed-off-by: wenxu <wenxu@ucloud.cn>
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'doc/primary-expression.txt')
| -rw-r--r-- | doc/primary-expression.txt | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/doc/primary-expression.txt b/doc/primary-expression.txt index a964ce92..d819b24c 100644 --- a/doc/primary-expression.txt +++ b/doc/primary-expression.txt @@ -4,7 +4,7 @@ META EXPRESSIONS *meta* {length | nfproto | l4proto | protocol | priority} [meta] {mark | iif | iifname | iiftype | oif | oifname | oiftype | skuid | skgid | nftrace | rtclassid | ibrname | obrname | pkttype | cpu -| iifgroup | oifgroup | cgroup | random | ipsec} +| iifgroup | oifgroup | cgroup | random | ipsec | iifkind | oifkind} A meta expression refers to meta data associated with a packet. @@ -114,6 +114,10 @@ integer (32 bit) |ipsec| boolean| boolean (1 bit) +|iifkind| +Input interface kind | +|oifkind| +Output interface kind |==================== .Meta expression specific types @@ -137,6 +141,8 @@ Device group (32 bit number). Can be specified numerically or as symbolic name d |pkt_type| Packet type: *host* (addressed to local host), *broadcast* (to all), *multicast* (to group), *other* (addressed to another host). +|ifkind| +Interface kind (16 byte string). Does not have to exist. |============================= .Using meta expressions |