nftables - nft command line tool

	Commit message (Collapse)	Author	Age	Files	Lines
*	xfrm: spi is big-endian	Florian Westphal	2020-01-14	1	-1/+1
\| \| \| \| \| \| \|	the kernel stores spi in a __be32, so fix up the byteorder annotation. Signed-off-by: Florian Westphal <fw@strlen.de> Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
*	xfrm: add parse and build userdata interface	Pablo Neira Ayuso	2019-12-17	1	-0/+61
\| \| \| \| \| \| \|	Add support for meta userdata area. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Florian Westphal <fw@strlen.de>
*	src: expr: remove expr_ops from struct expr	Florian Westphal	2019-02-08	1	-2/+2
\| \| \| \| \| \| \| \|	size of struct expr changes from 144 to 128 bytes on x86_64. This doesn't look like much, but large rulesets can have tens of thousands of expressions (each set element is represented by an expression). Signed-off-by: Florian Westphal <fw@strlen.de>
*	src: add ipsec (xfrm) expression	Máté Eckl	2018-09-21	1	-0/+120
	This allows matching on ipsec tunnel/beet addresses in xfrm state associated with a packet, ipsec request id and the SPI. Examples: ipsec in ip saddr 192.168.1.0/24 ipsec out ip6 daddr @endpoints ipsec in spi 1-65536 Joint work with Florian Westphal. Cc: Máté Eckl <ecklm94@gmail.com> Signed-off-by: Florian Westphal <fw@strlen.de>