wenxu
9a32669fec
netfilter: nf_tables_offload: support indr block call
nftable support indr-block call. It makes nftable an offload vlan
and tunnel device.
nft add table netdev firewall
nft add chain netdev firewall aclout { type filter hook ingress offload device mlx_pf0vf0 priority - 300 \; }
nft add rule netdev firewall aclout ip daddr 10.0.0.1 fwd to vlan0
nft add chain netdev firewall aclin { type filter hook ingress device vlan0 priority - 300 \; }
nft add rule netdev firewall aclin ip daddr 10.0.0.7 fwd to mlx_pf0vf0
Signed-off-by: wenxu <wenxu@ucloud.cn>
Acked-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-08-08 18:44:30 -07:00
..
2019-07-09 12:34:26 -07:00
2019-08-03 07:02:01 -07:00
2019-07-08 20:57:08 -07:00
2019-08-01 15:01:35 +02:00
2019-07-19 17:19:24 -07:00
2019-07-08 19:19:37 -07:00
2019-08-08 18:22:29 -07:00
2019-07-09 09:47:22 -07:00
2019-07-13 16:08:36 -07:00
2019-08-08 18:44:30 -07:00
2019-07-09 12:34:26 -07:00
2019-08-01 11:44:48 -04:00
2019-07-29 21:12:35 -04:00
2019-07-22 13:51:20 -06:00
2019-07-28 10:00:06 -07:00
2019-07-30 21:49:06 -04:00
2019-08-06 18:44:57 -07:00
2019-07-15 19:04:27 -07:00
2019-07-31 08:14:12 +02:00
2019-07-21 11:43:43 -07:00