wenxu
9a32669fec
netfilter: nf_tables_offload: support indr block call
nftable support indr-block call. It makes nftable an offload vlan
and tunnel device.
nft add table netdev firewall
nft add chain netdev firewall aclout { type filter hook ingress offload device mlx_pf0vf0 priority - 300 \; }
nft add rule netdev firewall aclout ip daddr 10.0.0.1 fwd to vlan0
nft add chain netdev firewall aclin { type filter hook ingress device vlan0 priority - 300 \; }
nft add rule netdev firewall aclin ip daddr 10.0.0.7 fwd to mlx_pf0vf0
Signed-off-by: wenxu <wenxu@ucloud.cn>
Acked-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2019-08-08 18:44:30 -07:00
..
2019-06-17 16:36:30 +02:00
2019-06-19 17:09:55 +02:00
2019-05-30 14:18:18 -07:00
2019-05-30 14:18:18 -07:00
2019-07-16 13:16:59 +02:00
2019-04-30 14:19:55 +02:00
2019-07-16 13:17:01 +02:00
2019-06-17 16:35:30 +02:00
2019-05-31 18:02:42 +02:00
2019-07-04 02:29:49 +02:00
2019-07-05 21:34:23 +02:00
2019-08-08 18:44:30 -07:00
2019-07-19 21:27:45 -07:00
2019-05-21 16:10:38 +02:00
2019-07-05 21:34:47 +02:00