kernel/include/uapi/linux/tc_ematch/tc_em_ipt.h, branch linux-6.19.yHosts the 0x221E linux distro kernel.https://universe.0xinfinity.dev/distro/kernel/atom?h=linux-6.19.y2018-02-21T18:15:33Znet: sched: add em_ipt ematch for calling xtables matches2018-02-21T18:15:33ZEyal Birgereyal.birger@gmail.com2018-02-15T17:42:43Zurn:sha1:ccc007e4a746bb592d3e72106f00241f81d51410
The commit a new tc ematch for using netfilter xtable matches.
This allows early classification as well as mirroning/redirecting traffic
based on logic implemented in netfilter extensions.
Current supported use case is classification based on the incoming IPSec
state used during decpsulation using the 'policy' iptables extension
(xt_policy).
The module dynamically fetches the netfilter match module and calls
it using a fake xt_action_param structure based on validated userspace
provided parameters.
As the xt_policy match does not access skb->data, no skb modifications
are needed on match.
Signed-off-by: Eyal Birger <eyal.birger@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>