Eyal Birger ccc007e4a7 net: sched: add em_ipt ematch for calling xtables matches ...

The commit a new tc ematch for using netfilter xtable matches.

This allows early classification as well as mirroning/redirecting traffic
based on logic implemented in netfilter extensions.

Current supported use case is classification based on the incoming IPSec
state used during decpsulation using the 'policy' iptables extension
(xt_policy).

The module dynamically fetches the netfilter match module and calls
it using a fake xt_action_param structure based on validated userspace
provided parameters.

As the xt_policy match does not access skb->data, no skb modifications
are needed on match.

Signed-off-by: Eyal Birger <[email protected]>
Signed-off-by: David S. Miller <[email protected]>

2018-02-21 13:15:33 -05:00

..

tc_em_cmp.h

…

tc_em_ipt.h

net: sched: add em_ipt ematch for calling xtables matches

2018-02-21 13:15:33 -05:00

tc_em_meta.h

…

tc_em_nbyte.h

…

tc_em_text.h

…