Searched refs:flowtable (Results 1 – 8 of 8) sorted by relevance
| /linux-6.6.21/Documentation/networking/ |
| D | nf_flowtable.rst | 4 Netfilter's flowtable infrastructure
7 This documentation describes the Netfilter flowtable infrastructure which allows
8 you to define a fastpath through the flowtable datapath. This infrastructure
9 also provides hardware offload support. The flowtable supports for the layer 3
17 flowtable through your ruleset. The flowtable infrastructure provides a rule
18 action that allows you to specify when to add a flow to the flowtable.
20 A packet that finds a matching entry in the flowtable (ie. flowtable hit) is
24 there is no matching entry in the flowtable (ie. flowtable miss), the packet
27 The flowtable uses a resizable hashtable. Lookups are based on the following
32 The 'flow add' action allows you to populate the flowtable, the user selectively
[all …]
|
| /linux-6.6.21/net/netfilter/ |
| D | nf_flow_table_offload.c | 23 struct nf_flowtable *flowtable; member
736 const struct nf_flowtable *flowtable = offload->flowtable; in nf_flow_offload_rule_alloc() local
765 if (flowtable->type->action(net, flow, dir, flow_rule) < 0) in nf_flow_offload_rule_alloc()
805 struct net *net = read_pnet(&offload->flowtable->net); in nf_flow_offload_alloc()
835 static int nf_flow_offload_tuple(struct nf_flowtable *flowtable, in nf_flow_offload_tuple() argument
854 down_read(&flowtable->flow_block_lock); in nf_flow_offload_tuple()
863 up_read(&flowtable->flow_block_lock); in nf_flow_offload_tuple()
875 return nf_flow_offload_tuple(offload->flowtable, offload->flow, in flow_offload_tuple_add()
877 offload->flowtable->priority, in flow_offload_tuple_add()
879 &offload->flowtable->flow_block.cb_list); in flow_offload_tuple_add()
[all …]
|
| D | nft_flow_offload.c | 19 struct nft_flowtable *flowtable; member
96 unsigned char *ha, struct nf_flowtable *flowtable) in nft_dev_path_info() argument
165 if (nf_flowtable_hw_offload(flowtable) && in nft_dev_path_info()
296 struct nf_flowtable *flowtable = &priv->flowtable->data; in nft_flow_offload_eval() local
350 if (nft_flow_route(pkt, ct, &route, dir, priv->flowtable) < 0) in nft_flow_offload_eval()
364 ret = flow_offload_add(flowtable, flow); in nft_flow_offload_eval()
406 struct nft_flowtable *flowtable; in nft_flow_offload_init() local
411 flowtable = nft_flowtable_lookup(ctx->table, tb[NFTA_FLOW_TABLE_NAME], in nft_flow_offload_init()
413 if (IS_ERR(flowtable)) in nft_flow_offload_init()
414 return PTR_ERR(flowtable); in nft_flow_offload_init()
[all …]
|
| D | nf_flow_table_core.c | 382 void (*iter)(struct nf_flowtable *flowtable, in nf_flow_table_iterate() argument
545 int nf_flow_table_init(struct nf_flowtable *flowtable) in nf_flow_table_init() argument
549 INIT_DELAYED_WORK(&flowtable->gc_work, nf_flow_offload_work_gc); in nf_flow_table_init()
550 flow_block_init(&flowtable->flow_block); in nf_flow_table_init()
551 init_rwsem(&flowtable->flow_block_lock); in nf_flow_table_init()
553 err = rhashtable_init(&flowtable->rhashtable, in nf_flow_table_init()
559 &flowtable->gc_work, HZ); in nf_flow_table_init()
562 list_add(&flowtable->list, &flowtables); in nf_flow_table_init()
585 void nf_flow_table_gc_cleanup(struct nf_flowtable *flowtable, in nf_flow_table_gc_cleanup() argument
588 nf_flow_table_iterate(flowtable, nf_flow_table_do_cleanup, dev); in nf_flow_table_gc_cleanup()
[all …]
|
| D | nf_tables_api.c | 691 struct nft_flowtable *flowtable) in nft_trans_flowtable_add() argument
701 nft_activate_next(ctx->net, flowtable); in nft_trans_flowtable_add()
704 nft_trans_flowtable(trans) = flowtable; in nft_trans_flowtable_add()
711 struct nft_flowtable *flowtable) in nft_delflowtable() argument
715 trans = nft_trans_flowtable_add(ctx, NFT_MSG_DELFLOWTABLE, flowtable); in nft_delflowtable()
719 nft_deactivate_next(ctx->net, flowtable); in nft_delflowtable()
1433 struct nft_flowtable *flowtable, *nft; in nft_flush_table() local
1465 list_for_each_entry_safe(flowtable, nft, &ctx->table->flowtables, list) { in nft_flush_table()
1466 if (!nft_is_active_next(ctx->net, flowtable)) in nft_flush_table()
1469 err = nft_delflowtable(ctx, flowtable); in nft_flush_table()
[all …]
|
| /linux-6.6.21/include/net/netfilter/ |
| D | nf_flow_table.h | 88 static inline bool nf_flowtable_hw_offload(struct nf_flowtable *flowtable) in nf_flowtable_hw_offload() argument
90 return flowtable->flags & NF_FLOWTABLE_HW_OFFLOAD; in nf_flowtable_hw_offload()
287 void nf_flow_table_gc_cleanup(struct nf_flowtable *flowtable,
315 void nf_flow_offload_add(struct nf_flowtable *flowtable,
317 void nf_flow_offload_del(struct nf_flowtable *flowtable,
319 void nf_flow_offload_stats(struct nf_flowtable *flowtable,
322 void nf_flow_table_offload_flush(struct nf_flowtable *flowtable);
323 void nf_flow_table_offload_flush_cleanup(struct nf_flowtable *flowtable);
325 int nf_flow_table_offload_setup(struct nf_flowtable *flowtable,
|
| D | nf_tables.h | 1392 struct nft_flowtable *flowtable,
1665 struct nft_flowtable *flowtable; member
1672 (((struct nft_trans_flowtable *)trans->data)->flowtable)
|
| /linux-6.6.21/tools/testing/selftests/netfilter/ |
| D | nft_flowtable.sh | 161 flowtable f1 {
|