Hi, This patchset simplifies the nf_tables infrastructure by removing the family abstraction. As a side effect, nf_tables netns support also consumes 48 bytes less in x86_64 and its logic becomes simpler. Last patch consolidate all filter chain definitions. Note that this patchset depends on removal of the raw socket check [1]. Compiled tested only, will send a new iteration after a more accurate review and test. [1] http://patchwork.ozlabs.org/patch/854171/ Pablo Neira Ayuso (8): netfilter: nf_tables: remove nhooks field from struct nft_af_info netfilter: nf_tables: remove flag field from struct nft_af_info netfilter: nf_tables: no need for struct nft_af_info to enable/disable table netfilter: nf_tables: remove struct nft_af_info parameter in nf_tables_chain_type_lookup() netfilter: nf_tables: add single table list for all families netfilter: nf_tables: get rid of pernet families netfilter: nf_tables: get rid of struct nft_af_info abstraction netfilter: nf_tables: consolidate filter chain definitions include/net/netfilter/nf_tables.h | 40 +- include/net/netns/nftables.h | 7 +- net/bridge/netfilter/Makefile | 1 - net/bridge/netfilter/nf_tables_bridge.c | 129 ------ net/ipv4/netfilter/Makefile | 2 - net/ipv4/netfilter/nf_tables_arp.c | 49 +-- net/ipv4/netfilter/nf_tables_ipv4.c | 112 ------ net/ipv6/netfilter/Makefile | 1 - net/ipv6/netfilter/nf_tables_ipv6.c | 110 ------ net/netfilter/Makefile | 5 +- net/netfilter/nf_tables_api.c | 680 ++++++++++++-------------------- net/netfilter/nf_tables_inet.c | 141 ------- net/netfilter/nf_tables_netdev.c | 186 --------- net/netfilter/nft_chain_filter.c | 294 ++++++++++++++ 14 files changed, 565 insertions(+), 1192 deletions(-) delete mode 100644 net/bridge/netfilter/nf_tables_bridge.c delete mode 100644 net/ipv4/netfilter/nf_tables_ipv4.c delete mode 100644 net/ipv6/netfilter/nf_tables_ipv6.c delete mode 100644 net/netfilter/nf_tables_inet.c delete mode 100644 net/netfilter/nf_tables_netdev.c create mode 100644 net/netfilter/nft_chain_filter.c -- 2.11.0 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
