This series ultimately adds among match support to ebtables-nft. This implementation merely shares the user interface with legacy one, internally the code is distinct: libebt_among.c does not make use of the wormhash data structure but a much simpler one for "temporary" storage of data until being converted into an anonymous set and associated lookup expression. Patches 1 to 4 are basically unrelated fallout with misc fixes or minor code improvements. Patches 5 and 6 add core infrastructure to cache existing sets and create new ones. Patches 7 to 10 deal with the need for nft_handle access in all places converting extension to expression and vice-versa, split to improve readability as far as possible. The remaining patches add some more (glue-) code and finally the actual among match implementation. Phil Sutter (14): nft: Fix typo in nft_parse_limit() error message nft: Get rid of NFT_COMPAT_EXPR_MAX define nft: Keep nft_handle pointer in nft_xt_ctx nft: Eliminate pointless calls to nft_family_ops_lookup() nft: Fetch sets when updating rule cache nft: Support NFT_COMPAT_SET_ADD nft: family_ops: Pass nft_handle to 'add' callback nft: family_ops: Pass nft_handle to 'rule_find' callback nft: family_ops: Pass nft_handle to 'print_rule' callback nft: family_ops: Pass nft_handle to 'rule_to_cs' callback nft: Bore up nft_parse_payload() nft: Embed rule's table name in nft_xt_ctx nft: Support parsing lookup expression nft: bridge: Rudimental among extension support extensions/libebt_among.c | 278 ++++++++++++++++++++++++++ extensions/libebt_among.t | 16 ++ iptables/ebtables-nft.8 | 66 ++++--- iptables/nft-arp.c | 14 +- iptables/nft-bridge.c | 260 ++++++++++++++++++++++++- iptables/nft-bridge.h | 21 ++ iptables/nft-ipv4.c | 10 +- iptables/nft-ipv6.c | 10 +- iptables/nft-shared.c | 72 +++---- iptables/nft-shared.h | 26 ++- iptables/nft.c | 390 ++++++++++++++++++++++++++++++++----- iptables/nft.h | 13 +- iptables/xtables-eb.c | 1 + iptables/xtables-monitor.c | 17 +- iptables/xtables-save.c | 3 + 15 files changed, 1039 insertions(+), 158 deletions(-) create mode 100644 extensions/libebt_among.c create mode 100644 extensions/libebt_among.t -- 2.22.0
