Re: [PATCH nf] netfilter: nft_payload: fix check the match len for offload to hw

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Oct 24, 2019 at 03:52:45PM +0800, wenxu@xxxxxxxxx wrote:
> From: wenxu <wenxu@xxxxxxxxx>
> 
> Offload paylaod rule just according to the base and offset. it should
> check the len of the match.
> 
> For payoad vlan example
> nft --debug=netlink add rule firewall zones vlan id 100
> .....
> [ payload load 2b @ link header + 0 => reg 1 ]
> 
> load 2byte base on ll header and offset 0.
> 
> Also can avoid unsupported raw payload match

LGTM. Applied to nf, thanks.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux