This is the counterpart of kernel series: nftables: Set implementation for arbitrary concatenation of ranges and it has a UAPI dependency on kernel patches: [PATCH nf-next v3 2/9] netfilter: nf_tables: add NFTA_SET_ELEM_KEY_END attribute [PATCH nf-next v3 3/9] netfilter: nf_tables: Support for sets with multiple ranged fields Patch 1/3 adds support for the NFTA_SET_DESC_CONCAT netlink attributes: they specify the length of fields within concatenations, and they are needed by set implementations in the kernel to figure out where single fields start and stop. Patch 2/3 introduces new key data semantics needed to represent arbitrary concatenation of ranges, as well as required changes in lexer and expression evaluation. Closing element of concatenated ranges is now expressed by a separate key, as proposed by Pablo. Patch 3/3 adds test cases for operations on the new set type. v3: Changes listed in messages for all patches v2: Changes listed in messages for 2/3 and 3/3 Stefano Brivio (3): src: Add support for NFTNL_SET_DESC_CONCAT src: Add support for concatenated set ranges tests: Introduce test for set with concatenated ranges include/expression.h | 3 + include/rule.h | 11 +- src/evaluate.c | 19 +- src/mnl.c | 7 + src/netlink.c | 120 ++++++++++--- src/parser_bison.y | 17 +- src/rule.c | 15 +- src/segtree.c | 117 +++++++++++++ .../testcases/sets/0042concatenated_ranges_0 | 162 ++++++++++++++++++ 9 files changed, 428 insertions(+), 43 deletions(-) create mode 100755 tests/shell/testcases/sets/0042concatenated_ranges_0 -- 2.24.1
