Netfilter egress hook, 6th iteration Changes: * Perform netfilter egress classifying before tc egress classifying to achieve reverse order vis-a-vis ingress datapath. * Avoid layering violations by way of new skb->nf_skip_egress flag. * Add egress support to new nfnetlink_hook.c. Link to previous version v5 (posted by Pablo): https://lore.kernel.org/netdev/20210928095538.114207-1-pablo@xxxxxxxxxxxxx/ Link to previous version v4: https://lore.kernel.org/netdev/cover.1611304190.git.lukas@xxxxxxxxx/ Lukas Wunner (3): netfilter: Rename ingress hook include file netfilter: Generalize ingress hook include file netfilter: Introduce egress hook Pablo Neira Ayuso (1): af_packet: Introduce egress hook drivers/net/ifb.c | 3 + include/linux/netdevice.h | 4 + include/linux/netfilter_ingress.h | 58 ------------ include/linux/netfilter_netdev.h | 146 ++++++++++++++++++++++++++++++ include/linux/skbuff.h | 4 + include/uapi/linux/netfilter.h | 1 + net/core/dev.c | 19 +++- net/netfilter/Kconfig | 11 +++ net/netfilter/core.c | 34 ++++++- net/netfilter/nfnetlink_hook.c | 16 +++- net/netfilter/nft_chain_filter.c | 4 +- net/packet/af_packet.c | 35 +++++++ 12 files changed, 265 insertions(+), 70 deletions(-) delete mode 100644 include/linux/netfilter_ingress.h create mode 100644 include/linux/netfilter_netdev.h -- 2.31.1
