Hi, This patchset adds support for gre and ipip tunnels, including support for matching inner header fields. First patch is larger because it adds the NFT_META_L4PROTO dependency logic to restrict matches to IPPROTO_GRE. The second patch is significantly smaller, because previous patches adding VxLAN and GRE already provided the necessary infrastructure to add IPIP with minimal updates. No tests and documentation updates in this v1. Pablo Neira Ayuso (2): src: add gre support src: add ipip support include/linux/netfilter/nf_tables.h | 1 + include/payload.h | 2 ++ include/proto.h | 15 ++++++++ src/evaluate.c | 40 ++++++++++++++++------ src/netlink_delinearize.c | 45 ++++++++++++++++++++++++ src/parser_bison.y | 53 +++++++++++++++++++++++++++-- src/payload.c | 47 +++++++++++++++++++++++++ src/proto.c | 45 ++++++++++++++++++++++++ src/scanner.l | 3 ++ 9 files changed, 237 insertions(+), 14 deletions(-) -- 2.30.2