On 7 November 2017 at 14:09, Tomas Mudrunka <mudrunka@xxxxxxxxx> wrote:
> Hello,
> i've figured it's possible to simplify my rules by using maps and sets
> instead of using individual rules, but i need to account traffic for each
> address in the map separately. Maybe this can be implemented using flags in
> map/set, so i will be able to enable it like this:
>
> map prometheus {
> type ipv4_addr : classid;
> flags interval, counter;
> elements = {
> 1.1.1.2 : 2:2222 counter packets 10 bytes 5120,
> 1.1.1.3 : 3:3333 counter packets 3 bytes 489
> }
> }
>
> just to make it clear, the same map without counters looks like this right
> now:
>
> map prometheus {
> type ipv4_addr : classid
> flags interval
> elements = {
> 1.1.1.2 : 2:2222,
> 1.1.1.3 : 3:3333
> }
> }
>
>
> Will it be ever possible to have per element counters for maps and sets?
>
you are probably looking for something like this:
https://wiki.nftables.org/wiki-nftables/index.php/Flow_tables
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
