On Tue, Nov 07, 2017 at 07:44:13PM +0100, Arturo Borrero Gonzalez wrote:
> On 7 November 2017 at 14:09, Tomas Mudrunka <mudrunka@xxxxxxxxx> wrote:
> > Hello,
> > i've figured it's possible to simplify my rules by using maps and sets
> > instead of using individual rules, but i need to account traffic for each
> > address in the map separately. Maybe this can be implemented using flags in
> > map/set, so i will be able to enable it like this:
> >
> > map prometheus {
> > type ipv4_addr : classid;
> > flags interval, counter;
> > elements = {
> > 1.1.1.2 : 2:2222 counter packets 10 bytes 5120,
> > 1.1.1.3 : 3:3333 counter packets 3 bytes 489
> > }
> > }
> >
> > just to make it clear, the same map without counters looks like this right
> > now:
> >
> > map prometheus {
> > type ipv4_addr : classid
> > flags interval
> > elements = {
> > 1.1.1.2 : 2:2222,
> > 1.1.1.3 : 3:3333
> > }
> > }
> >
> >
> > Will it be ever possible to have per element counters for maps and sets?
> >
>
> you are probably looking for something like this:
> https://wiki.nftables.org/wiki-nftables/index.php/Flow_tables
This looks like a different usecase we don't support yet, that doesn't
fit into flow tables.
There's a ticket in bugzilla asking for something like this, we plan
to add support for this indeed.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
