]> git.ipfire.org Git - thirdparty/iptables.git/commit
nft: Optimize class-based IP prefix matches
authorPhil Sutter <phil@nwl.cc>
Fri, 2 Oct 2020 07:44:38 +0000 (09:44 +0200)
committerPhil Sutter <phil@nwl.cc>
Wed, 4 Nov 2020 14:39:23 +0000 (15:39 +0100)
commit323259001d617ae359430a03ee3d3e7f107684e0
treebb45b44cc1208b2e5607bdcd11d447db8e119cad
parent06a2eb727b0f350fcfea95839fc8c4674763a35d
nft: Optimize class-based IP prefix matches

Payload expression works on byte-boundaries, leverage this with suitable
prefix lengths.

Signed-off-by: Phil Sutter <phil@nwl.cc>
iptables/nft-arp.c
iptables/nft-ipv4.c
iptables/nft-ipv6.c
iptables/nft-shared.c
iptables/nft-shared.h