]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: flowtable: allow unidirectional rules
authorVlad Buslov <vladbu@nvidia.com>
Wed, 1 Feb 2023 16:30:56 +0000 (17:30 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 10 Jan 2024 16:10:34 +0000 (17:10 +0100)
commitc29a7656f8a2a2386ce495892aff3d4b26304667
tree41bb63d8dbdbc5dda9fa4151ee4990fca80e8d5e
parente681f711e9e8ee0d70151711364cbff5394a8660
netfilter: flowtable: allow unidirectional rules

[ Upstream commit 8f84780b84d645d6e35467f4a6f3236b20d7f4b2 ]

Modify flow table offload to support unidirectional connections by
extending enum nf_flow_flags with new "NF_FLOW_HW_BIDIRECTIONAL" flag. Only
offload reply direction when the flag is set. This infrastructure change is
necessary to support offloading UDP NEW connections in original direction
in following patches in series.

Signed-off-by: Vlad Buslov <vladbu@nvidia.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Stable-dep-of: 125f1c7f26ff ("net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table")
Signed-off-by: Sasha Levin <sashal@kernel.org>
include/net/netfilter/nf_flow_table.h
net/netfilter/nf_flow_table_offload.c