]> git.ipfire.org Git - thirdparty/systemd.git/commit
network: fix NFTSet population when [DHCPPrefixDelegation] Assign=no (#40049)
authorGovind Venugopal <gvenugo3@asu.edu>
Fri, 30 Jan 2026 14:38:13 +0000 (07:38 -0700)
committerGitHub <noreply@github.com>
Fri, 30 Jan 2026 14:38:13 +0000 (23:38 +0900)
commite198f1a8474c0e6bf64fe0dbe7701bb14c885bf8
tree83a5ae21947b70ad65c516b5e26808706f442fb6
parent3762ada7e3936fae5a6ebcf5619a21e92d09ae28
network: fix NFTSet population when [DHCPPrefixDelegation] Assign=no (#40049)

When [DHCPPrefixDelegation] Assign=no, networkd creates routes instead of
addresses. These routes need to populate nftables sets for firewall
rules to work correctly.

This commit adds dhcp_pd_route_modify_nft_set() to handle NFT set
updates for DHCP-PD routes, similar to how address_modify_nft_set()
handles them for addresses.

Fixes: #38383
src/network/networkd-dhcp-common.c
src/network/networkd-dhcp-prefix-delegation.c
src/network/networkd-dhcp-prefix-delegation.h