diff options
| author | Florian Westphal <fw@strlen.de> | 2013-01-11 06:30:44 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-01-18 00:28:15 +0100 |
| commit | c539f01717c239cfa0921dd43927afc976f1eedc (patch) | |
| tree | e0e4881913acb233f6ea83d93eb69da446084101 /include/net/netns/conntrack.h | |
| parent | 7266507d89991fa1e989283e4e032c6d9357fe26 (diff) | |
| download | op-kernel-dev-c539f01717c239cfa0921dd43927afc976f1eedc.zip op-kernel-dev-c539f01717c239cfa0921dd43927afc976f1eedc.tar.gz | |
netfilter: add connlabel conntrack extension
similar to connmarks, except labels are bit-based; i.e.
all labels may be attached to a flow at the same time.
Up to 128 labels are supported. Supporting more labels
is possible, but requires increasing the ct offset delta
from u8 to u16 type due to increased extension sizes.
Mapping of bit-identifier to label name is done in userspace.
The extension is enabled at run-time once "-m connlabel" netfilter
rules are added.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/net/netns/conntrack.h')
| -rw-r--r-- | include/net/netns/conntrack.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/include/net/netns/conntrack.h b/include/net/netns/conntrack.h index 923cb20..c9c0c53 100644 --- a/include/net/netns/conntrack.h +++ b/include/net/netns/conntrack.h @@ -84,6 +84,10 @@ struct netns_ct { int sysctl_auto_assign_helper; bool auto_assign_helper_warned; struct nf_ip_net nf_ct_proto; +#if defined(CONFIG_NF_CONNTRACK_LABELS) + unsigned int labels_used; + u8 label_words; +#endif #ifdef CONFIG_NF_NAT_NEEDED struct hlist_head *nat_bysource; unsigned int nat_htable_size; |
