netfilter: nf_tables: match on tunnel metadata
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 2 Aug 2018 18:51:46 +0000 (20:51 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 3 Aug 2018 19:12:19 +0000 (21:12 +0200)
commitaaecfdb5c5dd8bac2dfd112166844a9f2d5711f0
tree9ade4d7fd7477641b0f142588bcbed29c266016d
parentaf308b94a2a4a5a27bec9028354c4df444a7c8ba
netfilter: nf_tables: match on tunnel metadata

This patch allows us to match on the tunnel metadata that is available
of the packet. We can use this to validate if the packet comes from/goes
to tunnel and the corresponding tunnel ID.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/nft_tunnel.c