net/sched: cls_flower: Add match on the ct_state reply flag
Add match on the ct_state reply flag. Example: $ tc filter add dev ens1f0_0 ingress prio 1 chain 1 proto ip flower \ ct_state +trk+est+rpl \ action mirred egress redirect dev ens1f0_1 $ tc filter add dev ens1f0_1 ingress prio 1 chain 1 proto ip flower \ ct_state +trk+est-rpl \ action mirred egress redirect dev ens1f0_0 Signed-off-by: Paul Blakey <paulb@nvidia.com> Reviewed-by: Jiri Pirko <jiri@nvidia.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org>
This commit is contained in:
parent
cf3c7c7b37
commit
8c85d18ce6
|
@ -592,6 +592,7 @@ enum {
|
|||
TCA_FLOWER_KEY_CT_FLAGS_RELATED = 1 << 2, /* Related to an established connection. */
|
||||
TCA_FLOWER_KEY_CT_FLAGS_TRACKED = 1 << 3, /* Conntrack has occurred. */
|
||||
TCA_FLOWER_KEY_CT_FLAGS_INVALID = 1 << 4, /* Conntrack is invalid. */
|
||||
TCA_FLOWER_KEY_CT_FLAGS_REPLY = 1 << 5, /* Packet is in the reply direction. */
|
||||
};
|
||||
|
||||
enum {
|
||||
|
|
|
@ -291,9 +291,11 @@ static u16 fl_ct_info_to_flower_map[] = {
|
|||
[IP_CT_RELATED] = TCA_FLOWER_KEY_CT_FLAGS_TRACKED |
|
||||
TCA_FLOWER_KEY_CT_FLAGS_RELATED,
|
||||
[IP_CT_ESTABLISHED_REPLY] = TCA_FLOWER_KEY_CT_FLAGS_TRACKED |
|
||||
TCA_FLOWER_KEY_CT_FLAGS_ESTABLISHED,
|
||||
TCA_FLOWER_KEY_CT_FLAGS_ESTABLISHED |
|
||||
TCA_FLOWER_KEY_CT_FLAGS_REPLY,
|
||||
[IP_CT_RELATED_REPLY] = TCA_FLOWER_KEY_CT_FLAGS_TRACKED |
|
||||
TCA_FLOWER_KEY_CT_FLAGS_RELATED,
|
||||
TCA_FLOWER_KEY_CT_FLAGS_RELATED |
|
||||
TCA_FLOWER_KEY_CT_FLAGS_REPLY,
|
||||
[IP_CT_NEW] = TCA_FLOWER_KEY_CT_FLAGS_TRACKED |
|
||||
TCA_FLOWER_KEY_CT_FLAGS_NEW,
|
||||
};
|
||||
|
|
Loading…
Reference in New Issue