aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nf_tables_core.c
AgeCommit message (Expand)AuthorFilesLines
2024-01-10x86/bugs: Rename CONFIG_RETPOLINE => CONFIG_MITIGATION_RETPOLINEBreno Leitao1-3/+3
2023-12-20netfilter: nf_tables: set transport offset from mac header for netdev/egressPablo Neira Ayuso1-1/+1
2023-10-18netfilter: make nftables drops visible in net dropmonitorFlorian Westphal1-1/+5
2023-10-18netfilter: nf_tables: mask out non-verdict bits when checking return valueFlorian Westphal1-1/+1
2023-04-22netfilter: nf_tables: do not store rule in traceinfo structureFlorian Westphal1-8/+7
2023-04-22netfilter: nf_tables: do not store verdict in traceinfo structureFlorian Westphal1-6/+8
2023-04-22netfilter: nf_tables: do not store pktinfo in traceinfo structureFlorian Westphal1-9/+12
2023-04-22netfilter: nf_tables: remove unneeded conditionalFlorian Westphal1-4/+2
2023-04-22netfilter: nf_tables: don't store chain address on jumpFlorian Westphal1-15/+6
2023-04-22netfilter: nf_tables: don't store address of last rule on jumpFlorian Westphal1-6/+2
2023-01-18netfilter: nf_tables: avoid retpoline overhead for some ct expression callsFlorian Westphal1-0/+3
2023-01-18netfilter: nf_tables: avoid retpoline overhead for objref callsFlorian Westphal1-0/+2
2023-01-18netfilter: nf_tables: add static key to skip retpoline workaroundsFlorian Westphal1-1/+29
2022-10-25netfilter: nft_inner: support for inner tunnel header matchingPablo Neira Ayuso1-0/+1
2022-10-25netfilter: nft_objref: make it builtinFlorian Westphal1-0/+1
2022-08-05netfilter: nf_tables: fix crash when nf_trace is enabledFlorian Westphal1-11/+10
2022-06-27netfilter: nf_tables: avoid skb access on nf_stolenFlorian Westphal1-3/+21
2022-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2022-03-17netfilter: nf_tables: initialize registers in nft_do_chain()Pablo Neira Ayuso1-1/+1
2022-02-09netfilter: nft_cmp: optimize comparison for 16-bytesPablo Neira Ayuso1-0/+16
2022-01-09netfilter: nf_tables: add rule blob layoutPablo Neira Ayuso1-14/+27
2021-12-23netfilter: nf_tables: make counter support built-inPablo Neira Ayuso1-0/+5
2021-12-23netfilter: nf_tables: replace WARN_ON by WARN_ON_ONCE for unknown verdictsPablo Neira Ayuso1-1/+1
2021-12-23netfilter: nf_tables: consolidate rule verdict trace callPablo Neira Ayuso1-7/+32
2021-12-23netfilter: nf_tables: remove rcu read-size lockPablo Neira Ayuso1-2/+0
2021-11-01netfilter: nf_tables: convert pktinfo->tprot_set to flags fieldPablo Neira Ayuso1-1/+1
2021-06-17netfilter: nf_tables: add last expressionPablo Neira Ayuso1-0/+1
2021-05-29netfilter: nf_tables: add and use nft_thoff helperFlorian Westphal1-1/+1
2020-10-04netfilter: nf_tables: Implement fast bitwise expressionPhil Sutter1-0/+12
2020-10-04netfilter: nf_tables: Enable fast nft_cmp for inverted matchesPhil Sutter1-2/+1
2020-07-22netfilter: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2019-07-05netfilter: nft_meta: move bridge meta keys into nft_meta_bridgewenxu1-0/+1
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-03-01netfilter: nf_tables: check the result of dereferencing base_chain->statsLi RongQing1-6/+8
2019-02-27netfilter: remove unneeded switch fall-throughLi RongQing1-1/+0
2019-01-18netfilter: nf_tables: add direct calls for all builtin expressionsFlorian Westphal1-7/+18
2018-12-04netfilter: nf_tables: fix suspicious RCU usage in nft_chain_stats_replace()Taehee Yoo1-1/+1
2018-09-28netfilter: nf_tables: add SECMARK supportChristian Göttsche1-4/+24
2018-07-30netfilter: nf_tables: handle meta/lookup with direct callFlorian Westphal1-1/+15
2018-06-12netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()Taehee Yoo1-1/+2
2018-06-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+2
2018-05-29netfilter: nf_tables: remove unused variablesTaehee Yoo1-16/+0
2018-05-29netfilter: nf_tables: remove synchronize_rcu in commit phaseFlorian Westphal1-11/+13
2018-05-29netfilter: nf_tables: disable preemption in nft_update_chain_stats()Pablo Neira Ayuso1-2/+2
2018-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-22/+7
2018-05-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-7/+14
2018-05-17netfilter: nf_tables: remove old nf_log based tracingFlorian Westphal1-22/+7
2018-05-08netfilter: nf_tables: don't assume chain stats are set when jumplabel is setFlorian Westphal1-7/+14
2018-04-27netfilter: nf_tables: merge exthdr expression into nft coreFlorian Westphal1-0/+1
2018-04-27netfilter: nf_tables: merge rt expression into nft coreFlorian Westphal1-0/+1
2018-04-27netfilter: nf_tables: make meta expression builtinFlorian Westphal1-0/+1
2017-08-02netfilter: constify nf_loginfo structuresJulia Lawall1-1/+1
2017-07-24netfilter: nf_tables: keep chain counters away from hot pathPablo Neira Ayuso1-8/+18
2016-11-09netfilter: nf_tables: simplify the basic expressions' init routineLiping Zhang1-54/+26
2016-11-03netfilter: nf_tables: use hook state from xt_action_param structurePablo Neira Ayuso1-5/+5
2016-10-26netfilter: nf_tables: allow expressions to return STOLENFlorian Westphal1-0/+1
2016-09-25netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang1-1/+1
2016-09-25netfilter: nf_tables: add range expressionPablo Neira Ayuso1-1/+6
2016-09-23netfilter: nf_tables: check tprot_set first when we use xt.thoffLiping Zhang1-1/+4
2016-09-23netfilter: nf_tables: improve nft payload fast evalLiping Zhang1-1/+1
2016-06-15netfilter: nf_tables: fix a wrong check to skip the inactive rulesLiping Zhang1-1/+1
2015-12-09netfilter: nf_tables: fix nf_log_trace based tracingFlorian Westphal1-11/+5
2015-12-09netfilter: nf_tables: wrap tracing with a static keyFlorian Westphal1-3/+6
2015-12-09netfilter: nf_tables: extend tracing infrastructureFlorian Westphal1-12/+33
2015-09-18netfilter: Pass priv instead of nf_hook_ops to netfilter hooksEric W. Biederman1-2/+2
2015-09-18netfilter: nf_tables: Use pkt->net instead of computing net from the passed n...Eric W. Biederman1-4/+2
2015-09-18netfilter: nf_tables: kill nft_pktinfo.opsEric W. Biederman1-1/+1
2015-07-15netfilter: nftables: Only run the nftables chains in the proper netnsEric W. Biederman1-5/+0
2015-06-23netfilter: nftables: Do not run chains in the wrong network namespaceEric W. Biederman1-1/+6
2015-04-13netfilter: nf_tables: switch registers to 32 bit addressingPatrick McHardy1-2/+3
2015-04-13netfilter: nf_tables: convert expressions to u32 register pointersPatrick McHardy1-4/+4
2015-04-13netfilter: nf_tables: get rid of NFT_REG_VERDICT usagePatrick McHardy1-17/+17
2015-04-08netfilter: nf_tables: add support for dynamic set updatesPatrick McHardy1-0/+7
2015-03-26netfilter: nf_tables: add transaction helper functionsPatrick McHardy1-5/+1
2015-03-25netfilter: nf_tables: restore nf_log_trace() in nf_tables_core.cPablo Neira Ayuso1-4/+4
2015-03-25netfilter: Use LOGLEVEL_<FOO> definesJoe Perches1-1/+2
2015-03-25netfilter: nf_tables: move struct net pointer to base chainPatrick McHardy1-1/+2
2015-03-06netfilter: nf_tables: consolidate tracing invocationsPatrick McHardy1-7/+4
2015-03-06netfilter: nf_tables: minor tracing cleanupsPatrick McHardy1-49/+49
2014-07-14netfilter: nf_tables: 64bit stats need some extra synchronizationEric Dumazet1-4/+6
2014-05-15netfilter: nf_tables: fix trace of matching non-terminal rulePablo Neira Ayuso1-1/+3
2014-05-12netfilter: nf_tables: fix missing return trace at the end of non-base chainPablo Neira Ayuso1-5/+3
2014-05-12netfilter: nf_tables: fix bogus rulenum after goto actionPablo Neira Ayuso1-1/+1
2014-05-12netfilter: nf_tables: fix tracing of the goto actionPablo Neira Ayuso1-1/+5
2014-05-12netfilter: nf_tables: fix goto actionPablo Neira Ayuso1-18/+10
2014-05-10netfilter: nf_tables: reset rule number counter after jump and gotoPablo Neira Ayuso1-1/+2
2014-04-14netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4Patrick McHardy1-2/+1
2014-02-07netfilter: nf_tables: unininline nft_trace_packet()Patrick McHardy1-3/+3
2014-01-09netfilter: nf_tables: rename nft_do_chain_pktinfo() to nft_do_chain()Patrick McHardy1-2/+2
2014-01-07netfilter: nf_tables: add hook ops to struct nft_pktinfoPatrick McHardy1-1/+1
2013-12-07netfilter: nf_tables: fix issue with verdict supportEric Leblond1-1/+4
2013-10-14netfilter: nf_tables: add trace supportPablo Neira Ayuso1-0/+57
2013-10-14netfilter: nfnetlink: add batch support and use it from nf_tablesPablo Neira Ayuso1-0/+10
2013-10-14netfilter: nf_tables: nft_payload: fix transport header basePablo Neira Ayuso1-1/+1
2013-10-14netfilter: nf_tables: add compatibility layer for x_tablesPablo Neira Ayuso1-19/+27
2013-10-14netfilter: nft_payload: add optimized payload implementation for small loadsPatrick McHardy1-1/+30
2013-10-14netfilter: nf_tables: add optimized data comparison for small valuesPatrick McHardy1-1/+17
2013-10-14netfilter: nf_tables: add netlink set APIPatrick McHardy1-2/+0
2013-10-14netfilter: add nftablesPatrick McHardy1-0/+152