netfilter: nf_tables: add xfrm expression
authorFlorian Westphal <fw@strlen.de>
Mon, 3 Sep 2018 16:09:40 +0000 (18:09 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Sep 2018 09:40:08 +0000 (11:40 +0200)
commit6c47260250fc6114ce2012db13e1cd3938a27b73
treed74409b815de73b670c981d1450501531beee1a2
parent2953d80ff04862b26a2e628fb3948868f54d753d
netfilter: nf_tables: add xfrm expression

supports fetching saddr/daddr of tunnel mode states, request id and spi.
If direction is 'in', use inbound skb secpath, else dst->xfrm.

Joint work with Máté Eckl.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h
net/netfilter/Kconfig
net/netfilter/Makefile
net/netfilter/nft_xfrm.c [new file with mode: 0644]