net/sched: act_ct: Instantiate flow table entry actions
authorPaul Blakey <paulb@mellanox.com>
Thu, 12 Mar 2020 10:23:06 +0000 (12:23 +0200)
committerDavid S. Miller <davem@davemloft.net>
Thu, 12 Mar 2020 22:00:38 +0000 (15:00 -0700)
commit9c26ba9b1f453a0c86b26e9ab5e8efedcb4470d8
treeb0774300fc33f90580850bff501aa31a7406c6fb
parent978703f42549ac7d1a354bafbfc346a3ccf15f0d
net/sched: act_ct: Instantiate flow table entry actions

NF flow table API associate 5-tuple rule with an action list by calling
the flow table type action() CB to fill the rule's actions.

In action CB of act_ct, populate the ct offload entry actions with a new
ct_metadata action. Initialize the ct_metadata with the ct mark, label and
zone information. If ct nat was performed, then also append the relevant
packet mangle actions (e.g. ipv4/ipv6/tcp/udp header rewrites).

Drivers that offload the ft entries may match on the 5-tuple and perform
the action list.

Signed-off-by: Paul Blakey <paulb@mellanox.com>
Reviewed-by: Jiri Pirko <jiri@mellanox.com>
Reviewed-by: Edward Cree <ecree@solarflare.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/flow_offload.h
include/net/netfilter/nf_flow_table.h
net/netfilter/nf_flow_table_offload.c
net/sched/act_ct.c