interesting
/
nftables
mirror of https://github.com/google/nftables.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Meta SREG and DREG (#51) 

* meta requires to use source and destination registers

Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
This commit is contained in:
Serguei Bezverkhi 2019-08-19 17:36:36 -04:00 committed by Michael Stapelberg
parent 5cb71bfba1
commit 6925991d82
1 changed files with 22 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
expr/expr.go
View File

@ -77,19 +77,38 @@ const (
// https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_metainformation // https://wiki.nftables.org/wiki-nftables/index.php/Matching_packet_metainformation
type Meta struct { type Meta struct {
Key MetaKey Key MetaKey
SourceRegister bool
Register uint32 Register uint32
} }
func (e *Meta) marshal() ([]byte, error) { func (e *Meta) marshal() ([]byte, error) {
regData := []byte{}
exprData, err := netlink.MarshalAttributes( exprData, err := netlink.MarshalAttributes(
[]netlink.Attribute{ []netlink.Attribute{
{Type: unix.NFTA_META_KEY, Data: binaryutil.BigEndian.PutUint32(uint32(e.Key))}, {Type: unix.NFTA_META_KEY, Data: binaryutil.BigEndian.PutUint32(uint32(e.Key))},
{Type: unix.NFTA_META_DREG, Data: binaryutil.BigEndian.PutUint32(e.Register)},
}, },
) )
if err != nil { if err != nil {
return nil, err return nil, err
} }
if e.SourceRegister {
regData, err = netlink.MarshalAttributes(
[]netlink.Attribute{
{Type: unix.NFTA_META_SREG, Data: binaryutil.BigEndian.PutUint32(e.Register)},
},
)
} else {
regData, err = netlink.MarshalAttributes(
[]netlink.Attribute{
{Type: unix.NFTA_META_DREG, Data: binaryutil.BigEndian.PutUint32(e.Register)},
},
)
}
if err != nil {
return nil, err
}
exprData = append(exprData, regData...)
return netlink.MarshalAttributes([]netlink.Attribute{ return netlink.MarshalAttributes([]netlink.Attribute{
{Type: unix.NFTA_EXPR_NAME, Data: []byte("meta\x00")}, {Type: unix.NFTA_EXPR_NAME, Data: []byte("meta\x00")},
{Type: unix.NLA_F_NESTED | unix.NFTA_EXPR_DATA, Data: exprData}, {Type: unix.NLA_F_NESTED | unix.NFTA_EXPR_DATA, Data: exprData},