Commit Graph

151 Commits

Author SHA1 Message Date
Serguei Bezverkhi f528bf5cc6 Replace %v with %w to wrap netlink error
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-12-20 11:51:15 -05:00
Serguei Bezverkhi 756cfa14a8 Fix concatenated key set validation (#83) 2019-12-18 00:02:00 +01:00
Alexis PIRES 9a6c96795b Stateless NAT and notrack support (#82) 2019-12-17 21:54:26 +01:00
Alexis PIRES e2e83d0ff5 Add dup expr support (#81) 2019-12-13 23:35:06 +01:00
Michael Stapelberg fc92ae7899 README: add disclaimer; this is not the upstream nftables repo 2019-12-08 11:03:14 +01:00
Serguei Bezverkhi 4525b500cb Anonymous set creation (#79)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-12-05 18:08:48 +01:00
Serguei Bezverkhi 4f16059f2d Composed set (#78) 2019-12-01 10:10:42 +01:00
Serguei Bezverkhi 9dee196925 Add expression and tests for numgen (#77)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-11-28 09:43:38 +01:00
Timo Beckers 3ba45f5d78 Use NFPROTO_ constants for TableFamily (#76) 2019-11-15 10:17:43 +01:00
Serguei Bezverkhi 14f3137cde protect cc.messages from racing (#75)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-11-14 16:22:42 +01:00
Serguei Bezverkhi 26aec69f06 enable redir and nat decoders (#73)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-11-08 09:17:41 +01:00
Serguei Bezverkhi e0f4f3f8f8 Add bitwise decoder logic (#71) 2019-11-07 15:38:12 +01:00
Michael Stapelberg dc8c451012
Merge pull request #69 from Minaru/flush_functions
Implement flush functions
2019-10-31 07:44:21 +01:00
Maxime Demode 9083117872 [test] Add Travis skip for succesful local/Ubuntu 14.04 VM tests that somehow fail on Travis CI. 2019-10-28 14:24:28 +01:00
Maxime Demode 4fed02b227 [test] Add FlushTable case. 2019-10-23 16:02:45 +02:00
Maxime Demode 90c5e7d6f1 [test] Add FlushChain case. 2019-10-23 15:45:01 +02:00
Maxime Demode 606a10c098 [test] Add FlushSet case. 2019-10-23 15:44:09 +02:00
Maxime Demode e3323c2482 [set] Add FlushSet function. 2019-10-23 15:10:52 +02:00
Maxime Demode e49143a9d1 [table] Add FlushTable function. 2019-10-23 14:37:48 +02:00
Maxime Demode 22243d5c70 [chain] Add FlushChain function. 2019-10-23 14:20:20 +02:00
Minaru 35de0a609f Hash expr implementation (#68)
* [expr] Implement Hash expr.

* [test] Add Hash test case.
2019-10-19 08:53:53 +02:00
Minaru d379352a0d [set] Add Integer and Mark datatypes for set elements. (#66) 2019-10-19 08:53:01 +02:00
Michael Stapelberg 8541ced569
Merge pull request #64 from Minaru/set_ct_values
Set ct values
2019-10-19 08:50:26 +02:00
Maxime Demode e9d8d59ec2 [test] Add Ct set test. 2019-10-17 18:20:30 +02:00
Michael Stapelberg 2e3a74b3f8
Merge pull request #65 from Minaru/default_policy_fix
Default policy fix
2019-10-16 17:12:07 +02:00
Maxime Demode 65889cb04c [test] Make changes in test file to reflect Chain Policy field changes. 2019-10-16 11:44:15 +02:00
Maxime Demode 9c2cb3eeea [chain] Make struct and function code change to use *ChainPolicy field. 2019-10-16 11:43:47 +02:00
Maxime Demode 912284322e [chain] Add ChainPolicy type and its possible values. 2019-10-16 11:43:00 +02:00
Maxime Demode 71337b220c [expr] Add SourceRegister field and modify marshal function to work with it. 2019-10-15 18:31:07 +02:00
Maxime Demode 3c7d959797 [expr] Replace Key type in Ct struct by CtKey. 2019-10-15 18:02:12 +02:00
Maxime Demode 29d7aa173f [expr] Create CtKey type and add const values. 2019-10-15 18:01:31 +02:00
Serguei Bezverkhi 5d14089d2e Adding to nat expression additional parameters (#59)
* Change in dnat logic to cover all combinations

Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>

* Add parameter to cover all possible nat combinations

Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-09-06 08:28:27 +02:00
Serguei Bezverkhi a0a4b3333d Get sets fix (#58)
* lookup dest reg check fix

Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>

* Fix GetSets to detect Verdict Data type

Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-08-31 09:36:43 +02:00
Serguei Bezverkhi 4b2264477a lookup dest reg check fix (#57)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-08-31 09:36:20 +02:00
Serguei Bezverkhi 2d823533fe Add Vmap support (#56) 2019-08-28 08:51:13 +02:00
Serguei Bezverkhi 1ad7112fd7 Add support for maps (#55) 2019-08-27 17:52:20 +02:00
Serguei Bezverkhi 85a78b5285 Adding Fib expression and unit tests (#54) 2019-08-27 08:49:06 +02:00
Serguei Bezverkhi d514535a0c Reject expression and Unit tests (#53) 2019-08-26 09:57:52 +02:00
Serguei Bezverkhi ec0390b058 Extend Masq support and add unit testing (#52) 2019-08-25 23:43:47 +02:00
Serguei Bezverkhi 6925991d82 Meta SREG and DREG (#51)
* meta requires to use source and destination registers

Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-08-19 23:36:36 +02:00
Serguei Bezverkhi 5cb71bfba1 rule replace (#50)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-08-19 23:35:24 +02:00
Serguei Bezverkhi 0b3d8b56f6 Implementation of UserData struct encode/decode (#49) 2019-08-15 08:25:30 +02:00
Serguei Bezverkhi 579fe47a77 Refactor decoding set elements (#47) 2019-08-13 22:19:49 +02:00
Serguei Bezverkhi 1435f3a62c Fix non populated Table Family field (#45)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-08-12 08:51:06 +02:00
Serguei Bezverkhi 2f48b7d8d8 Additional change to Element to support set intervals (#44) 2019-08-09 19:36:23 +02:00
Serguei Bezverkhi 26de8f0eaa add interval flag support to set (#43)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-08-08 07:45:20 +02:00
Serguei Bezverkhi 9907ca3831 Add log expression and test (#42)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-08-01 12:41:37 -07:00
Serguei Bezverkhi 72bd788b11 Fixes #39 (#40)
Signed-off-by: Serguei Bezverkhi <sbezverk@cisco.com>
2019-07-23 05:12:57 +02:00
Michael Stapelberg c123f7dc7d nftables_test: add test for issue #26 2019-07-20 18:35:32 +02:00
Michael Stapelberg 37c3f0e9eb set: desc size carries len(vals), not KeyType.Bytes
fixes #26
2019-07-20 18:35:32 +02:00