interesting
/
nftables
mirror of https://github.com/google/nftables.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
196 Commits 2 Branches 3 Tags 3.7 MiB
Go 100%
Go to file
Rafael Campos Las Heras d27cc52f15
hash: Fix hash seed conditional (#234) 
Fix the marshall of the hash seed to be conditional, only if it is
explicitly set, we need to add it to the kernel as stated on the
libnftl and nftables projects.
Refence: https://git.netfilter.org/nftables/tree/src/netlink_linearize.c?id=25e7b99cc450490c38becb03d8bddd0199cfd3f9#n174

Otherwise, having a hash expression similar to this:
```
ip daddr set jhash tcp sport mod 2 seed 0x0 map { 0 : 192.168.0.1, 1 : 192.168.2.2 }
```
end up setting only the first IP and ignoring the second one.

Signed-off-by: Rafael Campos <methril@gmail.com>
 		2023-08-03 08:14:23 +02:00
.github/workflows GitHub Actions: switch to setup-go@v4 which enables caching 2023-05-20 14:47:36 +02:00
alignedbuff alignedbuff: fix alignment test issue on 32-bit machines (#211) 2022-12-12 08:51:36 +01:00
binaryutil add int32 and string types to alignedbuff (#195) 2022-10-15 21:04:45 +02:00
expr hash: Fix hash seed conditional (#234) 2023-08-03 08:14:23 +02:00
internal Move setup/teardown of system NFT connection to internal package 2023-04-18 08:53:20 +02:00
userdata userdata: Add TLV parser/serialized for rule user data 2023-04-18 08:53:20 +02:00
xt Fix: add missed parameters of struct ConntrackMtinfoBase (#182) 2022-09-04 20:05:03 +02:00
CONTRIBUTING.md Initial commit 2018-05-24 22:09:26 -07:00
LICENSE Initial commit 2018-05-24 22:09:26 -07:00
README.md README: switch to GitHub actions badge 2021-05-14 17:48:51 +02:00
chain.go added ability to create regular chains without a hook priority (#183) 2022-09-06 17:27:20 +02:00
compat_policy.go Fix: add NFTA_RULE_COMPAT attribute (#207) 2022-12-08 09:05:15 +01:00
compat_policy_test.go Fix: add NFTA_RULE_COMPAT attribute (#207) 2022-12-08 09:05:15 +01:00
conn.go Fix incorrect netlink acknowledgement handling (#194) 2022-10-02 16:01:48 +02:00
counter.go Add GetObject/GetObjects, ResetObject/ResetObjects (#92) 2020-01-21 08:36:27 +01:00
doc.go Restructure code base into smaller files (#15) 2019-05-03 23:54:09 +02:00
flowtable.go Flowtables implementation (#201) 2022-11-01 07:48:00 +01:00
go.mod Bump golang.org/x/net from 0.4.0 to 0.7.0 (#216) 2023-02-18 14:01:22 +01:00
go.sum Bump golang.org/x/net from 0.4.0 to 0.7.0 (#216) 2023-02-18 14:01:22 +01:00
nftables_test.go Add address field for expr tproxy (#231) 2023-07-10 08:38:01 +02:00
obj.go Fix incorrect netlink acknowledgement handling (#194) 2022-10-02 16:01:48 +02:00
rule.go Drop unnecessary table rewrite in GetRules() after 3e042f7 (#219) 2023-03-16 12:38:54 +01:00
set.go set: Parse bytes length on sets 2023-06-14 20:10:15 +02:00
set_test.go Fix getting concatenated data types for maps (#217) 2023-04-02 10:11:12 +02:00
table.go Added dynset exprs support (#173) 2022-07-29 18:32:59 +02:00
util.go Restructure code base into smaller files (#15) 2019-05-03 23:54:09 +02:00

README.md

Build Status GoDoc

This is not the correct repository for issues with the Linux nftables project! This repository contains a third-party Go package to programmatically interact with nftables. Find the official nftables website at https://wiki.nftables.org/

This package manipulates Linux nftables (the iptables successor). It is implemented in pure Go, i.e. does not wrap libnftnl.

This is not an official Google product.

Breaking changes

This package is in very early stages, and only contains enough data types and functions to install very basic nftables rules. It is likely that mistakes with the data types/API will be identified as more functionality is added.

Contributions

Contributions are very welcome!