summaryrefslogtreecommitdiffstats
path: root/net/sched/Makefile
diff options
context:
space:
mode:
authorEyal Birger <eyal.birger@gmail.com>2018-02-15 19:42:43 +0200
committerDavid S. Miller <davem@davemloft.net>2018-02-21 13:15:33 -0500
commitccc007e4a746bb592d3e72106f00241f81d51410 (patch)
tree986ff019562403f85554be3c7eb2f8ed9a635e83 /net/sched/Makefile
parent022ddbca86ce692518bc1809e2dfe27add669608 (diff)
downloadlinux-ccc007e4a746bb592d3e72106f00241f81d51410.tar.bz2
net: sched: add em_ipt ematch for calling xtables matches
The commit a new tc ematch for using netfilter xtable matches. This allows early classification as well as mirroning/redirecting traffic based on logic implemented in netfilter extensions. Current supported use case is classification based on the incoming IPSec state used during decpsulation using the 'policy' iptables extension (xt_policy). The module dynamically fetches the netfilter match module and calls it using a fake xt_action_param structure based on validated userspace provided parameters. As the xt_policy match does not access skb->data, no skb modifications are needed on match. Signed-off-by: Eyal Birger <eyal.birger@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/sched/Makefile')
-rw-r--r--net/sched/Makefile1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/sched/Makefile b/net/sched/Makefile
index 5b635447e3f8..8811d3804878 100644
--- a/net/sched/Makefile
+++ b/net/sched/Makefile
@@ -75,3 +75,4 @@ obj-$(CONFIG_NET_EMATCH_META) += em_meta.o
obj-$(CONFIG_NET_EMATCH_TEXT) += em_text.o
obj-$(CONFIG_NET_EMATCH_CANID) += em_canid.o
obj-$(CONFIG_NET_EMATCH_IPSET) += em_ipset.o
+obj-$(CONFIG_NET_EMATCH_IPT) += em_ipt.o