summaryrefslogtreecommitdiffstats
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorLines
2022-06-06netfilter: nf_tables: bail out early if hardware offload is not supportedPablo Neira Ayuso-1/+1
2022-06-02netfilter: nf_tables: delete flowtable hooks via transaction listPablo Neira Ayuso-1/+0
2022-05-27netfilter: conntrack: re-fetch conntrack after insertionFlorian Westphal-1/+6
2022-05-16netfilter: nf_conncount: reduce unnecessary GCWilliam Tu-0/+1
2022-05-13netfilter: conntrack: skip verification of zero UDP checksumKevin Mitchell-4/+17
2022-05-13netfilter: prefer extension check to pointer checkFlorian Westphal-17/+16
2022-05-13netfilter: conntrack: un-inline nf_ct_ecache_ext_addFlorian Westphal-25/+5
2022-05-13netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*()Pablo Neira Ayuso-3/+9
2022-05-13netfilter: conntrack: remove unconfirmed listFlorian Westphal-1/+0
2022-05-13netfilter: extensions: introduce extension genid countFlorian Westphal-16/+25
2022-05-13netfilter: remove nf_ct_unconfirmed_destroy helperFlorian Westphal-3/+0
2022-05-13netfilter: cttimeout: decouple unlink and free on netns destructionFlorian Westphal-8/+0
2022-05-13netfilter: conntrack: include ecache dying list in dumpsFlorian Westphal-0/+2
2022-05-13netfilter: ecache: use dedicated list for event redeliveryFlorian Westphal-3/+2
2022-04-08netfilter: ecache: move to separate structureFlorian Westphal-2/+6
2022-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-0/+18
2022-03-20netfilter: nft_fib: add reduce supportFlorian Westphal-0/+3
2022-03-20netfilter: nft_meta: extend reduce support to bridge familyFlorian Westphal-0/+2
2022-03-20netfilter: nf_tables: cancel tracking for clobbered destination registersPablo Neira Ayuso-0/+15
2022-03-20netfilter: nf_tables: do not reduce read-only expressionsPablo Neira Ayuso-0/+8
2022-03-20netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned()Phil Sutter-0/+1
2022-03-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-1/+0
2022-03-16netfilter: flowtable: Fix QinQ and pppoe support for inet tablePablo Neira Ayuso-0/+18
2022-03-08Revert "netfilter: conntrack: tag conntracks picked up in local out hook"Florian Westphal-1/+0
2022-03-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-2/+6
2022-03-01net/sched: act_ct: Fix flow table lookup failure with no originating ifindexPaul Blakey-1/+5
2022-03-01netfilter: nf_queue: fix possible use-after-freeFlorian Westphal-1/+1
2022-02-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-3/+1
2022-02-20netfilter: nf_tables_offload: incorrect flow offload action array sizePablo Neira Ayuso-3/+1
2022-02-09netfilter: nft_cmp: optimize comparison for 16-bytesPablo Neira Ayuso-0/+9
2022-02-09netfilter: cttimeout: use option structureFlorian Westphal-2/+6
2022-02-09netfilter: ecache: don't use nf_conn spinlockFlorian Westphal-1/+1
2022-02-04netfilter: conntrack: remove extension register apiFlorian Westphal-54/+0
2022-02-04netfilter: conntrack: handle ->destroy hook via nat_ops insteadFlorian Westphal-3/+0
2022-02-04netfilter: conntrack: move extension sizes into coreFlorian Westphal-1/+0
2022-02-04netfilter: conntrack: make all extensions 8-byte alignnedFlorian Westphal-4/+1
2022-01-18net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPFKumar Kartikeya Dwivedi-0/+23
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski-8/+49
2022-01-09netfilter: nft_bitwise: track register operationsPablo Neira Ayuso-0/+2
2022-01-09netfilter: nf_tables: add register tracking infrastructurePablo Neira Ayuso-0/+12
2022-01-09netfilter: nf_tables: add NFT_REG32_NUMPablo Neira Ayuso-1/+3
2022-01-09netfilter: nf_tables: add rule blob layoutPablo Neira Ayuso-4/+18
2022-01-09netfilter: conntrack: avoid useless indirection during conntrack destructionFlorian Westphal-2/+6
2022-01-09netfilter: conntrack: Use max() instead of doing it manuallyJiapeng Chong-1/+1
2022-01-04net/sched: act_ct: Fill offloading tuple iifidxPaul Blakey-0/+54
2021-12-23netfilter: conntrack: tag conntracks picked up in local out hookFlorian Westphal-0/+1
2021-12-23netfilter: nf_tables: make counter support built-inPablo Neira Ayuso-0/+6
2021-12-08netfilter: conntrack: annotate data-races around ct->timeoutEric Dumazet-3/+3
2021-11-01netfilter: nft_payload: support for inner header matching / manglingPablo Neira Ayuso-0/+2
2021-11-01netfilter: nf_tables: convert pktinfo->tprot_set to flags fieldPablo Neira Ayuso-8/+13