Searched full:nftables (Results 1 – 25 of 54) sorted by relevance
123
| /linux-6.14.4/net/netfilter/ |
| D | nft_set_pipapo.c | 402 * @set: nftables API set representation
403 * @key: nftables API element representation containing key data
404 * @ext: nftables API extension pointer, filled with matching reference
506 * @set: nftables API set representation
606 * @set: nftables API set representation
607 * @elem: nftables API element representation containing key data
965 * @k: Input key for classification, without nftables padding
1266 * @set: nftables API set representation
1288 * @set: nftables API set representation
1289 * @elem: nftables API element representation containing key data
[all …]
|
| D | nft_set_pipapo_avx2.c | 191 * @pkt: Packet data, pointer to input nftables register
266 * @pkt: Packet data, pointer to input nftables register
343 * @pkt: Packet data, pointer to input nftables register
439 * @pkt: Packet data, pointer to input nftables register
529 * @pkt: Packet data, pointer to input nftables register
665 * @pkt: Packet data, pointer to input nftables register
723 * @pkt: Packet data, pointer to input nftables register
788 * @pkt: Packet data, pointer to input nftables register
864 * @pkt: Packet data, pointer to input nftables register
950 * @pkt: Packet data, pointer to input nftables register
[all …]
|
| D | nft_fib_inet.c | 80 MODULE_DESCRIPTION("nftables fib inet support");
|
| D | nft_fib_netdev.c | 89 MODULE_DESCRIPTION("nftables netdev fib lookups support");
|
| D | nft_dup_netdev.c | 113 MODULE_DESCRIPTION("nftables netdev packet duplication support");
|
| D | nft_set_pipapo.h | 8 /* Count of concatenated fields depends on count of 32-bit nftables registers */
172 * @ext: nftables API extensions
|
| D | nft_reject_inet.c | 110 MODULE_DESCRIPTION("Netfilter nftables reject inet support");
|
| D | nft_chain_nat.c | 140 MODULE_DESCRIPTION("nftables network address translation support");
|
| D | nft_reject.c | 133 MODULE_DESCRIPTION("Netfilter x_tables over nftables module");
|
| D | Kconfig | 193 match and the nftables ct expression.
481 nftables is the new packet classification framework that intends to
485 (https://www.netfilter.org/projects/nftables) uses to build the
585 infrastructure (also known as NFQUEUE) from nftables.
665 This makes transparent proxy support available in nftables.
|
| D | nft_reject_netdev.c | 189 MODULE_DESCRIPTION("Reject packets from netdev via nftables");
|
| D | nft_osf.c | 189 MODULE_DESCRIPTION("nftables passive OS fingerprint support");
|
| D | nft_fib.c | 208 MODULE_DESCRIPTION("Query routing table from nftables");
|
| /linux-6.14.4/net/ipv4/netfilter/ |
| D | Kconfig | 20 This is not needed if you are using iptables over nftables
332 This is not needed if you are using arptables over nftables
350 Neither arptables-nft nor nftables need this to work.
362 It is not used by nftables.
|
| D | nft_reject_ipv4.c | 76 MODULE_DESCRIPTION("IPv4 packet rejection for nftables");
|
| D | nft_dup_ipv4.c | 112 MODULE_DESCRIPTION("IPv4 nftables packet duplication support");
|
| D | nft_fib_ipv4.c | 220 MODULE_DESCRIPTION("nftables fib / ip route lookup support");
|
| /linux-6.14.4/Documentation/networking/ |
| D | bridge.rst | 259 consider using nftables for packet filtering.
261 The older ebtables tool is more feature-limited compared to nftables, but
262 just like nftables it doesn't need this module either to function.
274 Note that ebtables and nftables will work fine without the br_netfilter module.
276 plug in the routing stack. nftables rules in ip/ip6/inet/arp families won't
283 iptables matching capabilities (including conntrack). nftables doesn't have
|
| D | nf_flowtable.rst | 102 nftables ingress chain (make sure the flowtable priority is smaller than the
103 nftables ingress chain hence the flowtable runs before in the pipeline).
|
| /linux-6.14.4/tools/testing/selftests/net/netfilter/ |
| D | nft_meta.sh | 127 echo "OK: nftables meta iif/oif counters at expected values"
139 echo "OK: nftables meta cpu counter at expected values"
|
| D | nft_zones_many.sh | 47 echo "SKIP: Cannot add nftables rules"
|
| D | br_netfilter.sh | 138 echo "SKIP: could not add nftables ruleset"
|
| /linux-6.14.4/net/ipv6/netfilter/ |
| D | nft_reject_ipv6.c | 77 MODULE_DESCRIPTION("IPv6 packet rejection for nftables");
|
| D | nft_dup_ipv6.c | 110 MODULE_DESCRIPTION("IPv6 nftables packet duplication support");
|
| /linux-6.14.4/net/bridge/netfilter/ |
| D | nft_reject_bridge.c | 215 MODULE_DESCRIPTION("Reject packets from bridge via nftables");
|
123