mirror of
https://github.com/torvalds/linux
synced 2024-07-21 10:41:44 +00:00
7a3f5b0de3
This patch introduces netfilter hooks for solving the problem that conntrack couldn't record both inner flows and outer flows. This patch also introduces a new sysctl toggle for enabling lightweight tunnel netfilter hooks. Signed-off-by: Ryoga Saito <contact@proelbtn.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
54 lines
1.2 KiB
C
54 lines
1.2 KiB
C
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
#include <linux/sysctl.h>
|
|
#include <net/lwtunnel.h>
|
|
#include <net/netfilter/nf_hooks_lwtunnel.h>
|
|
|
|
static inline int nf_hooks_lwtunnel_get(void)
|
|
{
|
|
if (static_branch_unlikely(&nf_hooks_lwtunnel_enabled))
|
|
return 1;
|
|
else
|
|
return 0;
|
|
}
|
|
|
|
static inline int nf_hooks_lwtunnel_set(int enable)
|
|
{
|
|
if (static_branch_unlikely(&nf_hooks_lwtunnel_enabled)) {
|
|
if (!enable)
|
|
return -EBUSY;
|
|
} else if (enable) {
|
|
static_branch_enable(&nf_hooks_lwtunnel_enabled);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
#ifdef CONFIG_SYSCTL
|
|
int nf_hooks_lwtunnel_sysctl_handler(struct ctl_table *table, int write,
|
|
void *buffer, size_t *lenp, loff_t *ppos)
|
|
{
|
|
int proc_nf_hooks_lwtunnel_enabled = 0;
|
|
struct ctl_table tmp = {
|
|
.procname = table->procname,
|
|
.data = &proc_nf_hooks_lwtunnel_enabled,
|
|
.maxlen = sizeof(int),
|
|
.mode = table->mode,
|
|
.extra1 = SYSCTL_ZERO,
|
|
.extra2 = SYSCTL_ONE,
|
|
};
|
|
int ret;
|
|
|
|
if (!write)
|
|
proc_nf_hooks_lwtunnel_enabled = nf_hooks_lwtunnel_get();
|
|
|
|
ret = proc_dointvec_minmax(&tmp, write, buffer, lenp, ppos);
|
|
|
|
if (write && ret == 0)
|
|
ret = nf_hooks_lwtunnel_set(proc_nf_hooks_lwtunnel_enabled);
|
|
|
|
return ret;
|
|
}
|
|
EXPORT_SYMBOL_GPL(nf_hooks_lwtunnel_sysctl_handler);
|
|
#endif /* CONFIG_SYSCTL */
|