Daniel Borkmann 5e8018fc61 netfilter: nf_conntrack: add efficient mark to zone mapping ... This work adds the possibility of deriving the zone id from the skb->mark field in a scalable manner. This allows for having only a single template serving hundreds/thousands of different zones, for example, instead of the need to have one match for each zone as an extra CT jump target. Note that we'd need to have this information attached to the template as at the time when we're trying to lookup a possible ct object, we already need to know zone information for a possible match when going into __nf_conntrack_find_get(). This work provides a minimal implementation for a possible mapping. In order to not add/expose an extra ct->status bit, the zone structure has been extended to carry a flag for deriving the mark. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2015-08-18 01:24:05 +02:00
..
asm-generic	errno.h: Improve ENOSYS's comment	2015-04-17 09:03:58 -04:00
drm	drm/amdgpu: Drop drm/ prefix for including drm.h in amdgpu_drm.h	2015-07-29 15:48:05 -04:00
linux	netfilter: nf_conntrack: add efficient mark to zone mapping	2015-08-18 01:24:05 +02:00
misc	cxl: Implement an ioctl to fetch afu card-id, offset-id and mode	2015-06-03 13:27:15 +10:00
mtd
rdma	IB/core: Add timestamp_mask and hca_core_clock to query_device	2015-06-12 14:49:10 -04:00
scsi
sound	ASoC: topology: fix typos in topology header	2015-07-02 12:40:10 +01:00
video
xen
Kbuild