Home
last modified time | relevance | path

Searched refs:nft_net (Results 1 – 25 of 33) sorted by relevance

12

/Linux-v5.15/net/netfilter/
Dnft_reject_netdev.c99 nft_reject_netdev_send_v4_unreach(nft_net(pkt), pkt->skb, in nft_reject_netdev_eval()
105 nft_reject_netdev_send_v4_tcp_reset(nft_net(pkt), pkt->skb, in nft_reject_netdev_eval()
110 nft_reject_netdev_send_v4_unreach(nft_net(pkt), pkt->skb, in nft_reject_netdev_eval()
120 nft_reject_netdev_send_v6_unreach(nft_net(pkt), pkt->skb, in nft_reject_netdev_eval()
126 nft_reject_netdev_send_v6_tcp_reset(nft_net(pkt), pkt->skb, in nft_reject_netdev_eval()
131 nft_reject_netdev_send_v6_unreach(nft_net(pkt), pkt->skb, in nft_reject_netdev_eval()
Dnft_reject_inet.c31 nf_send_reset(nft_net(pkt), nft_sk(pkt), in nft_reject_inet_eval()
44 nf_send_unreach6(nft_net(pkt), pkt->skb, in nft_reject_inet_eval()
48 nf_send_reset6(nft_net(pkt), nft_sk(pkt), in nft_reject_inet_eval()
52 nf_send_unreach6(nft_net(pkt), pkt->skb, in nft_reject_inet_eval()
Dnf_tables_offload.c382 struct nftables_pernet *nft_net; in nft_indr_block_cleanup() local
388 nft_net = nft_pernet(net); in nft_indr_block_cleanup()
389 mutex_lock(&nft_net->commit_mutex); in nft_indr_block_cleanup()
393 mutex_unlock(&nft_net->commit_mutex); in nft_indr_block_cleanup()
489 struct nftables_pernet *nft_net = nft_pernet(net); in nft_flow_rule_offload_abort() local
492 list_for_each_entry_continue_reverse(trans, &nft_net->commit_list, list) { in nft_flow_rule_offload_abort()
538 struct nftables_pernet *nft_net = nft_pernet(net); in nft_flow_rule_offload_commit() local
543 list_for_each_entry(trans, &nft_net->commit_list, list) { in nft_flow_rule_offload_commit()
598 static struct nft_chain *__nft_offload_get_chain(const struct nftables_pernet *nft_net, in __nft_offload_get_chain() argument
606 list_for_each_entry(table, &nft_net->tables, list) { in __nft_offload_get_chain()
[all …]
Dnf_tables_api.c108 struct nftables_pernet *nft_net = nft_pernet(net); in nft_validate_state_update() local
110 switch (nft_net->validate_state) { in nft_validate_state_update()
121 nft_net->validate_state = new_validate_state; in nft_validate_state_update()
176 struct nftables_pernet *nft_net; in nft_set_trans_bind() local
183 nft_net = nft_pernet(net); in nft_set_trans_bind()
184 list_for_each_entry_reverse(trans, &nft_net->commit_list, list) { in nft_set_trans_bind()
280 struct nftables_pernet *nft_net = nft_pernet(net); in nft_trans_commit_list_add_tail() local
282 list_add_tail(&trans->list, &nft_net->commit_list); in nft_trans_commit_list_add_tail()
561 struct nftables_pernet *nft_net; in nft_table_lookup() local
567 nft_net = nft_pernet(net); in nft_table_lookup()
[all …]
Dnft_tproxy.c49 sk = nf_tproxy_get_sock_v4(nft_net(pkt), skb, iph->protocol, in nft_tproxy_eval_v4()
66 sk = nf_tproxy_handle_time_wait4(nft_net(pkt), skb, taddr, tport, sk); in nft_tproxy_eval_v4()
71 sk = nf_tproxy_get_sock_v4(nft_net(pkt), skb, iph->protocol, in nft_tproxy_eval_v4()
117 sk = nf_tproxy_get_sock_v6(nft_net(pkt), skb, thoff, l4proto, in nft_tproxy_eval_v6()
135 nft_net(pkt), in nft_tproxy_eval_v6()
143 sk = nf_tproxy_get_sock_v6(nft_net(pkt), skb, thoff, in nft_tproxy_eval_v6()
Dnft_socket.c44 if (!sk || !sk_fullsock(sk) || !net_eq(nft_net(pkt), sock_net(sk))) in nft_sock_get_eval_cgroupv2()
66 if (sk && !net_eq(nft_net(pkt), sock_net(sk))) in nft_socket_eval()
72 sk = nf_sk_lookup_slow_v4(nft_net(pkt), skb, nft_in(pkt)); in nft_socket_eval()
76 sk = nf_sk_lookup_slow_v6(nft_net(pkt), skb, nft_in(pkt)); in nft_socket_eval()
Dnft_chain_filter.c352 struct nftables_pernet *nft_net; in nf_tables_netdev_event() local
366 nft_net = nft_pernet(ctx.net); in nf_tables_netdev_event()
367 mutex_lock(&nft_net->commit_mutex); in nf_tables_netdev_event()
368 list_for_each_entry(table, &nft_net->tables, list) { in nf_tables_netdev_event()
382 mutex_unlock(&nft_net->commit_mutex); in nf_tables_netdev_event()
Dnf_dup_netdev.c30 dev = dev_get_by_index_rcu(nft_net(pkt), oif); in nf_fwd_netdev_egress()
45 dev = dev_get_by_index_rcu(nft_net(pkt), oif); in nf_dup_netdev_egress()
Dnft_connlimit.c41 nft_pf(pkt), nft_net(pkt), &tuple)) { in nft_connlimit_do_eval()
46 if (nf_conncount_add(nft_net(pkt), &priv->list, tuple_ptr, zone)) { in nft_connlimit_do_eval()
Dnf_tables_trace.c191 if (!nfnetlink_has_listeners(nft_net(pkt), NFNLGRP_NFTRACE)) in nft_trace_notify()
274 nfnetlink_send(skb, nft_net(pkt), 0, NFNLGRP_NFTRACE, 0, GFP_ATOMIC); in nft_trace_notify()
Dnft_synproxy.c52 struct net *net = nft_net(pkt); in nft_synproxy_eval_v4()
83 struct net *net = nft_net(pkt); in nft_synproxy_eval_v6()
Dnft_meta.c138 if (!sk || !sk_fullsock(sk) || !net_eq(nft_net(pkt), sock_net(sk))) in nft_meta_get_eval_skugid()
171 if (!sk || !sk_fullsock(sk) || !net_eq(nft_net(pkt), sock_net(sk))) in nft_meta_get_eval_cgroup()
309 dev = sdif ? dev_get_by_index_rcu(nft_net(pkt), sdif) : NULL; in nft_meta_get_eval_sdifname()
Dnft_rt.c41 nf_route(nft_net(pkt), &dst, &fl, false, nft_pf(pkt)); in get_tcpmss()
Dnft_dynset.c164 struct nftables_pernet *nft_net = nft_pernet(ctx->net); in nft_dynset_init() local
171 lockdep_assert_held(&nft_net->commit_mutex); in nft_dynset_init()
Dnft_fwd_netdev.c136 dev = dev_get_by_index_rcu(nft_net(pkt), oif); in nft_fwd_neigh_eval()
Dnft_quota.c62 nft_obj_notify(nft_net(pkt), obj->key.table, obj, 0, 0, in nft_quota_obj_eval()
/Linux-v5.15/net/bridge/netfilter/
Dnft_reject_bridge.c125 nft_reject_br_send_v4_unreach(nft_net(pkt), pkt->skb, in nft_reject_bridge_eval()
131 nft_reject_br_send_v4_tcp_reset(nft_net(pkt), pkt->skb, in nft_reject_bridge_eval()
136 nft_reject_br_send_v4_unreach(nft_net(pkt), pkt->skb, in nft_reject_bridge_eval()
146 nft_reject_br_send_v6_unreach(nft_net(pkt), pkt->skb, in nft_reject_bridge_eval()
152 nft_reject_br_send_v6_tcp_reset(nft_net(pkt), pkt->skb, in nft_reject_bridge_eval()
157 nft_reject_br_send_v6_unreach(nft_net(pkt), pkt->skb, in nft_reject_bridge_eval()
/Linux-v5.15/net/ipv6/netfilter/
Dnft_reject_ipv6.c27 nf_send_unreach6(nft_net(pkt), pkt->skb, priv->icmp_code, in nft_reject_ipv6_eval()
31 nf_send_reset6(nft_net(pkt), nft_sk(pkt), pkt->skb, in nft_reject_ipv6_eval()
Dnft_fib_ipv6.c73 if (dev && nf_ipv6_chk_addr(nft_net(pkt), &fl6.daddr, dev, true)) in __nft_fib6_eval_type()
76 route_err = nf_ip6_route(nft_net(pkt), (struct dst_entry **)&rt, in __nft_fib6_eval_type()
187 rt = (void *)ip6_route_lookup(nft_net(pkt), &fl6, pkt->skb, in nft_fib6_eval()
Dnft_dup_ipv6.c28 nf_dup_ipv6(nft_net(pkt), pkt->skb, nft_hook(pkt), gw, oif); in nft_dup_ipv6_eval()
/Linux-v5.15/include/net/netfilter/
Dnf_tables_ipv4.h68 __IP_INC_STATS(nft_net(pkt), IPSTATS_MIB_INTRUNCATEDPKTS); in nft_set_pktinfo_ipv4_ingress()
82 __IP_INC_STATS(nft_net(pkt), IPSTATS_MIB_INHDRERRORS); in nft_set_pktinfo_ipv4_ingress()
Dnf_tables_ipv6.h91 __IP6_INC_STATS(nft_net(pkt), idev, IPSTATS_MIB_INTRUNCATEDPKTS); in nft_set_pktinfo_ipv6_ingress()
108 __IP6_INC_STATS(nft_net(pkt), idev, IPSTATS_MIB_INHDRERRORS); in nft_set_pktinfo_ipv6_ingress()
/Linux-v5.15/net/ipv4/netfilter/
Dnft_fib_ipv4.c53 *dst = inet_dev_addr_type(nft_net(pkt), dev, addr); in nft_fib4_eval_type()
121 if (fib_lookup(nft_net(pkt), &fl4, &res, FIB_LOOKUP_IGNORE_LINKSTATE)) in nft_fib4_eval()
Dnft_reject_ipv4.c30 nf_send_reset(nft_net(pkt), nft_sk(pkt), pkt->skb, in nft_reject_ipv4_eval()
Dnft_dup_ipv4.c30 nf_dup_ipv4(nft_net(pkt), pkt->skb, nft_hook(pkt), &gw, oif); in nft_dup_ipv4_eval()

12