From: Tonghao Zhang <xiangxia.m....@gmail.com> This series patch allows user to match tunnel src/dst address and port with masked values. User can use that to match specified IP address or port and then drop packets (DDOS network attack from a gateway or others) or other actions.
patch [1]: allow user install TC Flowers with dpctl patch [2]: make the codes more readable. patch [3]: allow user to masked match patch [4]: allow user only match tunnel src address Tonghao Zhang (4): dpif-netlink: Generate ufids for installing TC flowers netdev-offload-tc: Use ipv6_addr_is_set instead of is_all_zeros netdev-offload-tc: Allow to match the IP and port mask of tunnel netdev-offload-tc: Expand tunnel source IPs masked match NEWS | 5 +++ include/openvswitch/match.h | 3 ++ lib/dpif-netlink.c | 45 ++++++++++++++++++++++++++ lib/match.c | 13 ++++++++ lib/netdev-offload-tc.c | 49 ++++++++++++++++++++--------- lib/odp-util.c | 3 +- lib/packets.h | 6 ++++ lib/tc.c | 63 +++++++++++++++++++++++++++++++------ tests/tunnel.at | 22 +++++++++++++ 9 files changed, 184 insertions(+), 25 deletions(-) -- V2: * Split: http://patchwork.ozlabs.org/project/openvswitch/patch/20200518014443.1529-2-xiangxia.m....@gmail.com/ to two patches, that easily to review the patch. * Fix checkpatch warning * update NEWS * add more info in commit message -- 2.26.1 _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev
