[PATCH nft] expr: add map lookups for numgen statements

2018-04-22 Thread Laura Garcia Liebana
This patch introduces a map as a numgen attribute, which permits to lookup a value based on the numgen result as the key. This approach only supports named maps. Signed-off-by: Laura Garcia Liebana --- include/expression.h| 1 +

[PATCH libnftnl] expr: add map lookups for numgen statements

2018-04-22 Thread Laura Garcia Liebana
This patch introduces two new attributes for numgen to allow map lookups where the number generator will be the key. Two new attributes needs to be included: NFTNL_EXPR_NG_SET_NAME and NFTNL_EXPR_NG_SET_ID in order to identify the given map. Signed-off-by: Laura Garcia Liebana

[PATCH nf-next] netfilter: nf_tables: add map lookups for numgen statements

2018-04-22 Thread Laura Garcia Liebana
This patch includes a new attribute in the numgen structure to allow the lookup of an element based on the number generator as a key. For this purpose, different ops have been included to extend the current numgen inc functions. Currently, only supported for numgen incremental operations, but it

[PATCH v2] iptables: Set wait to true by default.

2018-04-22 Thread Jack Ma
This allow each iptables user to wait for the xtable_lock for a maximum of 1 second by default. It's uncommon to not wait for xtables_lock and exit immediately if the lock is not available. If latency-senstive applications require the wait interval to be re-adjusted, users are still able to set

[PATCH] iptables: Set wait to true by default.

2018-04-22 Thread Jack Ma
This allow each iptables user to wait for the xtable_lock for a maximum of 1 second by default. It's uncommon to not wait for xtables_lock and exit immediately if the lock is not available. If latency-senstive applications require the wait interval to be re-adjusted, users are still able to set