[PATCH nf-next 0/5] netfilter: nft: introduce routing expression

This patch series introduces an nftables rt expression for routing related data with support for nexthop (i.e. the directly connected IP address that an outgoing packet is sent to), which can be used either for matching or accounting, eg. # nft add rule filter postrouting \ ip daddr 192.1

[PATCH nf-next 1/5] netfilter: nft: UAPI headers for routing expression

From: Anders K. Pedersen Add new UAPI header definitions for nftables "rt" expression, which will enable usage of routing related data. Signed-off-by: Anders K. Pedersen --- include/uapi/linux/netfilter/nf_tables.h | 26 ++ 1 files changed, 26 insertions(+) diff --git a/include/uapi/linu

[PATCH nf-next 2/5] netfilter: nft: basic routing expression

From: Anders K. Pedersen Introduce basic infrastructure for nftables rt expression for routing related data. Initially "rt classid" is implemented identical to "meta rtclassid", since it is more logical to have this match in the routing expression going forward. Signed-off-by: Anders K. Pedersen

[PATCH nf-next 3/5] netfilter: nft: rt nexthop for IPv4 family

From: Anders K. Pedersen Add nftables IPv4 family support for an "rt ip nexthop" expression allowing usage of the routing nexthop (i.e. the directly connected IP address that an outgoing packet is sent to) for matching or accounting, eg. # nft add rule filter postrouting \ ip daddr 192.

[PATCH nf-next 5/5] netfilter: nft: rt nexthop for inet family

From: Anders K. Pedersen Add nftables inet family support for an rt nexthop expression allowing usage of the routing nexthop (i.e. the directly connected IP address that an outgoing packet is sent to) for matching or accounting, eg. # nft add rule inet filter postrouting \ ether type ip

[PATCH libnftnl] introduce rt expression

From: Anders K. Pedersen Introduce support for rt expression for routing related data as implemented in kernel. Signed-off-by: Anders K. Pedersen --- include/libnftnl/expr.h | 12 ++ include/linux/netfilter/nf_tables.h | 26 src/Makefile.am | 1 + src/e

[PATCH nf-next 4/5] netfilter: nft: rt nexthop for IPv6 family

From: Anders K. Pedersen Add nftables IPv6 family support for an "rt ip6 nexthop" expression allowing usage of the routing nexthop (i.e. the directly connected IP address that an outgoing packet is sent to) for matching or accounting, eg. # nft add rule ip6 filter postrouting \ ip6 dadd

[PATCH nftables] rt: introduce routing expression

From: Anders K. Pedersen Introduce rt expression for routing related data with support for nexthop (i.e. the directly connected IP address that an outgoing packet is sent to), which can be used either for matching or accounting, eg. # nft add rule filter postrouting \ ip daddr 192.168.1