diff options
author | Pablo Neira Ayuso | 2018-02-06 13:22:44 +0100 |
---|---|---|
committer | Pablo Neira Ayuso | 2018-02-07 00:58:57 +0100 |
commit | c0ea1bcb39352b57ac5c4b6da8acd65bddeee2c5 (patch) | |
tree | 7726f26ef52d8d05f01b415eae38ad5597b52411 /net/netfilter/nf_flow_table.c | |
parent | netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert (diff) | |
download | kernel-qcow2-linux-c0ea1bcb39352b57ac5c4b6da8acd65bddeee2c5.tar.gz kernel-qcow2-linux-c0ea1bcb39352b57ac5c4b6da8acd65bddeee2c5.tar.xz kernel-qcow2-linux-c0ea1bcb39352b57ac5c4b6da8acd65bddeee2c5.zip |
netfilter: nft_flow_offload: move flowtable cleanup routines to nf_flow_table
Move the flowtable cleanup routines to nf_flow_table and expose the
nf_flow_table_cleanup() helper function.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_flow_table.c')
-rw-r--r-- | net/netfilter/nf_flow_table.c | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/net/netfilter/nf_flow_table.c b/net/netfilter/nf_flow_table.c index 2f5099cb85b8..04c08f6b9015 100644 --- a/net/netfilter/nf_flow_table.c +++ b/net/netfilter/nf_flow_table.c @@ -4,6 +4,7 @@ #include <linux/netfilter.h> #include <linux/rhashtable.h> #include <linux/netdevice.h> +#include <net/netfilter/nf_tables.h> #include <net/netfilter/nf_flow_table.h> #include <net/netfilter/nf_conntrack.h> #include <net/netfilter/nf_conntrack_core.h> @@ -425,5 +426,28 @@ int nf_flow_dnat_port(const struct flow_offload *flow, } EXPORT_SYMBOL_GPL(nf_flow_dnat_port); +static void nf_flow_table_do_cleanup(struct flow_offload *flow, void *data) +{ + struct net_device *dev = data; + + if (dev && flow->tuplehash[0].tuple.iifidx != dev->ifindex) + return; + + flow_offload_dead(flow); +} + +static void nf_flow_table_iterate_cleanup(struct nf_flowtable *flowtable, + void *data) +{ + nf_flow_table_iterate(flowtable, nf_flow_table_do_cleanup, data); + flush_delayed_work(&flowtable->gc_work); +} + +void nf_flow_table_cleanup(struct net *net, struct net_device *dev) +{ + nft_flow_table_iterate(net, nf_flow_table_iterate_cleanup, dev); +} +EXPORT_SYMBOL_GPL(nf_flow_table_cleanup); + MODULE_LICENSE("GPL"); MODULE_AUTHOR("Pablo Neira Ayuso <pablo@netfilter.org>"); |