iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/include/net/netfilter
History
Pablo Neira Ayuso 9f08ea8481 netfilter: nf_tables: keep chain counters away from hot path 
These chain counters are only used by the iptables-compat tool, that
allow users to use the x_tables extensions from the existing nf_tables
framework. This patch makes nf_tables by ~5% for the general usecase,
ie. native nft users, where no chain counters are used at all.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2017-07-24 12:23:16 +02:00
..
ipv4
netfilter: udplite: Remove duplicated udplite4/6 declaration
2017-04-09 00:08:22 +02:00
ipv6
netfilter: udplite: Remove duplicated udplite4/6 declaration
2017-04-09 00:08:22 +02:00
br_netfilter.h
net: convert nf_bridge_info.use from atomic_t to refcount_t
2017-07-01 07:39:07 -07:00
nf_conntrack_acct.h
netfilter: introduce nf_conn_acct structure
2013-11-03 21:48:49 +01:00
nf_conntrack_core.h
netfilter: remove nf_ct_is_untracked
2017-04-15 11:51:33 +02:00
nf_conntrack_ecache.h
nefilter: eache: reduce struct size from 32 to 24 byte
2017-04-19 17:55:17 +02:00
nf_conntrack_expect.h
netfilter: nf_ct_expect: Add nf_ct_remove_expect()
2017-04-06 18:39:40 +02:00
nf_conntrack_extend.h
netfilter: nf_ct_ext: invoke destroy even when ext is not attached
2017-05-01 11:48:49 +02:00
nf_conntrack_helper.h
netfilter: nfnl_cthelper: reject del request if helper obj is in use
2017-05-15 12:42:29 +02:00
nf_conntrack_l3proto.h
netfilter: conntrack: use NFPROTO_MAX to size array
2017-06-19 19:20:49 +02:00
nf_conntrack_l4proto.h
netfilter: allow early drop of assured conntracks
2017-04-19 17:55:17 +02:00
nf_conntrack_labels.h
netfilter: conntrack: avoid excess memory allocation
2016-10-27 18:29:02 +02:00
nf_conntrack_seqadj.h
netfilter: Remove extern from function prototypes
2013-09-23 16:29:42 -04:00
nf_conntrack_synproxy.h
netfilter: synproxy: only register hooks when needed
2017-04-26 09:30:21 +02:00
nf_conntrack_timeout.h
netfilter: refcounter conversions
2017-03-17 12:49:43 +01:00
nf_conntrack_timestamp.h
netfilter: Remove extern from function prototypes
2013-09-23 16:29:42 -04:00
nf_conntrack_tuple.h
netfilter: nf_nat: export NAT definitions to userspace
2011-12-23 14:36:43 +01:00
nf_conntrack_zones.h
netfilter: move zone info into struct nf_conn
2016-06-23 13:33:12 +02:00
nf_conntrack.h
netfilter: conntrack: add nf_ct_iterate_destroy
2017-05-29 12:46:10 +02:00
nf_dup_netdev.h
netfilter: add and use nf_fwd_netdev_egress
2016-12-06 21:48:22 +01:00
nf_log.h
netfilter: allow logging from non-init namespaces
2017-02-02 14:31:58 +01:00
nf_nat_core.h
netfilter: Pass net into nf_xfrm_me_harder
2015-09-18 22:00:22 +02:00
nf_nat_helper.h
netfilter: nat: nf_nat_mangle_{udp,tcp}_packet returns boolean
2017-04-06 22:01:38 +02:00
nf_nat_l3proto.h
netfilter: Pass priv instead of nf_hook_ops to netfilter hooks
2015-09-18 22:00:16 +02:00
nf_nat_l4proto.h
netfilter: built-in NAT support for UDPlite
2016-12-04 20:45:32 +01:00
nf_nat_redirect.h
netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module
2014-11-27 13:08:42 +01:00
nf_nat.h
netfilter: don't attach a nat extension by default
2017-04-26 09:30:22 +02:00
nf_queue.h
netfilter: nf_queue: only call synchronize_net twice if nf_queue is active
2017-05-01 11:19:12 +02:00
nf_socket.h
netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c
2016-11-01 20:50:31 +01:00
nf_tables_core.h
netfilter: nf_tables: keep chain counters away from hot path
2017-07-24 12:23:16 +02:00
nf_tables_ipv4.h
netfilter: merge fixup for "nf_tables_netdev: remove redundant ip_hdr assignment"
2016-10-05 20:25:48 -04:00
nf_tables_ipv6.h
netfilter: nf_tables: set pktinfo->thoff at AH header if found
2017-03-08 18:35:27 +01:00
nf_tables.h
netfilter: nf_tables: pass set description to ->privsize
2017-05-29 12:46:18 +02:00
nfnetlink_log.h
netfilter: log: netns NULL ptr bug when calling from conntrack
2013-05-15 14:11:07 +02:00
nft_dup.h
netfilter: nf_tables: add nft_dup expression
2015-08-07 11:49:49 +02:00
nft_fib.h
netfilter: nft_fib: Support existence check
2017-03-13 13:45:36 +01:00
nft_masq.h
netfilter: nft_masq: support port range
2016-03-02 20:05:27 +01:00
nft_meta.h
netfilter: nft_meta: improve the validity check of pkttype set expr
2016-08-25 13:12:03 +02:00
nft_redir.h
netfilter: nf_tables: add new expression nft_redir
2014-10-27 22:49:39 +01:00
nft_reject.h
netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT
2016-08-25 12:55:34 +02:00
xt_rateest.h
net_sched: gen_estimator: complete rewrite of rate estimators
2016-12-05 15:21:59 -05:00