Commit 34e406a8 authored by Ido Schimmel's avatar Ido Schimmel Committed by Jakub Kicinski
Browse files

net: fib_rules: Enable port mask usage 



Allow user space to configure FIB rules that match on the source and
destination ports with a mask, now that support has been added to the
FIB rule core and the IPv4 and IPv6 address families.

Reviewed-by: default avatarPetr Machata <petrm@nvidia.com>
Signed-off-by: default avatarIdo Schimmel <idosch@nvidia.com>
Reviewed-by: default avatarGuillaume Nault <gnault@redhat.com>
Reviewed-by: default avatarDavid Ahern <dsahern@kernel.org>
Link: https://patch.msgid.link/20250217134109.311176-6-idosch@nvidia.com


Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
parent fc1266a0

net/core/fib_rules.c

+2 −2
Original line number Diff line number Diff line
@@ -843,8 +843,8 @@ static const struct nla_policy fib_rule_policy[FRA_MAX + 1] = { 
	[FRA_DSCP]	= NLA_POLICY_MAX(NLA_U8, INET_DSCP_MASK >> 2),

	[FRA_FLOWLABEL] = { .type = NLA_BE32 },

	[FRA_FLOWLABEL_MASK] = { .type = NLA_BE32 },

	[FRA_SPORT_MASK] = { .type = NLA_REJECT },

	[FRA_DPORT_MASK] = { .type = NLA_REJECT },

	[FRA_SPORT_MASK] = { .type = NLA_U16 },

	[FRA_DPORT_MASK] = { .type = NLA_U16 },

};



int fib_newrule(struct net *net, struct sk_buff *skb, struct nlmsghdr *nlh,