[Cerowrt-devel] Fwd: [PATCH net-next] ifb: Depend on netfilter alternatively to tc

[Cerowrt-devel] Fwd: [PATCH net-next] ifb: Depend on netfilter alternatively to tc

[Dave Taht]

any benefits to getting away from mirred?

---------- Forwarded message ---------
From: Lukas Wunner <lukas@wunner.de>
Date: Tue, Oct 26, 2021 at 12:11 AM
Subject: [PATCH net-next] ifb: Depend on netfilter alternatively to tc
To: David S. Miller <davem@davemloft.net>, Jakub Kicinski <kuba@kernel.org>
Cc: Pablo Neira Ayuso <pablo@netfilter.org>, Jozsef Kadlecsik
<kadlec@netfilter.org>, Florian Westphal <fw@strlen.de>,
<netfilter-devel@vger.kernel.org>, <coreteam@netfilter.org>,
<netdev@vger.kernel.org>, Jamal Hadi Salim <jhs@mojatatu.com>, Cong
Wang <xiyou.wangcong@gmail.com>, Jiri Pirko <jiri@resnulli.us>, Daniel
Borkmann <daniel@iogearbox.net>, Willem de Bruijn <willemb@google.com>


IFB originally depended on NET_CLS_ACT for traffic redirection.
But since v4.5, that may be achieved with NFT_FWD_NETDEV as well.

Fixes: 39e6dea28adc ("netfilter: nf_tables: add forward expression to
the netdev family")
Signed-off-by: Lukas Wunner <lukas@wunner.de>
Cc: <stable@vger.kernel.org> # v4.5+: bcfabee1afd9: netfilter:
nft_fwd_netdev: allow to redirect to ifb via ingress
Cc: <stable@vger.kernel.org> # v4.5+
---
 drivers/net/Kconfig | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/net/Kconfig b/drivers/net/Kconfig
index f37b1c56f7c4..dd335ae1122b 100644
--- a/drivers/net/Kconfig
+++ b/drivers/net/Kconfig
@@ -150,7 +150,7 @@ config NET_FC

 config IFB
        tristate "Intermediate Functional Block support"
-       depends on NET_CLS_ACT
+       depends on NET_ACT_MIRRED || NFT_FWD_NETDEV
        select NET_REDIRECT
        help
          This is an intermediate driver that allows sharing of
--
2.31.1



-- 
Fixing Starlink's Latencies: https://www.youtube.com/watch?v=c9gLo6Xrwgw

Dave Täht CEO, TekLibre, LLC