1. 15 Apr, 2019 4 commits
    • Ido Schimmel's avatar
      mlxsw: spectrum_router: Add neighbour offload indication · caf345a1
      Ido Schimmel authored
      In a similar fashion to routes and FDB entries, the neighbour table is
      reflected to the device.
      
      Set an offload indication on the neighbour in case it was programmed to
      the device.
      Signed-off-by: default avatarIdo Schimmel <idosch@mellanox.com>
      Acked-by: default avatarJiri Pirko <jiri@mellanox.com>
      Reviewed-by: default avatarDavid Ahern <dsahern@gmail.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      caf345a1
    • Ido Schimmel's avatar
      mlxsw: spectrum_router: Propagate neighbour update errors · a85e84e0
      Ido Schimmel authored
      Next patch will add offload indication to neighbours, but the indication
      should only be altered in case the neighbour was successfully added to /
      deleted from the device.
      
      Propagate neighbour update errors, so that they could be taken into
      account by the next patch.
      Signed-off-by: default avatarIdo Schimmel <idosch@mellanox.com>
      Acked-by: default avatarJiri Pirko <jiri@mellanox.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      a85e84e0
    • David S. Miller's avatar
      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next · 95337b98
      David S. Miller authored
      Pablo Neira Ayuso says:
      
      ====================
      Netfilter/IPVS updates for net-next
      
      The following patchset contains Netfilter updates for net-next:
      
      1) Remove the broute pseudo hook, implement this from the bridge
         prerouting hook instead. Now broute becomes real table in ebtables,
         from Florian Westphal. This also includes a size reduction patch for the
         bridge control buffer area via squashing boolean into bitfields and
         a selftest.
      
      2) Add OS passive fingerprint version matching, from Fernando Fernandez.
      
      3) Support for gue encapsulation for IPVS, from Jacky Hu.
      
      4) Add support for NAT to the inet family, from Florian Westphal.
         This includes support for masquerade, redirect and nat extensions.
      
      5) Skip interface lookup in flowtable, use device in the dst object.
      
      6) Add jiffies64_to_msecs() and use it, from Li RongQing.
      
      7) Remove unused parameter in nf_tables_set_desc_parse(), from Colin Ian King.
      
      8) Statify several functions, patches from YueHaibing and Florian Westphal.
      
      9) Add an optimized version of nf_inet_addr_cmp(), from Li RongQing.
      
      10) Merge route extension to core, also from Florian.
      
      11) Use IS_ENABLED(CONFIG_NF_NAT) instead of NF_NAT_NEEDED, from Florian.
      
      12) Merge ip/ip6 masquerade extensions, from Florian. This includes
          netdevice notifier unification.
      ====================
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      95337b98
    • Stephen Rothwell's avatar
      bridge: only include nf_queue.h if needed · dc2f4189
      Stephen Rothwell authored
      After merging the netfilter-next tree, today's linux-next build (powerpc
      ppc44x_defconfig) failed like this:
      
      In file included from net/bridge/br_input.c:19:
      include/net/netfilter/nf_queue.h:16:23: error: field 'state' has incomplete type
        struct nf_hook_state state;
                             ^~~~~
      
      Fixes: 971502d7 ("bridge: netfilter: unroll NF_HOOK helper in bridge input path")
      Signed-off-by: default avatarStephen Rothwell <sfr@canb.auug.org.au>
      Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
      dc2f4189
  2. 14 Apr, 2019 21 commits
  3. 13 Apr, 2019 13 commits
  4. 12 Apr, 2019 2 commits