summaryrefslogtreecommitdiffstats
path: root/net/netfilter/xt_bpf.c
AgeCommit message (Collapse)Author
2013-01-21netfilter: x_tables: add xt_bpf matchWillem de Bruijn
Support arbitrary linux socket filter (BPF) programs as x_tables match rules. This allows for very expressive filters, and on platforms with BPF JIT appears competitive with traditional hardcoded iptables rules using the u32 match. The size of the filter has been artificially limited to 64 instructions maximum to avoid bloating the size of each rule using this new match. Signed-off-by: Willem de Bruijn <willemb@google.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>