Thread (2 messages) 2 messages, 2 authors, 2019-07-31

Re: [PATCH nf,v2] netfilter: nf_tables: map basechain priority to hardware priority

From: Jakub Kicinski <hidden>
Date: 2019-07-31 22:58:03
Also in: netfilter-devel

On Wed, 31 Jul 2019 14:16:56 +0200, Pablo Neira Ayuso wrote:
This patch adds initial support for offloading basechains using the
priority range from -8192 to 8191.

The software priority -8192 is mapped to the hardware priority
0xC000 + 1. tcf_auto_prio() uses 0xC000 if the user specifies no
priority, then it subtracts 1 for each new tcf_proto object. This patch
reserves the hardware priority range from 0xC000 to 0xFFFF for
netfilter.

The software to hardware priority mapping is not exposed to userspace,
so it should be possible to update this / extend the range of supported
priorities later on.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
I don't know the nft code, so perhaps my question on v1
was nonsensical, nonetheless I'd appreciate a response.
NFT referring to tcf_auto_prio() is a bit of a red flag.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help