Re: [PATCH nf,v2] netfilter: nf_tables: map basechain priority to hardware priority
From: Jakub Kicinski <hidden>
Date: 2019-07-31 22:58:03
Also in:
netfilter-devel
From: Jakub Kicinski <hidden>
Date: 2019-07-31 22:58:03
Also in:
netfilter-devel
On Wed, 31 Jul 2019 14:16:56 +0200, Pablo Neira Ayuso wrote:
This patch adds initial support for offloading basechains using the priority range from -8192 to 8191. The software priority -8192 is mapped to the hardware priority 0xC000 + 1. tcf_auto_prio() uses 0xC000 if the user specifies no priority, then it subtracts 1 for each new tcf_proto object. This patch reserves the hardware priority range from 0xC000 to 0xFFFF for netfilter. The software to hardware priority mapping is not exposed to userspace, so it should be possible to update this / extend the range of supported priorities later on. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
I don't know the nft code, so perhaps my question on v1 was nonsensical, nonetheless I'd appreciate a response. NFT referring to tcf_auto_prio() is a bit of a red flag.