Pablo Neira Ayuso 3d2f30a1df netfilter: nf_tables: add quota expression ... This patch adds the quota expression. This new stateful expression integrate easily into the dynset expression to build 'hashquota' flow tables. Arguably, we could use instead "counter bytes > 1000" instead, but this approach has several problems: 1) We only support for one single stateful expression in dynamic set definitions, and the expression above is a composite of two expressions: get counter + comparison. 2) We would need to restore the packed counter representation (that we used to have) based on seqlock to synchronize this, since per-cpu is not suitable for this. So instead of bloating the counter expression back with the seqlock representation and extending the existing set infrastructure to make it more complex for the composite described above, let's follow the more simple approach of adding a quota expression that we can plug into our existing infrastructure. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2016-08-22 11:42:18 +02:00
..
acpi	treewide: replace obsolete _refok by __ref	2016-08-02 17:31:41 -04:00
asm-generic
clocksource
crypto
drm	drm/dp: Add drm_dp_psr_setup_time()	2016-08-03 07:06:28 +10:00
dt-bindings
keys
kvm
linux	qed*: Add support for ethtool link_ksettings callbacks.	2016-08-10 17:36:02 -07:00
math-emu
media
memory
misc
net	netfilter: conntrack: simplify the code by using nf_conntrack_get_ht	2016-08-18 01:20:52 +02:00
pcmcia
ras
rdma
rxrpc
scsi
soc
sound
target
trace
uapi	netfilter: nf_tables: add quota expression	2016-08-22 11:42:18 +02:00
video
xen
Kbuild