diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2026-04-30 16:49:51 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2026-05-01 01:23:47 +0200 |
| commit | a177ae30f78688f75ef9c6277a152c5d6979b10e (patch) | |
| tree | e5d1f8137b0472c3f8420d21339ef4479f6d00af /samples/kobject/ssh:/git@git.zx2c4.com | |
| parent | netfilter: flowtable: ensure sufficient headroom in xmit path (diff) | |
netfilter: flowtable: fix inline vlan encapsulation in xmit path
Several issues in the inline vlan support:
- The layer 2 encapsulation representation in the tuple takes encap[0] as
the outer header and encap[1] as the inner header as seen from the ingress
path. Reverse the encap loop to push first the inner then the outer vlan
header.
- Postpone pushing the layer 2 header once destination device is known.
This allows to calculate the needed hearoom via LL_RESERVED_SPACE to
accommodate the layer 2 headers.
- Add and use nf_flow_vlan_push() as suggested by Eric Woudstra, this
is a simplified version of skb_vlan_push() for egress path only.
Fixes: c653d5a78f34 ("netfilter: flowtable: inline vlan encapsulation in xmit path")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'samples/kobject/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions