summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2026-07-28 18:30:30 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2026-07-31 14:47:03 +0200
commitf19fd12143db730163ee5aa347bdc246e69f797e (patch)
tree9b55fa73b115752ab552933921282adee8e9996b
parente53932f0e5de19bff8740454ec6952df343d45bb (diff)
downloadlinux-next-f19fd12143db730163ee5aa347bdc246e69f797e.tar.gz
linux-next-f19fd12143db730163ee5aa347bdc246e69f797e.zip
netfilter: flowtable: consolidate net_device field in nft_forward_info struct
info->indev and info->outdev refer to the same device, a single info->dev field is sufficient. While at it, remove unused router parameter from the flowtable path discovery function. Acked-by: Lorenzo Bianconi <lorenzo@kernel.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r--net/netfilter/nf_flow_table_path.c20
1 files changed, 8 insertions, 12 deletions
diff --git a/net/netfilter/nf_flow_table_path.c b/net/netfilter/nf_flow_table_path.c
index 98c03b487f52..261bb44d08eb 100644
--- a/net/netfilter/nf_flow_table_path.c
+++ b/net/netfilter/nf_flow_table_path.c
@@ -42,8 +42,7 @@ static bool nft_is_valid_ether_device(const struct net_device *dev)
return true;
}
-static int nft_dev_fill_forward_path(const struct nf_flow_route *route,
- const struct dst_entry *dst_cache,
+static int nft_dev_fill_forward_path(const struct dst_entry *dst_cache,
const struct nf_conn *ct,
enum ip_conntrack_dir dir, u8 *ha,
struct net_device_path_stack *stack)
@@ -76,8 +75,7 @@ out:
}
struct nft_forward_info {
- const struct net_device *indev;
- const struct net_device *outdev;
+ const struct net_device *dev;
struct id {
__u16 id;
__be16 proto;
@@ -109,7 +107,7 @@ static int nft_dev_path_info(const struct net_device_path_stack *stack,
case DEV_PATH_VLAN:
case DEV_PATH_PPPOE:
case DEV_PATH_TUN:
- info->indev = path->dev;
+ info->dev = path->dev;
if (is_zero_ether_addr(info->h_source))
memcpy(info->h_source, path->dev->dev_addr, ETH_ALEN);
@@ -179,10 +177,9 @@ static int nft_dev_path_info(const struct net_device_path_stack *stack,
return -1;
}
}
- info->outdev = info->indev;
if (nf_flowtable_hw_offload(flowtable) &&
- nft_is_valid_ether_device(info->indev))
+ nft_is_valid_ether_device(info->dev))
info->xmit_type = FLOW_OFFLOAD_XMIT_DIRECT;
return 0;
@@ -255,17 +252,16 @@ static int nft_dev_forward_path(const struct nft_pktinfo *pkt,
unsigned char ha[ETH_ALEN];
int i;
- if (nft_dev_fill_forward_path(route, dst, ct, dir, ha, &stack) < 0 ||
+ if (nft_dev_fill_forward_path(dst, ct, dir, ha, &stack) < 0 ||
nft_dev_path_info(&stack, &info, ha, &ft->data) < 0)
return -ENOENT;
- if (!nft_flowtable_find_dev(info.indev, ft))
+ if (!nft_flowtable_find_dev(info.dev, ft))
return -ENOENT;
- if (info.outdev)
- route->tuple[dir].out.ifindex = info.outdev->ifindex;
+ route->tuple[!dir].in.ifindex = info.dev->ifindex;
+ route->tuple[dir].out.ifindex = info.dev->ifindex;
- route->tuple[!dir].in.ifindex = info.indev->ifindex;
for (i = 0; i < info.num_encaps; i++) {
route->tuple[!dir].in.encap[i].id = info.encap[i].id;
route->tuple[!dir].in.encap[i].proto = info.encap[i].proto;