nf_tables: add stateful objects

Hi,

This is the v2 of the stateful object patchset that was posted earlier
this week:

	http://marc.info/?l=netfilter-devel&m=148029128323837...

Tentative userspace patchsets are available at:

http://git.netfilter.org/libnftnl/log/?h=stateful
http://git.netfilter.org/nftables/log/?h=stateful

I may still revisit userspace before upstream merge, this may result in
syntax changes, so consider the userspace patchset work-in-progress.

Comments welcome,
Thanks.

Pablo Neira Ayuso (11):
  netfilter: nf_tables: add stateful objects
  netfilter: nft_counter: add stateful object type
  netfilter: nft_quota: add stateful object type
  netfilter: nf_tables: add stateful object reference expression
  netfilter: nf_tables: atomic dump and reset for stateful objects
  netfilter: nf_tables: notify internal updates of stateful objects
  netfilter: nft_quota: dump consumed quota
  netfilter: nft_quota: add depleted flag for objects
  netfilter: nf_tables: add stateful object reference to set elements
  netfilter: nft_objref: support for stateful object maps
  netfilter: nf_tables: allow to filter stateful object dumps by type

 include/net/netfilter/nf_tables.h        |  95 +++++
 include/uapi/linux/netfilter/nf_tables.h |  64 +++
 net/netfilter/Kconfig                    |   6 +
 net/netfilter/Makefile                   |   1 +
 net/netfilter/nf_tables_api.c            | 661 ++++++++++++++++++++++++++++++-
 net/netfilter/nft_counter.c              | 163 ++++++--
 net/netfilter/nft_objref.c               | 226 +++++++++++
 net/netfilter/nft_quota.c                | 147 ++++++-
 8 files changed, 1298 insertions(+), 65 deletions(-)
 create mode 100644 net/netfilter/nft_objref.c

-- 
2.1.4

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html