Zhe Weng f7181676b7 net: Support IP packet filter ...

Add a firewall compatible with Linux's iptables and ip6tables, with chains at similar points in the packet processing path.

NIC ─> ipv[46]_input ┬> ipv[46]_forward ─> [FORWARD] ┬> devif_poll_out ─> NIC
                     │                               │
                     │          ┌>  tcp  ┐           │
                     │          ├>  udp  ┤           │
                     └> [INPUT] ┼> icmp  ┼> [OUTPUT] ┘
                                ├> icmp6 ┤
                                └>  ...  ┘

Signed-off-by: Zhe Weng <wengzhe@xiaomi.com>

2024-06-20 09:43:05 +08:00

..

CMakeLists.txt

build: add initial cmake build system

2023-07-08 13:50:48 +08:00

ipforward.h

net/ipfwd: limit number of ipforward struct to be less than number of IOB

2022-12-09 11:20:16 +08:00

ipfwd_alloc.c

net: Author Gregory Nutt: update licenses to Apache

2021-02-20 00:38:18 -08:00

ipfwd_dropstats.c

net/netdev: Avoid hardcoded guardsize when using d_iob

2023-01-18 14:41:07 +08:00

ipfwd_forward.c

net/devif_poll: optimize device buffer alloc in txpoll

2023-01-13 16:41:10 +08:00

ipfwd_poll.c

net: move device buffer define to common header

2022-10-28 00:32:16 -04:00

ipv4_forward.c

net: Support IP packet filter

2024-06-20 09:43:05 +08:00

ipv6_forward.c

net: Support IP packet filter

2024-06-20 09:43:05 +08:00

Kconfig

net/ipfwd: limit number of ipforward struct to be less than number of IOB

2022-12-09 11:20:16 +08:00

Make.defs

Fix typos reported by codespell

2021-02-25 11:31:49 -08:00