Re: [PATCH net-next 8/9] openvswitch: Allow matching on conntrack label

2015-07-31 Thread Joe Stringer
On 31 July 2015 at 06:20, Florian Westphal wrote: > Joe Stringer wrote: >> +/* Load connlabel and ensure it supports 128-bit labels */ >> +static struct xt_match *load_connlabel(struct net *net) >> +{ >> +#ifdef CONFIG_NF_CONNTRACK_LABELS >> + struct xt_match *match; >> + struct xt_mtchk_

Re: [PATCH net-next 8/9] openvswitch: Allow matching on conntrack label

2015-07-31 Thread Florian Westphal
Joe Stringer wrote: > Allow matching and setting the conntrack label field. As with ct_mark, > this is populated by executing the ct() action, and is a writable field. > The set_field() action may be used to modify the label, which will take > effect on the most recent conntrack entry. > > E.g.:

[PATCH net-next 8/9] openvswitch: Allow matching on conntrack label

2015-07-30 Thread Joe Stringer
Allow matching and setting the conntrack label field. As with ct_mark, this is populated by executing the ct() action, and is a writable field. The set_field() action may be used to modify the label, which will take effect on the most recent conntrack entry. E.g.: actions:ct(zone=1),set_field(1->c