Zhe Weng f7181676b7 net: Support IP packet filter ...

Add a firewall compatible with Linux's iptables and ip6tables, with chains at similar points in the packet processing path.

NIC ─> ipv[46]_input ┬> ipv[46]_forward ─> [FORWARD] ┬> devif_poll_out ─> NIC
                     │                               │
                     │          ┌>  tcp  ┐           │
                     │          ├>  udp  ┤           │
                     └> [INPUT] ┼> icmp  ┼> [OUTPUT] ┘
                                ├> icmp6 ┤
                                └>  ...  ┘

Signed-off-by: Zhe Weng <wengzhe@xiaomi.com>

2024-06-20 09:43:05 +08:00

..

CMakeLists.txt

build: add initial cmake build system

2023-07-08 13:50:48 +08:00

ipforward.h

…

ipfwd_alloc.c

…

ipfwd_dropstats.c

net/netdev: Avoid hardcoded guardsize when using d_iob

2023-01-18 14:41:07 +08:00

ipfwd_forward.c

…

ipfwd_poll.c

…

ipv4_forward.c

net: Support IP packet filter

2024-06-20 09:43:05 +08:00

ipv6_forward.c

net: Support IP packet filter

2024-06-20 09:43:05 +08:00

Kconfig

…

Make.defs

…