delta/NetworkManager.git/src/core/nm-firewall-utils.c, branch fix-eBPF

firewall: add mlag firewall utils for multi chassis link aggregation (MLAG) for bonding-slb

2022-10-04T10:37:41+00:00

Add a way to configure MLAG NFT rules for SLB bonding.

OVS supports "bonding-slb" (source load balancing, [1]). This is
basically setting "mode=balance-xor" and "xmit_hash_policy=vlan+srcmac",
which requires no special switch configuration (like LACP). For that to
work, we need to filter out packets that the switch sends back on the
other port, for which we configure some NFT rules.

The rules are taken from mlag.sh at [2] or [3].

See-also: https://bugzilla.redhat.com/show_bug.cgi?id=1724795

[1] https://docs.openvswitch.org/en/latest/topics/bonding/#slb-bondin
[2] https://gitlab.com/egarver/virtual-networking
[3] https://gitlab.com/jtoppins_redhat/bond-slb-nft

firewall: introduce helper function for add/flush/delete nft table command

2022-09-29T12:41:59+00:00

firewall: fail from nm_firewall_nft_call() on non-zero exit code

2022-09-29T12:41:59+00:00

firewall: move logging stdin argument to nft call

2022-09-21T08:08:52+00:00

firewall: expose nm_firewall_nft_call() in header file

2022-09-21T08:08:52+00:00

firewall-utils: move _append() macro to be used by other places

2022-09-21T08:08:51+00:00

firewall/trivial: rename nm_firewall_config_apply() to nm_firewall_config_apply_sync()

2022-09-21T08:08:35+00:00

Sync/blocking methods are ugly. Their name should highlight this.
Also, we may have an async variant, so we will need the "good" name
for apply() and apply_finish().

firewall: more renaming and splitting _fw_nft_set_shared()

2022-09-19T16:51:39+00:00

Blocking calls are ugly. Rename those to have a "_sync()" suffix.
Also, split from _fw_nft_set_shared() the part that constructs the
stdin for nft.

firewall/trivial: rename nm_firewall_config_new() to nm_firewall_config_new_shared()

2022-09-19T16:51:38+00:00

firewall/trivial: rename "shared"/"add" argument in firewall utils to "up"

2022-09-19T16:51:37+00:00