mirror of
https://github.com/xdp-project/bpf-examples.git
synced 2024-05-06 15:54:53 +00:00
Add xdp-synproxy to bpf-examples
this code is from kernel bpf selftests xdp synproxy, removed the tc part for simplicity, shows an exmaple of using libxdp to attach xdp synproxy program on network interface. if port is not in allowed ports, the packet will be dropped by xdp synproxy by default, this would break tcp connections to ports that user does not want to do synproxy, change the default to allow connection pass through. Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
This commit is contained in:
@ -135,4 +135,13 @@ struct sk_buff {
|
||||
struct skb_ext *extensions;
|
||||
};
|
||||
|
||||
struct nf_conn {
|
||||
unsigned long status;
|
||||
};
|
||||
|
||||
enum ip_conntrack_status {
|
||||
/* Connection is confirmed: originating packet has left box */
|
||||
IPS_CONFIRMED_BIT = 3,
|
||||
};
|
||||
|
||||
#endif /* __VMLINUX_NET_H__ */
|
||||
|
Reference in New Issue
Block a user