Commit 9cf545eb authored by Florian Westphal's avatar Florian Westphal Committed by Steffen Klassert

xfrm: policy: store inexact policies in a tree ordered by destination address

This adds inexact lists per destination network, stored in a search tree.

Inexact lookups now return two 'candidate lists', the 'any' policies
('any' destionations), and a list of policies that share same
daddr/prefix.

Next patch will add a second search tree for 'saddr:any' policies
so we can avoid placing those on the 'any:any' list too.
Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
Acked-by: default avatarDavid S. Miller <davem@davemloft.net>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
parent 6be3b0db
...@@ -590,6 +590,7 @@ struct xfrm_policy { ...@@ -590,6 +590,7 @@ struct xfrm_policy {
struct xfrm_lifetime_cur curlft; struct xfrm_lifetime_cur curlft;
struct xfrm_policy_walk_entry walk; struct xfrm_policy_walk_entry walk;
struct xfrm_policy_queue polq; struct xfrm_policy_queue polq;
bool bydst_reinsert;
u8 type; u8 type;
u8 action; u8 action;
u8 flags; u8 flags;
......
This diff is collapsed.
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment