Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Match fwmark (with log. operators) #6

Open
msune opened this issue Sep 27, 2024 · 0 comments
Open

Match fwmark (with log. operators) #6

msune opened this issue Sep 27, 2024 · 0 comments
Labels
bpf feature

Comments

@msune
Copy link
Member

msune commented Sep 27, 2024 •
edited
Loading

When sfunnel is attached in EGRESS, it would be highly interesting to be able to match fwmark. This would allow other BPF programs or iptables/nftables to select which traffic to funneled (or unfunneled in not-so-bvious use-cases).

Rule syntax would follow the ~nftables one, so:

meta mark <match_value>
meta mark & <value> == <match_value>
meta mark | <value> == <match_value>

Requirements

TODO
@msune msune added the feature label Sep 27, 2024
@msune msune mentioned this issue Sep 27, 2024
Open
@msune msune changed the title Support fwmark match (with mask) Support fwmark match (with log. operators) Sep 27, 2024
@msune msune added the bpf label Sep 27, 2024
@msune msune changed the title Support fwmark match (with log. operators) Match fwmark (with log. operators) Sep 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bpf feature
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@msune