net 04/05: fib_rules: allow to delete local rule

commit d124356ce314fff22a047ea334379d5105b2d834
Author: Patrick McHardy <kaber@trash.net>
Date:   Thu Dec 3 12:16:35 2009 +0100

    net: fib_rules: allow to delete local rule

    Allow to delete the local rule and recreate it with a higher priority. This
    can be used to force packets with a local destination out on the wire instead
    of routing them to loopback. Additionally this patch allows to recreate rules
    with a priority of 0.

    Combined with the previous patch to allow oif classification, a socket can
    be bound to the desired interface and packets routed to the wire like this:

    # move local rule to lower priority
    ip rule add pref 1000 lookup local
    ip rule del pref 0

    # route packets of sockets bound to eth0 to the wire independant
    # of the destination address
    ip rule add pref 100 oif eth0 lookup 100
    ip route add default dev eth0 table 100

    Signed-off-by: Patrick McHardy <kaber@trash.net>

Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Patrick McHardy 2009-12-03 01:25:57 +00:00 committed by David S. Miller
parent 1b038a5e60
commit 5adef18091
3 changed files with 3 additions and 3 deletions

View file

@ -287,7 +287,7 @@ static int fib_nl_newrule(struct sk_buff *skb, struct nlmsghdr* nlh, void *arg)
rule->flags = frh->flags; rule->flags = frh->flags;
rule->table = frh_get_table(frh, tb); rule->table = frh_get_table(frh, tb);
if (!rule->pref && ops->default_pref) if (!tb[FRA_PRIORITY] && ops->default_pref)
rule->pref = ops->default_pref(ops); rule->pref = ops->default_pref(ops);
err = -EINVAL; err = -EINVAL;

View file

@ -284,7 +284,7 @@ static int fib_default_rules_init(struct fib_rules_ops *ops)
{ {
int err; int err;
err = fib_default_rule_add(ops, 0, RT_TABLE_LOCAL, FIB_RULE_PERMANENT); err = fib_default_rule_add(ops, 0, RT_TABLE_LOCAL, 0);
if (err < 0) if (err < 0)
return err; return err;
err = fib_default_rule_add(ops, 0x7FFE, RT_TABLE_MAIN, 0); err = fib_default_rule_add(ops, 0x7FFE, RT_TABLE_MAIN, 0);

View file

@ -276,7 +276,7 @@ static int fib6_rules_net_init(struct net *net)
INIT_LIST_HEAD(&net->ipv6.fib6_rules_ops->rules_list); INIT_LIST_HEAD(&net->ipv6.fib6_rules_ops->rules_list);
err = fib_default_rule_add(net->ipv6.fib6_rules_ops, 0, err = fib_default_rule_add(net->ipv6.fib6_rules_ops, 0,
RT6_TABLE_LOCAL, FIB_RULE_PERMANENT); RT6_TABLE_LOCAL, 0);
if (err) if (err)
goto out_fib6_rules_ops; goto out_fib6_rules_ops;