f102d66b33
Continue to use nftnl subsys mutex to protect (un)registration of hook types, expressions and so on, but force batch operations to do their own locking. This allows distinct net namespaces to perform transactions in parallel. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
17 lines
304 B
C
17 lines
304 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef _NETNS_NFTABLES_H_
|
|
#define _NETNS_NFTABLES_H_
|
|
|
|
#include <linux/list.h>
|
|
|
|
struct netns_nftables {
|
|
struct list_head tables;
|
|
struct list_head commit_list;
|
|
struct mutex commit_mutex;
|
|
unsigned int base_seq;
|
|
u8 gencursor;
|
|
u8 validate_state;
|
|
};
|
|
|
|
#endif
|