Lines Matching +full:support +full:- +full:nesting
1 .. SPDX-License-Identifier: GPL-2.0
8 flow-level packet processing on selected network devices. It can be
10 VLAN processing, network access control, flow-based network control,
26 packets of the same type entirely in-kernel).
30 ----------------------
36 might even be desirable, someday, to drop support for parsing
41 To support this forward and backward compatibility, whenever the
45 kernel-provided version:
47 - If userspace's notion of the flow key for the packet matches the
50 - If the kernel's flow key includes more fields than the userspace
55 as long as it uses the kernel-provided flow key to do it.
57 - If the userspace flow key includes more fields than the
72 ---------------
84 them as comma-separated strings, with parentheses indicating arguments
85 and nesting. For example, the following could represent a flow key
98 --------------------------
110 Support for the mask Netlink attribute is optional for both the kernel and user
115 The kernel module will also work with user space programs that neither support
133 performs best-effort detection of overlapping wildcarded flows and may reject
138 -----------------------
144 User space programs that support UFID are expected to provide it during flow
151 ---------------------------------
160 New network protocol support must only supplement existing flow
165 This rule does have less-obvious consequences so it is worth working
174 Naively, to add VLAN support, it makes sense to add a new "vlan" flow
192 example, why 802.1Q support uses nested attributes. A TCP packet in
205 --------------------------
220 packet would include a tcp attribute with all-zero src and dst, like
228 an all-zero-bits vlan and an empty encap attribute, like this::
233 all-zero-bits VLAN TCI is not that rare, so the CFI bit (aka
240 -----------
244 - Duplicate attributes are not allowed at a given nesting level.
246 - Ordering of attributes is not significant.
248 - When the kernel sends a given flow key to userspace, it always