linux.git/include/net/netns/ipv4.h, branch v2.6.25

[NETFILTER]: arp_tables: per-netns arp_tables FILTER

2008-02-01T03:27:41+00:00

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: ip_tables: per-netns FILTER, MANGLE, RAW

2008-02-01T03:27:38+00:00

Now, iptables show and configure different set of rules in different
netnss'. Filtering decisions are still made by consulting only
init_net's set.

Changes are identical except naming so no splitting.

P.S.: one need to remove init_net checks in nf_sockopt.c and inet_create()
      to see the effect.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETNS][FRAGS]: Duplicate sysctl tables for new namespaces.

2008-01-28T23:10:37+00:00

Each namespace has to have own tables to tune their
different parameters, so duplicate the tables and
register them.

All the tables in sub-namespaces are temporarily made
read-only.

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

[NETNS][FRAGS]: Make the inet_frag_queue lookup work in namespaces.

2008-01-28T23:10:34+00:00

Since fragment management code is consolidated, we cannot have the
pointer from inet_frag_queue to struct net, since we must know what
king of fragment this is.

So, I introduce the netns_frags structure. This one is currently
empty, but will be eventually filled with per-namespace
attributes. Each inet_frag_queue is tagged with this one.

The conntrack_reasm is not "netns-izated", so it has one static
netns_frags instance to keep working in init namespace.

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

[NETNS]: Provide correct namespace for fibnl netlink socket.

2008-01-28T23:01:32+00:00

This patch makes the netlink socket to be per namespace. That allows
to have each namespace its own socket for routing queries.

Acked-by: Benjamin Thery 
Acked-by: Daniel Lezcano 
Signed-off-by: Denis V. Lunev 
Signed-off-by: David S. Miller

[NETNS]: Place fib tables into netns.

2008-01-28T23:01:31+00:00

The preparatory work has been done. All we need is to substitute
fib_table_hash with net->ipv4.fib_table_hash. Netns context is
available when required.

Acked-by: Benjamin Thery 
Acked-by: Daniel Lezcano 
Signed-off-by: Denis V. Lunev 
Signed-off-by: David S. Miller

[NETNS]: Namespacing IPv4 fib rules.

2008-01-28T23:01:31+00:00

The final trick for rules: place fib4_rules_ops into struct net and
modify initialization path for this.

Acked-by: Benjamin Thery 
Acked-by: Daniel Lezcano 
Signed-off-by: Denis V. Lunev 
Signed-off-by: David S. Miller

[NETNS]: Should build with CONFIG_SYSCTL=n

2008-01-28T23:00:40+00:00

Previous NETNS patches broke CONFIG_SYSCTL=n case

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

[IPV4]: Move the devinet pointers on the struct net

2008-01-28T22:58:11+00:00

This is the core.

Add all and default pointers on the netns_ipv4 and register
a new pernet subsys to initialize them.

Also add the ctl_table_header to register the
net.ipv4.ip_forward ctl.

I don't allocate additional memory for init_net, but use
global devinets.

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller

[NETNS]: Add the netns_ipv4 struct

2008-01-28T22:58:08+00:00

The ipv4 will store its parameters inside this structure.
This one is empty now, but it will be eventually filled.

Signed-off-by: Pavel Emelyanov 
Signed-off-by: David S. Miller