mirror of
https://github.com/moby/moby.git
synced 2026-08-05 15:40:54 +00:00
7d4bb80d87
Add support for defining nftables maps and sets with size and timeout specified, which are required values for maps and sets that are updated from the packet path. Signed-off-by: Cory Snider <csnider@mirantis.com>
33 lines
577 B
Plaintext
Generated
33 lines
577 B
Plaintext
Generated
table ip this_is_a_table {
|
|
map dynamic_map {
|
|
type ipv4_addr : ether_addr
|
|
size 1024
|
|
flags dynamic,timeout
|
|
timeout 2m30s500ms
|
|
}
|
|
|
|
map this_is_a_vmap {
|
|
type ifname : verdict
|
|
elements = { "eth0" : return,
|
|
"eth1" comment "{foo}" : return }
|
|
}
|
|
|
|
set dynamic_set {
|
|
type ipv4_addr
|
|
size 4096
|
|
flags dynamic,timeout
|
|
timeout 5m10s250ms
|
|
}
|
|
|
|
set this_is_a_set {
|
|
type ipv4_addr
|
|
flags interval
|
|
elements = { 192.0.2.0/24 comment "}bar{" }
|
|
}
|
|
|
|
chain a_base_chain {
|
|
type filter hook forward priority filter; policy accept;
|
|
counter packets 0 bytes 0
|
|
}
|
|
}
|