mirror of
https://github.com/moby/moby.git
synced 2026-08-04 15:11:00 +00:00
7d4bb80d87
Add support for defining nftables maps and sets with size and timeout specified, which are required values for maps and sets that are updated from the packet path. Signed-off-by: Cory Snider <csnider@mirantis.com>
32 lines
531 B
Plaintext
Generated
32 lines
531 B
Plaintext
Generated
table ip this_is_a_table {
|
|
map dynamic_map {
|
|
type ipv4_addr : ether_addr
|
|
size 1024
|
|
flags dynamic,timeout
|
|
timeout 2m30s500ms
|
|
}
|
|
|
|
map this_is_a_vmap {
|
|
type ifname : verdict
|
|
elements = { "eth0" : return,
|
|
"eth1" comment "{foo}" : return }
|
|
}
|
|
|
|
set dynamic_set {
|
|
type ipv4_addr
|
|
size 4096
|
|
flags dynamic,timeout
|
|
timeout 5m10s250ms
|
|
}
|
|
|
|
set this_is_a_set {
|
|
type ipv4_addr
|
|
flags interval
|
|
}
|
|
|
|
chain a_base_chain {
|
|
type filter hook forward priority filter; policy accept;
|
|
counter packets 0 bytes 0
|
|
}
|
|
}
|