Re: [OpenWrt-Devel] nftables development and support in openwrt

2014-12-18 Thread Tomer Eliyahu
> Notify whom? I mean we could probably notify someone or something when the > high-level openwrt firewall > is reloaded. In fact there is already a user-script hook. Notify a kernel module that the firewall configuration has changed. The user script is called only when the firewall is restarted

Re: [OpenWrt-Devel] nftables development and support in openwrt

2014-12-15 Thread Steven Barth
You are right. I asked it in the netfilter-devel mailing list - libipct was never meant to be used as a public interface: http://www.netfilter.org/documentation/FAQ/netfilter-faq-4.html#ss4.5 Meh, absent of anything else it de-facto is anyway, see e.g. squid, miniupnpd and others using it as we

Re: [OpenWrt-Devel] nftables development and support in openwrt

2014-12-15 Thread Tomer Eliyahu
Hi Steven, > afaik - and please correct me if I'm wrong - that works only for the > iptables CLI command, however our firewall tool currently uses libiptables > directly so I don't think it would work easily. You are right. I asked it in the netfilter-devel mailing list - libipct was never meant

Re: [OpenWrt-Devel] nftables development and support in openwrt

2014-12-14 Thread Steven Barth
Hi Tomer, Regarding the firewall package - its probably a dumb question, but isn't this the reason for nftables' compatibility layer? (http://git.netfilter.org/iptables-nftables/) afaik - and please correct me if I'm wrong - that works only for the iptables CLI command, however our firewal

Re: [OpenWrt-Devel] nftables development and support in openwrt

2014-12-14 Thread Tomer Eliyahu
Hi Steven, Thanks for answering so quickly - I'll try to play with nft and help with testing. Regarding the firewall package - its probably a dumb question, but isn't this the reason for nftables' compatibility layer? ( http://git.netfilter.org/iptables-nftables/) Best Regards, Tomer On Dec 14,

Re: [OpenWrt-Devel] nftables development and support in openwrt

2014-12-14 Thread Steven Barth
Hi Tomer, I am currently working on a kernel module which offloads traffic from the Networking stack. This is part of a project which optimizes IP forwarding for low end routers that have weak CPU and low on memory. Sounds interesting. Other approaches of speeding up forwarding are btw. also

[OpenWrt-Devel] nftables development and support in openwrt

2014-12-14 Thread Tomer Eliyahu
Hi, My name is Tomer and I'm a software engineer specializing in embedded linux kernel networking. I am currently working on a kernel module which offloads traffic from the Networking stack. This is part of a project which optimizes IP forwarding for low end routers that have weak CPU and low on