Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support generic sets #185

Open
qdeslandes opened this issue Jan 21, 2025 · 0 comments
Open

Support generic sets #185

qdeslandes opened this issue Jan 21, 2025 · 0 comments
Labels
area: codegen BPF bytecode generation

Comments

@qdeslandes
Copy link
Contributor

Sets keys are defined statically: set.h contains an enumeration of valid keys, and each set type has its logic supported in the source code.

This behaviour makes sets very rigid and even useless for some users: either your key type is supported, or you need to rely on slower rules processed sequentially.

Users should be able to define set keys themselves using one or more matcher keys, for example:

chain BF_HOOK_XDP{ifindex=2} policy ACCEPT
    set
        name test_set
        key ip4.saddr ip4.dport
        values { 192.168.1.1, 22 }, { 192.168.1.1, 53 }
  rule
      [...]
@qdeslandes qdeslandes added this to the 2025 H1 Roadmap milestone Jan 21, 2025
@qdeslandes qdeslandes added the area: codegen BPF bytecode generation label Jan 21, 2025
@qdeslandes qdeslandes moved this to To do in bpfilter's roadmap Jan 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area: codegen BPF bytecode generation
Projects
Status: To do
Development

No branches or pull requests

1 participant