kernel-netlink: Implement passthrough type routes and use them on Linux
Enables us to ignore any future kernel features for routes unless we actually need to consider them for the source IP routes. Also enables us to actually really skip IPsec processing for those networks (because even the routes don't touch those packets). It's more what users expect. Co-authored-by: Tobias Brunner <[email protected]>
This commit is contained in:
committed by
Tobias Brunner
co-authored by
Tobias Brunner
parent
4958acc0c2
commit
09f4bccfea
@@ -1494,7 +1494,7 @@ static status_t manage_route(private_kernel_pfroute_net_t *this, int op,
|
||||
|
||||
METHOD(kernel_net_t, add_route, status_t,
|
||||
private_kernel_pfroute_net_t *this, chunk_t dst_net, uint8_t prefixlen,
|
||||
host_t *gateway, host_t *src_ip, char *if_name)
|
||||
host_t *gateway, host_t *src_ip, char *if_name, bool pass)
|
||||
{
|
||||
status_t status;
|
||||
route_entry_t *found, route = {
|
||||
@@ -1523,7 +1523,7 @@ METHOD(kernel_net_t, add_route, status_t,
|
||||
|
||||
METHOD(kernel_net_t, del_route, status_t,
|
||||
private_kernel_pfroute_net_t *this, chunk_t dst_net, uint8_t prefixlen,
|
||||
host_t *gateway, host_t *src_ip, char *if_name)
|
||||
host_t *gateway, host_t *src_ip, char *if_name, bool pass)
|
||||
{
|
||||
status_t status;
|
||||
route_entry_t *found, route = {
|
||||
|
||||
Reference in New Issue
Block a user