• Pablo Neira Ayuso's avatar
    netfilter: nfnetlink: allow to check for generation ID · 8c4d4e8b
    Pablo Neira Ayuso authored
    This patch allows userspace to specify the generation ID that has been
    used to build an incremental batch update.
    
    If userspace specifies the generation ID in the batch message as
    attribute, then nfnetlink compares it to the current generation ID so
    you make sure that you work against the right baseline. Otherwise, bail
    out with ERESTART so userspace knows that its changeset is stale and
    needs to respin. Userspace can do this transparently at the cost of
    taking slightly more time to refresh caches and rework the changeset.
    
    This check is optional, if there is no NFNL_BATCH_GENID attribute in the
    batch begin message, then no check is performed.
    Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
    8c4d4e8b
nfnetlink.c 13.9 KB