nfp/flower/conntrack.c

61 	struct flow_match_ct ct;
65 		flow_rule_match_ct(rule, &ct);
66 		if (ct.key->ct_state)
75 			/* The pre_ct rule only have the ct or ct nat action, cannot
76 			 * contains other ct action e.g ct commit and so on.
78 			if ((!act->ct.action || act->ct.action == TCA_CT_ACT_NAT))
94 	struct flow_match_ct ct;
98 		flow_rule_match_ct(rule, &ct);
99 		if (ct.key->ct_state & TCA_FLOWER_KEY_CT_FLAGS_ESTABLISHED)
102 		/* post ct entry cannot contains any ct action except ct_clear. */
105 				/* ignore ct clear action. */
106 				if (act->ct.action == TCA_CT_ACT_CLEAR) {
114 		/* when do nat with ct, the post ct entry ignore the ct status,
116 		 * the flow chain index is not zero and contains ct clear action.
277 		/* n_proto field is a must in ct-related flows,
289 	/* if pre ct entry do nat, the nat ip exists in nft entry,
290 	 * will be do merge check when do nft and post ct merge,
311 	/* if pre ct entry do nat, the nat ip exists in nft entry,
312 	 * will be do merge check when do nft and post ct merge,
333 	/* if pre ct entry do nat, the nat tport exists in nft entry,
334 	 * will be do merge check when do nft and post ct merge,
526 /* Extra check for multiple ct-zones merge
589 	struct flow_match_ct ct;
597 		flow_rule_match_ct(post_ct_entry->rule, &ct);
599 			if ((ct.key->ct_labels[i] & ct.mask->ct_labels[i]) ^
600 			    (act_lbl[i] & ct.mask->ct_labels[i]))
604 		if ((ct.key->ct_mark & ct.mask->ct_mark) ^
605 		    (ct_met->ct_metadata.mark & ct.mask->ct_mark))
610 		/* post_ct with ct clear action will not match the
611 		 * ct status when nft is nat entry.
774 				/* nft entry is generated by tc ct, which mangle action do not care
1463 		if (act->ct.action == TCA_CT_ACT_NAT)
1572 	/* Now add a ct map entry to flower-priv */
1577 				   "offload error: ct map entry creation failed");
1588 				   "offload error: ct map entry table add failed");
1740 	/* More than one ct action may be present in a flow rule,
1744 		if (act->id == FLOW_ACTION_CT && act->ct.action != TCA_CT_ACT_CLEAR)
1830 	zt = get_nfp_zone_entry(priv, ct_act->ct.zone, false);
1838 		zt->nft = ct_act->ct.flow_table;
1891 	struct flow_match_ct ct;
1912 	flow_rule_match_ct(rule, &ct);
1913 	if (!ct.mask->ct_zone) {
1915 	} else if (ct.mask->ct_zone != U16_MAX) {
1921 	zt = get_nfp_zone_entry(priv, ct.key->ct_zone, wildcarded);