diff options
| author | Kevin Krakauer <krakauer@google.com> | 2020-09-30 16:02:46 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-09-30 16:04:26 -0700 |
| commit | 6f8d64f4229be58814319003a397b971ca9b4e1b (patch) | |
| tree | 5ce3e40ad5e76617e288bbd89fa385b8fddcfdd1 /pkg/abi/linux | |
| parent | 7f9e13053e84b82c67c12a4964fa4703ebaa571f (diff) | |
ip6tables: redirect support
Adds support for the IPv6-compatible redirect target. Redirection is a limited
form of DNAT, where the destination is always the localhost.
Updates #3549.
PiperOrigin-RevId: 334698344
Diffstat (limited to 'pkg/abi/linux')
| -rw-r--r-- | pkg/abi/linux/netfilter_ipv6.go | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/pkg/abi/linux/netfilter_ipv6.go b/pkg/abi/linux/netfilter_ipv6.go index a137940b6..6d31eb5e3 100644 --- a/pkg/abi/linux/netfilter_ipv6.go +++ b/pkg/abi/linux/netfilter_ipv6.go @@ -321,3 +321,16 @@ const ( // Enable all flags. IP6T_INV_MASK = 0x7F ) + +// NFNATRange corresponds to struct nf_nat_range in +// include/uapi/linux/netfilter/nf_nat.h. +type NFNATRange struct { + Flags uint32 + MinAddr Inet6Addr + MaxAddr Inet6Addr + MinProto uint16 // Network byte order. + MaxProto uint16 // Network byte order. +} + +// SizeOfNFNATRange is the size of NFNATRange. +const SizeOfNFNATRange = 40 |