Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

keepalived: enable nftables filtering

Browse source 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
This commit is contained in:
Florian Eckert 2022-03-08 14:52:37 +01:00
parent 94fb0da32c
commit bacc3a889f
2 changed files with 17 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
net/keepalived/Config.in
View file

@ -71,6 +71,15 @@ config KEEPALIVED_IPTABLES
Builds support for using iptables/ipsets for filtering packets Builds support for using iptables/ipsets for filtering packets
to VIPs to VIPs
config KEEPALIVED_NFTABLES
depends on KEEPALIVED_VRRP
bool
default y
prompt "Enable nftables for VIP filtering"
help
Builds support for using nftables for filtering packets
to VIPs
config KEEPALIVED_SNMP_VRRP config KEEPALIVED_SNMP_VRRP
depends on KEEPALIVED_VRRP depends on KEEPALIVED_VRRP
bool bool

9
net/keepalived/Makefile
View file

@ -22,6 +22,7 @@ PKG_MAINTAINER:=Ben Kelly <ben@benjii.net> \
Florian Eckert <fe@dev.tdt.de> Florian Eckert <fe@dev.tdt.de>
PKG_CONFIG_DEPENDS += \ PKG_CONFIG_DEPENDS += \
KEEPALIVED_NFTABLES \
KEEPALIVED_VRRP \ KEEPALIVED_VRRP \
KEEPALIVED_LVS \ KEEPALIVED_LVS \
KEEPALIVED_IPTABLES \ KEEPALIVED_IPTABLES \
@ -62,6 +63,7 @@ define Package/keepalived
+libnl-genl \ +libnl-genl \
+libmagic \ +libmagic \
+libkmod \ +libkmod \
+KEEPALIVED_NFTABLES:libnftnl \
+KEEPALIVED_VRRP:kmod-macvlan \ +KEEPALIVED_VRRP:kmod-macvlan \
+KEEPALIVED_VRRP:libnl-route \ +KEEPALIVED_VRRP:libnl-route \
+KEEPALIVED_VRRP:libnfnetlink \ +KEEPALIVED_VRRP:libnfnetlink \
@ -87,7 +89,6 @@ endef
CONFIGURE_ARGS+= \ CONFIGURE_ARGS+= \
--with-init=SYSV \ --with-init=SYSV \
--disable-nftables \
--disable-track-process \ --disable-track-process \
--runstatedir="/var/run" --runstatedir="/var/run"
@ -113,6 +114,12 @@ endif
ifeq ($(CONFIG_KEEPALIVED_VRRP),y) ifeq ($(CONFIG_KEEPALIVED_VRRP),y)
ifeq ($(CONFIG_KEEPALIVED_NFTABLES),)
CONFIGURE_ARGS += \
--disable-nftables
endif
ifeq ($(CONFIG_KEEPALIVED_IPTABLES),) ifeq ($(CONFIG_KEEPALIVED_IPTABLES),)
CONFIGURE_ARGS += \ CONFIGURE_ARGS += \
--disable-iptables --disable-iptables