Difference between revisions of "List of updates since Linux kernel 3.13"

From nftables wiki
Jump to navigation Jump to search
(add 4.16 reference)
(sort in reverse order)
Line 1: Line 1:
A listing of the development progress.
A listing of the development progress.


== 3.13 ==
== 4.16 ==


* nf_tables merged mainstream.
* flowtable support


== 3.14 ==
== 4.15 ==


* set packet mark support.
* Fetch single elements of a set (i.e, nft get element)
* nfqueue support (only for ip and ip6 families).
* rule tracing support.
* IPv6 and inet reject support.


== 3.15 ==
== 4.10 ==


* Comments per rule support.
* notrack support
* IPv4 reject support.


== 3.16 ==
== 4.3 ==


* connlabel support.
* Enhancements for the limit expression, support for ratelimit bytes/time unit.
* Dup expression (equivalent to the ''TEE'' target in iptables) for IPv4 and IPv6.
* VLAN header matching support when NIC support offloads.


== 3.17 ==
== 4.2 ==


* log and nflog support for ip, ip6, arp and bridge families.
* New 'netdev' family for filtering from ingress.
* Context to x_tables extensions to know if they run from nft_compat.


== 3.18 ==
== 4.1 ==


* masquerading support.
Major updates in the generic set infrastructure:
* meta cpu, devgroup matching.
* reject bridge support.
* destroy table and its content, ie. ''nft flush ruleset''.


== 3.19 ==
* Concatenations.
 
* Timeout per set elements.
* redirect support.
* Comments per set elements.
* Dynamic set instantiation.


== 4.0 ==
== 4.0 ==
Line 40: Line 37:
* Mostly fixes.
* Mostly fixes.


== 4.1 ==
== 3.19 ==
 
* redirect support.


Major updates in the generic set infrastructure:
== 3.18 ==


* Concatenations.
* masquerading support.
* Timeout per set elements.
* meta cpu, devgroup matching.
* Comments per set elements.
* reject bridge support.
* Dynamic set instantiation.
* destroy table and its content, ie. ''nft flush ruleset''.


== 4.2 ==
== 3.17 ==


* New 'netdev' family for filtering from ingress.
* log and nflog support for ip, ip6, arp and bridge families.
* Context to x_tables extensions to know if they run from nft_compat.


== 4.3 ==
== 3.16 ==


* Enhancements for the limit expression, support for ratelimit bytes/time unit.
* connlabel support.
* Dup expression (equivalent to the ''TEE'' target in iptables) for IPv4 and IPv6.
* VLAN header matching support when NIC support offloads.


== 4.10 ==
== 3.15 ==


* notrack support
* Comments per rule support.
* IPv4 reject support.


== 4.15 ==
== 3.14 ==


* Fetch single elements of a set (i.e, nft get element)
* set packet mark support.
* nfqueue support (only for ip and ip6 families).
* rule tracing support.
* IPv6 and inet reject support.


== 4.16 ==
== 3.13 ==


* flowtable support
* nf_tables merged mainstream.

Revision as of 11:05, 3 September 2020

A listing of the development progress.

4.16

  • flowtable support

4.15

  • Fetch single elements of a set (i.e, nft get element)

4.10

  • notrack support

4.3

  • Enhancements for the limit expression, support for ratelimit bytes/time unit.
  • Dup expression (equivalent to the TEE target in iptables) for IPv4 and IPv6.
  • VLAN header matching support when NIC support offloads.

4.2

  • New 'netdev' family for filtering from ingress.
  • Context to x_tables extensions to know if they run from nft_compat.

4.1

Major updates in the generic set infrastructure:

  • Concatenations.
  • Timeout per set elements.
  • Comments per set elements.
  • Dynamic set instantiation.

4.0

  • Mostly fixes.

3.19

  • redirect support.

3.18

  • masquerading support.
  • meta cpu, devgroup matching.
  • reject bridge support.
  • destroy table and its content, ie. nft flush ruleset.

3.17

  • log and nflog support for ip, ip6, arp and bridge families.

3.16

  • connlabel support.

3.15

  • Comments per rule support.
  • IPv4 reject support.

3.14

  • set packet mark support.
  • nfqueue support (only for ip and ip6 families).
  • rule tracing support.
  • IPv6 and inet reject support.

3.13

  • nf_tables merged mainstream.