From: Florian Eckert <redacted>
Date: Tue, 8 Mar 2022 13:52:37 +0000 (+0100)
Subject: keepalived: enable nftables filtering
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=bacc3a889fc775fa3697415f078ea34337c7c491;p=openwrt-packages.git

keepalived: enable nftables filtering

Signed-off-by: Florian Eckert <redacted>
---

diff --git a/net/keepalived/Config.in b/net/keepalived/Config.in
index 0cddf09f3..862398db1 100644
--- a/net/keepalived/Config.in
+++ b/net/keepalived/Config.in
@@ -71,6 +71,15 @@ config KEEPALIVED_IPTABLES
 		Builds support for using iptables/ipsets for filtering packets
 		to VIPs
 
+config KEEPALIVED_NFTABLES
+	depends on KEEPALIVED_VRRP
+	bool
+	default y
+	prompt "Enable nftables for VIP filtering"
+	help
+		Builds support for using nftables for filtering packets
+		to VIPs
+
 config KEEPALIVED_SNMP_VRRP
 	depends on KEEPALIVED_VRRP
 	bool
diff --git a/net/keepalived/Makefile b/net/keepalived/Makefile
index ab77087b4..2e288373f 100644
--- a/net/keepalived/Makefile
+++ b/net/keepalived/Makefile
@@ -22,6 +22,7 @@ PKG_MAINTAINER:=Ben Kelly <ben@benjii.net> \
 		Florian Eckert <fe@dev.tdt.de>
 
 PKG_CONFIG_DEPENDS += \
+	KEEPALIVED_NFTABLES \
 	KEEPALIVED_VRRP \
 	KEEPALIVED_LVS \
 	KEEPALIVED_IPTABLES \
@@ -62,6 +63,7 @@ define Package/keepalived
     +libnl-genl \
     +libmagic \
     +libkmod \
+    +KEEPALIVED_NFTABLES:libnftnl \
     +KEEPALIVED_VRRP:kmod-macvlan \
     +KEEPALIVED_VRRP:libnl-route \
     +KEEPALIVED_VRRP:libnfnetlink \
@@ -87,7 +89,6 @@ endef
 
 CONFIGURE_ARGS+= \
 	--with-init=SYSV \
-	--disable-nftables \
 	--disable-track-process \
 	--runstatedir="/var/run"
 
@@ -113,6 +114,12 @@ endif
 
 
 ifeq ($(CONFIG_KEEPALIVED_VRRP),y)
+
+ifeq ($(CONFIG_KEEPALIVED_NFTABLES),)
+CONFIGURE_ARGS += \
+	--disable-nftables
+endif
+
 ifeq ($(CONFIG_KEEPALIVED_IPTABLES),)
 CONFIGURE_ARGS += \
 	--disable-iptables