HomeFreeBSD

pf: Support killing floating states by interface

Description

pf: Support killing floating states by interface

Floating states get assigned to interface 'all' (V_pfi_all), so when we
try to flush all states for an interface states originally created
through this interface are not flushed. Only if-bound states can be
flushed in this way.

Given that we track the original interface we can check if the state's
interface is 'all', and if so compare to the orig_if instead.

MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D30246

(cherry picked from commit b62489cc92edbec318fb6c57cdc02b5e3cfa3a67)

Details

Provenance
kpAuthored on May 13 2021, 7:51 AM
Differential Revision
D30246: pf: Support killing floating states by interface
Parents
rG7c15871eff23: pf: Track the original kif for floating states
Branches
Unknown
Tags
Unknown