Commit 4143719d authored by JackV's avatar JackV

Nftables section

parent 00b88cef
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Created with Inkscape (http://www.inkscape.org/) -->
<svg
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:cc="http://creativecommons.org/ns#"
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
xmlns:svg="http://www.w3.org/2000/svg"
xmlns="http://www.w3.org/2000/svg"
xmlns:xlink="http://www.w3.org/1999/xlink"
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
width="1450"
height="475"
id="svg2"
sodipodi:version="0.32"
inkscape:version="0.48.4 r9939"
version="1.0"
sodipodi:docname="nf-packet-flow.svg"
inkscape:output_extension="org.inkscape.output.svg.inkscape"
inkscape:export-filename="/home/jengelh/pub/images/nf-packet-flow.png"
inkscape:export-xdpi="149.71034"
inkscape:export-ydpi="149.71034">
<defs
id="defs4">
<linearGradient
id="linearGradient4281">
<stop
id="stop4283"
offset="0"
style="stop-color:#cfcfcf;stop-opacity:1;" />
<stop
id="stop4285"
offset="1"
style="stop-color:#3f3f3f;stop-opacity:1;" />
</linearGradient>
<linearGradient
id="linearGradient4094">
<stop
id="stop4096"
offset="0"
style="stop-color:#fffe99;stop-opacity:1;" />
<stop
id="stop4098"
offset="1"
style="stop-color:#ffffe1;stop-opacity:1;" />
</linearGradient>
<inkscape:perspective
sodipodi:type="inkscape:persp3d"
inkscape:vp_x="0 : 500 : 1"
inkscape:vp_y="0 : 1000 : 0"
inkscape:vp_z="1600 : 500 : 1"
inkscape:persp3d-origin="800 : 333.33333 : 1"
id="perspective331" />
<linearGradient
id="linearGradient4843">
<stop
style="stop-color:#ff99bd;stop-opacity:1;"
offset="0"
id="stop4845" />
<stop
style="stop-color:#ffe1ec;stop-opacity:1;"
offset="1"
id="stop4847" />
</linearGradient>
<linearGradient
id="linearGradient4827">
<stop
style="stop-color:#81b9ff;stop-opacity:1;"
offset="0"
id="stop4829" />
<stop
style="stop-color:#e1efff;stop-opacity:1;"
offset="1"
id="stop4831" />
</linearGradient>
<linearGradient
id="linearGradient4819">
<stop
style="stop-color:#c1ffa6;stop-opacity:1;"
offset="0"
id="stop4821" />
<stop
style="stop-color:#ebffe1;stop-opacity:1;"
offset="1"
id="stop4823" />
</linearGradient>
<linearGradient
id="linearGradient3422">
<stop
style="stop-color:#ffffff;stop-opacity:1;"
offset="0"
id="stop3424" />
<stop
style="stop-color:#d0d0d0;stop-opacity:1;"
offset="1"
id="stop3426" />
</linearGradient>
<linearGradient
id="linearGradient3414">
<stop
style="stop-color:#8080ff;stop-opacity:1;"
offset="0"
id="stop3416" />
<stop
style="stop-color:#0000a0;stop-opacity:1;"
offset="1"
id="stop3418" />
</linearGradient>
<linearGradient
id="linearGradient3406">
<stop
style="stop-color:#bdff99;stop-opacity:1;"
offset="0"
id="stop3408" />
<stop
style="stop-color:#00e000;stop-opacity:1;"
offset="1"
id="stop3410" />
</linearGradient>
<marker
inkscape:stockid="Arrow2Mend"
orient="auto"
refY="0"
refX="0"
id="Arrow2Mend"
style="overflow:visible">
<path
id="path3563"
style="font-size:12px;fill-rule:evenodd;stroke-width:0.625;stroke-linejoin:round"
d="M 8.7185878,4.0337352 -2.2072895,0.01601326 8.7185884,-4.0017078 c -1.7454984,2.3720609 -1.7354408,5.6174519 -6e-7,8.035443 z"
transform="scale(-0.6,-0.6)"
inkscape:connector-curvature="0" />
</marker>
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient3414"
id="linearGradient3425"
gradientUnits="userSpaceOnUse"
x1="350.0625"
y1="776.875"
x2="350.0625"
y2="787"
gradientTransform="matrix(0.9876543,0,0,1.0126582,-315.74074,-106.314)" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient3406"
id="linearGradient4398"
gradientUnits="userSpaceOnUse"
x1="649.9375"
y1="776.875"
x2="649.9375"
y2="787.25"
gradientTransform="matrix(1.0126582,0,0,0.9876543,-628.16456,-106.88593)" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient4819"
id="linearGradient4825"
x1="185"
y1="541.47852"
x2="185"
y2="666.47852"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(35,198.52148)" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient4827"
id="linearGradient4833"
x1="185"
y1="676.47852"
x2="185"
y2="766.47852"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(35,198.52148)" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient4094"
id="linearGradient4849"
x1="185"
y1="226.47852"
x2="185"
y2="271.47852"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(35,458.52148)" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient4281"
id="linearGradient3307"
gradientUnits="userSpaceOnUse"
gradientTransform="matrix(0.2,0,0,0.28571429,-120,358)"
x1="750"
y1="776.875"
x2="750"
y2="812.125" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient4843"
id="linearGradient4092"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(35,388.52148)"
x1="185"
y1="226.47852"
x2="185"
y2="271.47852" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient3414"
id="linearGradient4234"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(-50,148.52148)"
x1="370"
y1="776.875"
x2="370"
y2="787.125" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient3406"
id="linearGradient4236"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(-90,148.52148)"
x1="670"
y1="776.47852"
x2="670"
y2="786.47852" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient3422"
id="linearGradient4238"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(-90,148.52148)"
x1="670"
y1="786.47852"
x2="670"
y2="806.47852" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient3422"
id="linearGradient4240"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(-105,148)"
x1="750"
y1="777"
x2="750"
y2="807" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient3422"
id="linearGradient4275"
gradientUnits="userSpaceOnUse"
gradientTransform="matrix(0.2,0,0,0.28571429,-120,378)"
x1="750"
y1="776.875"
x2="750"
y2="812.125" />
<linearGradient
inkscape:collect="always"
xlink:href="#linearGradient4281"
id="linearGradient4291"
gradientUnits="userSpaceOnUse"
gradientTransform="translate(-300,53)"
x1="750"
y1="777"
x2="750"
y2="807" />
</defs>
<sodipodi:namedview
id="base"
pagecolor="#ffffff"
bordercolor="#666666"
borderopacity="1.0"
gridtolerance="10000"
guidetolerance="10"
objecttolerance="50"
inkscape:pageopacity="0.0"
inkscape:pageshadow="2"
inkscape:zoom="1.1"
inkscape:cx="374.73444"
inkscape:cy="169.4464"
inkscape:document-units="px"
inkscape:current-layer="layer4"
width="1510px"
height="1052px"
showgrid="false"
inkscape:object-bbox="false"
inkscape:object-points="false"
inkscape:object-nodes="false"
inkscape:grid-points="true"
inkscape:window-width="1280"
inkscape:window-height="1001"
inkscape:window-x="0"
inkscape:window-y="0"
units="px"
showguides="true"
inkscape:guide-bbox="true"
inkscape:window-maximized="1">
<inkscape:grid
type="xygrid"
id="grid2847"
visible="true"
enabled="true"
color="#000000"
opacity="0.1254902"
empcolor="#0000ff"
empopacity="0.1254902"
spacingx="5px"
spacingy="5px"
empspacing="5"
snapvisiblegridlinesonly="true" />
</sodipodi:namedview>
<metadata
id="metadata7">
<rdf:RDF>
<cc:Work
rdf:about="">
<dc:format>image/svg+xml</dc:format>
<dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
<cc:license
rdf:resource="http://creativecommons.org/licenses/by-sa/3.0/" />
<dc:title>Netfilter packet flow and hook/table ordering</dc:title>
<dc:date>2014-Feb-28</dc:date>
<dc:creator>
<cc:Agent>
<dc:title>Jan Engelhardt &lt;jengelh@inai.de&gt;</dc:title>
</cc:Agent>
</dc:creator>
<dc:rights>
<cc:Agent>
<dc:title>Jan Engelhardt &lt;jengelh@inai.de&gt;</dc:title>
</cc:Agent>
</dc:rights>
<dc:source>http://inai.de/</dc:source>
<dc:language>en_US</dc:language>
<dc:subject>
<rdf:Bag>
<rdf:li>Xtables Conntrack iptables</rdf:li>
</rdf:Bag>
</dc:subject>
<dc:description>Shows the packet flow throughout Linux Networking, and Netfilter components.</dc:description>
<dc:contributor>
<cc:Agent>
<dc:title>Joshua Snyder &lt;josh@imagestream.com&gt;</dc:title>
</cc:Agent>
</dc:contributor>
</cc:Work>
<cc:License
rdf:about="http://creativecommons.org/licenses/by-sa/3.0/">
<cc:permits
rdf:resource="http://creativecommons.org/ns#Reproduction" />
<cc:permits
rdf:resource="http://creativecommons.org/ns#Distribution" />
<cc:requires
rdf:resource="http://creativecommons.org/ns#Notice" />
<cc:requires
rdf:resource="http://creativecommons.org/ns#Attribution" />
<cc:permits
rdf:resource="http://creativecommons.org/ns#DerivativeWorks" />
<cc:requires
rdf:resource="http://creativecommons.org/ns#ShareAlike" />
</cc:License>
</rdf:RDF>
</metadata>
<g
inkscape:groupmode="layer"
id="layer2"
inkscape:label="OSI layers"
style="display:inline"
transform="translate(0,-525)">
<rect
style="fill:url(#linearGradient4833);fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:0.2;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline"
id="rect13708"
width="1095"
height="90"
x="210"
y="875" />
<rect
style="fill:url(#linearGradient4825);fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:0.2;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline"
id="rect13706"
width="1095"
height="125"
x="210"
y="740" />
<rect
style="fill:url(#linearGradient4849);fill-opacity:1;stroke:#000000;stroke-width:0.2;stroke-linecap:square;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;display:inline"
id="rect3413"
width="1095"
height="60"
x="210"
y="670" />
<rect
y="615"
x="210"
height="45"
width="1095"
id="rect4090"
style="fill:url(#linearGradient4092);fill-opacity:1;stroke:#000000;stroke-width:0.2;stroke-linecap:square;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;display:inline" />
</g>
<g
inkscape:groupmode="layer"
id="layer3"
inkscape:label="Gray shaders"
style="display:inline"
transform="translate(0,-525)">
<rect
y="605"
x="690"
height="370"
width="200"
id="rect3439"
style="opacity:0.86000001;fill:#000000;fill-opacity:0.09019608;fill-rule:evenodd;stroke:#000000;stroke-width:0.2;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline" />
<rect
y="605"
x="900"
height="370"
width="395"
id="rect13716"
style="opacity:0.86000001;fill:#000000;fill-opacity:0.09019608;fill-rule:evenodd;stroke:#000000;stroke-width:0.2;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline" />
<rect
y="605"
x="220"
height="370"
width="460"
id="rect3419"
style="opacity:0.86000001;fill:#000000;fill-opacity:0.09019608;fill-rule:evenodd;stroke:#000000;stroke-width:0.2;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline" />
</g>
<g
inkscape:label="Boxes"
inkscape:groupmode="layer"
id="layer1"
style="display:inline"
transform="translate(0,-525)">
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect2180"
id="use3237"
transform="translate(-195,-95)"
width="1052.3622"
height="744.09448" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect3165"
id="use3239"
transform="translate(-195,-95)"
width="1052.3622"
height="744.09448" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect2180"
id="use3229"
transform="translate(-65,-95)"
width="1052.3622"
height="744.09448" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect2180"
id="use3231"
transform="translate(0,-95)"
width="1052.3622"
height="744.09448" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect3165"
id="use3219"
transform="translate(-65,-95)"
width="1052.3622"
height="744.09448" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect3165"
id="use3221"
transform="translate(0,-95)"
width="1052.3622"
height="744.09448" />
<rect
rx="10"
ry="10"
style="fill:url(#linearGradient4291);fill-opacity:1.0;fill-rule:evenodd;stroke:#000000;stroke-width:0.25000000000000000;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline"
id="use3346"
width="50"
height="25"
x="425"
y="830" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect25154"
id="use26146"
transform="translate(139.8,-300)"
width="1488"
height="1052" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect25154"
id="use3392"
transform="translate(-345,-230)"
width="1488"
height="1052" />
<rect
y="925"
x="295"
height="10"
width="50"
id="rect6659"
style="fill:url(#linearGradient4234);fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:0.25;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect2180"
id="use13788"
transform="translate(-195,0)"
width="1488.189"
height="1052.3622" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect3165"
id="use13790"
transform="translate(-195,0)"
width="1488.189"
height="1052.3622" />
<use
x="0"
y="0"
xlink:href="#rect6659"
id="use13826"
transform="translate(-65,0)"
width="1488.189"
height="1052.3622"
style="stroke:none;display:inline" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect25154"
id="use26140"
transform="translate(-465,0)"
width="1488"
height="1052" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect3165"
id="use3490"
transform="translate(-325,0)"
width="1510"
height="1052" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect3165"
id="use3492"
transform="translate(-260,0)"
width="1510"
height="1052" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect25154"
id="use2708"
transform="translate(-530,0)"
width="1610"
height="1052" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect25154"
id="use26136"
transform="translate(0,-95)"
width="1488"
height="1052" />
<rect
style="fill:url(#linearGradient4236);fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:0.25;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline"
id="rect2180"
width="50"
height="10"
x="555"
y="925" />
<rect
style="fill:url(#linearGradient4238);fill-opacity:1;fill-rule:evenodd;stroke:#000000;stroke-width:0.25;stroke-linecap:butt;stroke-linejoin:bevel;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;display:inline"
id="rect3165"
width="50"
height="15"
x="555"
y="935" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect2180"
id="use3269"
transform="translate(65,-135)"
width="1052.3622"
height="744.09448" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect3165"
id="use3271"
transform="translate(65,-135)"
width="1052.3622"
height="744.09448" />
<use
style="display:inline"
x="0"
y="0"
xlink:href="#rect6659"
id="use7632"
transform="translate(325,-40)"
width="1052.3622"
height="744.09448" />
<use