[Bug 1396] When rule with 3 concat elements are added, nft list shows only 2

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Fri Jan 10 11:31:45 CET 2020


https://bugzilla.netfilter.org/show_bug.cgi?id=1396

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #2 from Pablo Neira Ayuso <pablo at netfilter.org> ---
(In reply to Serguei Bezverkhi from comment #0)
> table ip ipv4table {
> 	map cluster-ip-services-set {
> 		type inet_proto . ipv4_addr . inet_service : verdict
> 	}
> 
> 
> 	chain k8s-nat-mark-masq {
> 		ip protocol . ip daddr vmap @cluster-ip-services-set
> 	}
> 
> 	chain k8s-nat-do-mark-masq {
> 		meta mark set 0x00004000 return
> 	}
> }

This definition above fails to load:

/tmp/m:7:37-60: Error: datatype mismatch, map expects concatenation of
(Internet protocol, IPv4 address, internet network service), mapping expression
has type concatenation of (Internet protocol, IPv4 address)
        ip protocol . ip daddr vmap @cluster-ip-services-set
        ~~~~~~~~~~~~~~~~~~~~~~      ^^^^^^^^^^^^^^^^^^^^^^^^

Because one member of the concatenation is missing.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200110/bc16c77e/attachment.html>


More information about the netfilter-buglog mailing list