package/network/utils/iptables/patches/900-iptables-notify-fastpath.patch

--- a/libiptc/libiptc.c
+++ b/libiptc/libiptc.c
@@ -2505,6 +2505,224 @@ static void counters_map_set(STRUCT_COUN
 	DEBUGP_C("SET\n");
 }
 
+#define FASTPATH
+
+#ifdef FASTPATH
+#include <stdio.h>
+#include <stdlib.h>
+#include <errno.h>
+#include <unistd.h>
+#include <poll.h>
+#include <string.h>
+#include <fcntl.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <sys/statfs.h>
+#include <sys/socket.h>
+#include <sys/types.h>
+#include <signal.h>
+#include <linux/magic.h>
+#include <linux/genetlink.h>
+
+/*
+ * Generic macros for dealing with netlink sockets. Might be duplicated
+ * elsewhere. It is recommended that commercial grade applications use
+ * libnl or libnetlink and use the interfaces provided by the library
+ */
+#define GENLMSG_DATA(glh) ((void *)(NLMSG_DATA(glh) + GENL_HDRLEN))
+#define GENLMSG_PAYLOAD(glh) (NLMSG_PAYLOAD(glh, 0) - GENL_HDRLEN)
+#define NLA_DATA(na) ((void *)((char*)(na) + NLA_HDRLEN))
+
+static bool proc_file_exists(const char *filename)
+{
+	struct stat s;
+	struct statfs f;
+
+	if (lstat(filename, &s))
+		return false;
+	if (!S_ISREG(s.st_mode))
+		return false;
+	if (statfs(filename, &f))
+		return false;
+	if (f.f_type != PROC_SUPER_MAGIC)
+		return false;
+	return true;
+}
+
+static int create_nl_socket(int protocol, int groups)
+{
+	socklen_t addr_len;
+	int fd;
+	struct sockaddr_nl local;
+
+	fd = socket(AF_NETLINK, SOCK_RAW, protocol);
+	if (fd < 0) {
+		perror("socket");
+		return -1;
+	}
+
+	memset(&local, 0, sizeof(local));
+	local.nl_family = AF_NETLINK;
+	local.nl_groups = groups;
+	if (bind(fd, (struct sockaddr *) &local, sizeof(local)) < 0)
+		goto error;
+
+	return fd;
+error:
+	close(fd);
+	return -1;
+}
+
+/*
+ * Send netlink message to kernel
+ */
+int sendto_fd(int s, const char *buf, int bufLen)
+{
+	struct sockaddr_nl nladdr;
+	int r;
+
+	memset(&nladdr, 0, sizeof(nladdr));
+	nladdr.nl_family = AF_NETLINK;
+
+	while ((r = sendto(s, buf, bufLen, 0, (struct sockaddr *) &nladdr,
+		sizeof(nladdr))) < bufLen) {
+		if (r > 0) {
+			buf += r;
+			bufLen -= r;
+		} else if (errno != EAGAIN) {
+			return -1;
+		}
+	}
+
+	return 0;
+}
+
+/*
+ * Probe the controller in genetlink to find the family id
+ * for the CONTROL_EXMPL family
+ */
+int get_family_id(int sd)
+{
+	struct {
+		struct nlmsghdr n;
+		struct genlmsghdr g;
+		char buf[256];
+	} family_req;
+
+	struct {
+		struct nlmsghdr n;
+		struct genlmsghdr g;
+		char buf[256];
+	} ans;
+
+	int id;
+	struct nlattr *na;
+	int rep_len;
+
+	/* Get family name */
+	family_req.n.nlmsg_type = GENL_ID_CTRL;
+	family_req.n.nlmsg_flags = NLM_F_REQUEST;
+	family_req.n.nlmsg_seq = 0;
+	family_req.n.nlmsg_pid = getpid();
+	family_req.n.nlmsg_len = NLMSG_LENGTH(GENL_HDRLEN);
+	family_req.g.cmd = CTRL_CMD_GETFAMILY;
+	family_req.g.version = 0x1;
+
+	na = (struct nlattr *) GENLMSG_DATA(&family_req);
+	na->nla_type = CTRL_ATTR_FAMILY_NAME;
+
+	/*------change here--------*/
+	na->nla_len = strlen("FASTPATH") + 1 + NLA_HDRLEN;
+	strcpy(NLA_DATA(na), "FASTPATH");
+
+	family_req.n.nlmsg_len += NLMSG_ALIGN(na->nla_len);
+
+	if (sendto_fd(sd, (char *) &family_req, family_req.n.nlmsg_len) < 0)
+		return -1;
+
+	rep_len = recv(sd, &ans, sizeof(ans), 0);
+	if (rep_len < 0){
+		perror("recv");
+		return -1;
+	}
+
+	/* Validate response message */
+	if (!NLMSG_OK((&ans.n), rep_len)){
+		fprintf(stderr, "invalid reply message\n");
+		return -1;
+	}
+
+	if (ans.n.nlmsg_type == NLMSG_ERROR) { /* error */
+		fprintf(stderr, "received error\n");
+		return -1;
+	}
+
+	na = (struct nlattr *)GENLMSG_DATA(&ans);
+	na = (struct nlattr *)((char *) na + NLA_ALIGN(na->nla_len));
+	if (na->nla_type == CTRL_ATTR_FAMILY_ID) {
+		id = *(__u16 *)NLA_DATA(na);
+	}
+
+	return id;
+}
+
+static int tc_commit_notify_fastpath(void)
+{
+	struct {
+		struct nlmsghdr n;
+		struct genlmsghdr g;
+		char buf[256];
+	} ans;
+
+	struct {
+		struct nlmsghdr n;
+		struct genlmsghdr g;
+		char buf[256];
+	} req;
+
+	struct nlattr *na;
+	int nl_sd, id, mlength;
+	struct sockaddr_nl nladdr;
+	char *message = "TC_COMMIT!";
+
+	nl_sd = create_nl_socket(NETLINK_GENERIC,0);
+	if (nl_sd < 0) {
+		printf("create failure\n");
+		return -1;
+	}
+
+	id = get_family_id(nl_sd);
+	if (id < 0) {
+		printf("bad id\n");
+		return -1;
+	}
+
+	/* Send command needed */
+	req.n.nlmsg_len = NLMSG_LENGTH(GENL_HDRLEN);
+	req.n.nlmsg_type = id;
+	req.n.nlmsg_flags = NLM_F_REQUEST;
+	req.n.nlmsg_seq = 60;
+	req.n.nlmsg_pid = getpid();
+	req.g.cmd = 1; //FASTPATH_NL_C_IPT_NOTIFY
+
+	/*compose message*/
+	na = (struct nlattr *)GENLMSG_DATA(&req);
+	na->nla_type = 1; //FASTPATH_NL_C_IPT_NOTIFY
+	mlength = strlen(message);
+	na->nla_len = mlength+NLA_HDRLEN; //message length
+	memcpy(NLA_DATA(na), message, mlength);
+	req.n.nlmsg_len += NLMSG_ALIGN(na->nla_len);
+
+	/*send message*/
+	memset(&nladdr, 0, sizeof(nladdr));
+	nladdr.nl_family = AF_NETLINK;
+
+	sendto(nl_sd, (char *)&req, req.n.nlmsg_len, 0,
+		(struct sockaddr *)&nladdr, sizeof(nladdr));
+	close(nl_sd);
+	return 0;
+}
+#endif
 
 int
 TC_COMMIT(struct xtc_handle *handle)
@@ -2672,6 +2890,11 @@ TC_COMMIT(struct xtc_handle *handle)
 	free(repl);
 	free(newcounters);
 
+#ifdef FASTPATH
+	if (proc_file_exists("/proc/net/fastpath"))
+		tc_commit_notify_fastpath();
+#endif
+
 finished:
 	return 1;