net: pkt_filter: Filters to modify priority to incoming packets

To enable quality-of-service (QoS) applications, allow filters to modify
the priority of an incoming packet. This allows that processing can be
done on tc-queue-threads with different priorities.

Signed-off-by: Cla Mattia Galliard <[email protected]>

Author: ClaCodes

include/zephyr/net/net_pkt_filter.h

@@ -85,10 +85,11 @@ struct npf_test {
 
 /** @brief filter rule structure */
 struct npf_rule {
-	sys_snode_t node;               /**< Slist rule list node */
-	enum net_verdict result;	/**< result if all tests pass */
-	uint32_t nb_tests;		/**< number of tests for this rule */
-	struct npf_test *tests[];	/**< pointers to @ref npf_test instances */
+	sys_snode_t node;         /**< Slist rule list node */
+	enum net_verdict result;  /**< result if all tests pass */
+	uint8_t priority;         /**< priority in case of NET_CONTINUE */
+	uint32_t nb_tests;        /**< number of tests for this rule */
+	struct npf_test *tests[]; /**< pointers to @ref npf_test instances */
 };
 
 /** @brief Default rule list termination for accepting a packet */
@@ -242,6 +243,14 @@ bool npf_remove_all_rules(struct npf_rule_list *rules);
 		.tests = { FOR_EACH(Z_NPF_TEST_ADDR, (,), __VA_ARGS__) }, \
 	}
 
+#define NPF_PRIORITY(_name, _priority, ...)                                                        \
+	struct npf_rule _name = {                                                                  \
+		.result = NET_CONTINUE,                                                            \
+		.priority = (_priority),                                                           \
+		.nb_tests = NUM_VA_ARGS_LESS_1(__VA_ARGS__) + 1,                                   \
+		.tests = {FOR_EACH(Z_NPF_TEST_ADDR, (,), __VA_ARGS__)},                            \
+	}
+
 #define Z_NPF_TEST_ADDR(arg) &arg.test
 
 /** @} */

subsys/net/pkt_filter/base.c

@@ -114,6 +114,10 @@ static enum net_verdict evaluate(sys_slist_t *rule_head, struct net_pkt *pkt)
 
 	SYS_SLIST_FOR_EACH_CONTAINER(rule_head, rule, node) {
 		if (apply_tests(rule, pkt) == true) {
+			if (rule->result == NET_CONTINUE) {
+				net_pkt_set_priority(pkt, rule->priority);
+				continue;
+			}
 			return rule->result;
 		}
 	}