ipvs: allow tunneling with gue encapsulation

ipip packets are blocked in some public cloud environments, this patch
allows gue encapsulation with the tunneling method, which would make
tunneling working in those environments.

Signed-off-by: Jacky Hu <hengqing.hu@gmail.com>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 11 insertions, 0 deletions

diff --git a/include/uapi/linux/ip_vs.h b/include/uapi/linux/ip_vs.h
index 1c916b2f89dc..e34f436fc79d 100644
--- a/include/uapi/linux/ip_vs.h
+++ b/include/uapi/linux/ip_vs.h
@@ -124,6 +124,13 @@
 
 #define IP_VS_PEDATA_MAXLEN     255
 
+/* Tunnel types */
+enum {
+        IP_VS_CONN_F_TUNNEL_TYPE_IPIP = 0,      /* IPIP */
+        IP_VS_CONN_F_TUNNEL_TYPE_GUE,           /* GUE */
+        IP_VS_CONN_F_TUNNEL_TYPE_MAX,
+};
+
 /*
  *      The struct ip_vs_service_user and struct ip_vs_dest_user are
  *      used to set IPVS rules through setsockopt.
@@ -392,6 +399,10 @@ enum {
 
         IPVS_DEST_ATTR_STATS64,         /* nested attribute for dest stats */
 
+        IPVS_DEST_ATTR_TUN_TYPE,        /* tunnel type */
+
+        IPVS_DEST_ATTR_TUN_PORT,        /* tunnel port */
+
         __IPVS_DEST_ATTR_MAX,
 };