[openwrt/openwrt] netfilter: kmod-nft-xfrm

[LEDE Commits]

chunkeey pushed a commit to openwrt/openwrt.git, branch openwrt-22.03:
https://git.openwrt.org/8a3fb457223b6a4f68c4ab28162529ae94c6480e

commit 8a3fb457223b6a4f68c4ab28162529ae94c6480e
Author: Florian Eckert <fe at dev.tdt.de>
AuthorDate: Mon May 16 16:14:41 2022 +0200

    netfilter: kmod-nft-xfrm
    
    Add kmod-nft-xfrm package.
    
    Signed-off-by: Florian Eckert <fe at dev.tdt.de>
    (cherry picked from commit 9379bc2fcf905568ef329a121c8c8a11fc98b02c)
---
 include/netfilter.mk                      |  2 ++
 package/kernel/linux/modules/netfilter.mk | 11 +++++++++++
 2 files changed, 13 insertions(+)

diff --git a/include/netfilter.mk b/include/netfilter.mk
index 20a5a52313..ffe583f657 100644
--- a/include/netfilter.mk
+++ b/include/netfilter.mk
@@ -360,6 +360,8 @@ $(eval $(if $(NF_KMOD),$(call nf_add,NFT_TPROXY,CONFIG_NFT_TPROXY, $(P_XT)nft_tp
 
 $(eval $(if $(NF_KMOD),$(call nf_add,NFT_COMPAT,CONFIG_NFT_COMPAT, $(P_XT)nft_compat),))
 
+$(eval $(if $(NF_KMOD),$(call nf_add,NFT_XFRM,CONFIG_NFT_XFRM, $(P_XT)nft_xfrm),))
+
 # userland only
 IPT_BUILTIN += $(NF_IPT-y) $(NF_IPT-m)
 IPT_BUILTIN += $(IPT_CORE-y) $(IPT_CORE-m)
diff --git a/package/kernel/linux/modules/netfilter.mk b/package/kernel/linux/modules/netfilter.mk
index 1ebe40947a..ff76ae048b 100644
--- a/package/kernel/linux/modules/netfilter.mk
+++ b/package/kernel/linux/modules/netfilter.mk
@@ -1272,3 +1272,14 @@ define KernelPackage/nft-compat
 endef
 
 $(eval $(call KernelPackage,nft-compat))
+
+define KernelPackage/nft-xfrm
+  SUBMENU:=$(NF_MENU)
+  TITLE:=Netfilter nf_tables xfrm support (ipsec)
+  DEPENDS:=+kmod-nft-core
+  FILES:=$(foreach mod,$(NFT_XFRM-m),$(LINUX_DIR)/net/$(mod).ko)
+  AUTOLOAD:=$(call AutoProbe,$(notdir $(NFT_XFRM-m)))
+  KCONFIG:=$(KCONFIG_NFT_XFRM)
+endef
+
+$(eval $(call KernelPackage,nft-xfrm))