netfilter: add deprecation warning for dccp support

Add a deprecation warning for the xt_dccp match and the
nft exthdr code.

Signed-off-by: Florian Westphal <fw@strlen.de>
This commit is contained in:
Florian Westphal
2026-03-11 10:53:15 +01:00
parent 7970d6aaf7
commit 606bd17ef0
2 changed files with 6 additions and 0 deletions

View File

@@ -796,6 +796,9 @@ nft_exthdr_select_ops(const struct nft_ctx *ctx,
break;
#ifdef CONFIG_NFT_EXTHDR_DCCP
case NFT_EXTHDR_OP_DCCP:
pr_warn_once("The dccp option matching is deprecated and scheduled to be removed in 2027.\n"
"Please contact the netfilter-devel mailing list or update your nftables rules.\n");
if (tb[NFTA_EXTHDR_DREG])
return &nft_exthdr_dccp_ops;
break;

View File

@@ -159,6 +159,9 @@ static int __init dccp_mt_init(void)
{
int ret;
pr_warn_once("The DCCP match is deprecated and scheduled to be removed in 2027.\n"
"Please contact the netfilter-devel mailing list or update your iptables rules\n");
/* doff is 8 bits, so the maximum option size is (4*256). Don't put
* this in BSS since DaveM is worried about locked TLB's for kernel
* BSS. */