RDKBNETWOR-80 : Transform to Nftables from Iptables

configure.ac

@@ -50,6 +50,16 @@ AC_PREFIX_DEFAULT(`pwd`)
 AC_ENABLE_SHARED
 AC_DISABLE_STATIC
 
+#Enable NFT compile time flags if firewall-nft is set as yes
+AC_ARG_ENABLE([firewall-nft],
+[  --enable-firewall-nft=val Turn on nft Feature, val=true or false],
+[case "${enableval}" in
+  yes) firewall_nft=true ;;
+  no)  firewall_nft=false ;;
+  *) AC_MSG_ERROR([bad value ${enableval} for --enable-firewall-nft]) ;;
+esac],[firewall_nft=false])
+AM_CONDITIONAL(FIREWALL_NFT, test x"$firewall_nft" = x"true")
+
 AC_CONFIG_HEADERS([config.h])
 AC_CONFIG_MACRO_DIR([m4])
 
@@ -231,6 +241,7 @@ AC_CONFIG_FILES(
 	source/Makefile
 	source/dhcpproxy/Makefile
 	source/firewall/Makefile
+	source/firewall_nft/Makefile
 	source/firewall_log/Makefile
 	source/igd/Makefile
 	source/igd/src/Makefile

source/Makefile.am

@@ -16,7 +16,16 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 ##########################################################################
-SUBDIRS = ulog syscfg sysevent services utctx utapi util firewall firewall_log newhost macclone pal pmon services service_wan trigger igd service_routed service_ipv6 scripts service_multinet service_udhcpc
+SUBDIRS = ulog syscfg sysevent services utctx utapi util
+
+if FIREWALL_NFT
+SUBDIRS += firewall_nft
+SUBDIRS += firewall
+else
+SUBDIRS += firewall
+endif
+
+SUBDIRS += firewall_log newhost macclone pal pmon services service_wan trigger igd service_routed service_ipv6 scripts service_multinet service_udhcpc
 
 #SUBDIRS += dhcpproxy
 

source/firewall/Makefile.am

@@ -21,14 +21,23 @@ AM_CFLAGS += -pthread
 AM_CPPFLAGS = -I$(top_srcdir)/source/include -I$(top_srcdir)/source/util/utils $(DBUS_CFLAGS)
 AM_LDFLAGS = -lccsp_common -lsecure_wrapper -lnetfilter_queue -lnfnetlink $(DBUS_LIBS) -pthread -lrt
 
+if FIREWALL_NFT
+bin_PROGRAMS = firewall_ipt nfq_handler
+else
 bin_PROGRAMS = firewall nfq_handler
+endif
 
 firewall_SOURCES = firewall_ipv6.c firewall.c firewall_priv.c firewall_interface.c  firewall_ext.c
 if CPC_FIREWALL_ENABLE
 firewall_SOURCES += firewall_lib.c firewall_dsl.c rabid.c
 AM_LDFLAGS += -lrdkconfig
 endif
 
+if FIREWALL_NFT
+firewall_ipt_SOURCES = $(firewall_SOURCES)
+firewall_ipt_LDADD   = $(firewall_LDADD)
+endif
+
 nfq_handler_SOURCES = raw_socket_send.c nfq_handler.c
 
 firewall_LDADD = $(top_builddir)/source/syscfg/lib/libsyscfg.la \

source/firewall_nft/Makefile.am

@@ -0,0 +1,41 @@
+##########################################################################
+# If not stated otherwise in this file or this component's Licenses.txt
+# file the following copyright and licenses apply:
+#
+# Copyright 2025 RDK Management
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+##########################################################################
+AM_CFLAGS = -D_GNU_SOURCE
+AM_CFLAGS += -pthread
+AM_CPPFLAGS = -I$(top_srcdir)/source/include -I$(top_srcdir)/source/util/utils $(DBUS_CFLAGS)
+AM_LDFLAGS = -lccsp_common -lsecure_wrapper -lnetfilter_queue -lnfnetlink $(DBUS_LIBS) -pthread -lrt
+bin_PROGRAMS = firewall_nft nfq_handler
+
+firewall_nft_SOURCES = firewall_nft.c firewall_ipv6_nft.c firewall_priv_nft.c firewall_interface_nft.c  firewall_ext_nft.c
+if CPC_FIREWALL_ENABLE
+firewall_nft_SOURCES += firewall_lib.c firewall_dsl.c rabid.c
+AM_LDFLAGS += -lrdkconfig
+endif
+nfq_handler_SOURCES = raw_socket_send.c nfq_handler_nft.c
+firewall_nft_LDADD = $(top_builddir)/source/syscfg/lib/libsyscfg.la \
+                 $(top_builddir)/source/sysevent/lib/libsysevent.la \
+                 $(top_builddir)/source/ulog/libulog.la \
+                 $(top_builddir)/source/util/utils/libutopiautil.la
+nfq_handler_LDADD = $(top_builddir)/source/syscfg/lib/libsyscfg.la \
+                    $(top_builddir)/source/sysevent/lib/libsysevent.la \
+                    $(top_builddir)/source/ulog/libulog.la
+
+if CORE_NET_LIB_FEATURE_SUPPORT
+AM_LDFLAGS += -lnet
+endif