Review wanted: tcfilter / luci-app-tcfilter (persistent tc ingress filters)

[Markus A. Beck]

Hi,

I have two new-package PRs open that could use a maintainer's eyes:

  tcfilter           openwrt/packages#30447
  luci-app-tcfilter  openwrt/luci#9004

tcfilter is a thin UCI front-end that installs raw "tc filter ... ingress"
expressions and owns their lifecycle: apply at boot, re-apply on ifup and
netdev hotplug, tear down rules dropped from the config, procd reload
trigger. The match/action part is written verbatim as tc syntax -- the
package does not model flower fields. It depends on tc-full.
luci-app-tcfilter adds the grid plus a live "tc -s -j filter show" status
table, with the rpcd ACL scoped to that one read-only call.

The point of the pair is to drive hardware tc-flower offload where there is
no higher-level config layer -- specifically the Realtek DSA PIE engine.
The kernel side is openwrt/openwrt#24994; its preparatory fixes (#25024)
are already merged.

Both PRs are FormalityCheck-green, the openwrt-ai review comments are
addressed, and I've run the tcfilter lifecycle end to end on a Zyxel
XGS1210-12 (start / reload drops a removed rule / stop / ifup-after-stop is
a no-op / apk del clean). Wiki:
https://openwrt.org/docs/guide-user/network/tcfilter

I'd appreciate a review, or a pointer to who the right reviewer is for a
net/ package with a tc-full dependency.

Thanks,
Mark