struct ipv4_devconf
 {
-       int     accept_redirects;
-       int     send_redirects;
-       int     secure_redirects;
-       int     shared_media;
-       int     accept_source_route;
-       int     rp_filter;
-       int     proxy_arp;
-       int     bootp_relay;
-       int     log_martians;
-       int     forwarding;
-       int     mc_forwarding;
-       int     tag;
-       int     arp_filter;
-       int     arp_announce;
-       int     arp_ignore;
-       int     arp_accept;
-       int     medium_id;
-       int     no_xfrm;
-       int     no_policy;
-       int     force_igmp_version;
-       int     promote_secondaries;
        void    *sysctl;
+       int     data[__NET_IPV4_CONF_MAX - 1];
 };
 
 extern struct ipv4_devconf ipv4_devconf;
        struct rcu_head         rcu_head;
 };
 
-#define IN_DEV_FORWARD(in_dev)         ((in_dev)->cnf.forwarding)
-#define IN_DEV_MFORWARD(in_dev)                (ipv4_devconf.mc_forwarding && (in_dev)->cnf.mc_forwarding)
-#define IN_DEV_RPFILTER(in_dev)                (ipv4_devconf.rp_filter && (in_dev)->cnf.rp_filter)
-#define IN_DEV_SOURCE_ROUTE(in_dev)    (ipv4_devconf.accept_source_route && (in_dev)->cnf.accept_source_route)
-#define IN_DEV_BOOTP_RELAY(in_dev)     (ipv4_devconf.bootp_relay && (in_dev)->cnf.bootp_relay)
-
-#define IN_DEV_LOG_MARTIANS(in_dev)    (ipv4_devconf.log_martians || (in_dev)->cnf.log_martians)
-#define IN_DEV_PROXY_ARP(in_dev)       (ipv4_devconf.proxy_arp || (in_dev)->cnf.proxy_arp)
-#define IN_DEV_SHARED_MEDIA(in_dev)    (ipv4_devconf.shared_media || (in_dev)->cnf.shared_media)
-#define IN_DEV_TX_REDIRECTS(in_dev)    (ipv4_devconf.send_redirects || (in_dev)->cnf.send_redirects)
-#define IN_DEV_SEC_REDIRECTS(in_dev)   (ipv4_devconf.secure_redirects || (in_dev)->cnf.secure_redirects)
-#define IN_DEV_IDTAG(in_dev)           ((in_dev)->cnf.tag)
-#define IN_DEV_MEDIUM_ID(in_dev)       ((in_dev)->cnf.medium_id)
-#define IN_DEV_PROMOTE_SECONDARIES(in_dev)     (ipv4_devconf.promote_secondaries || (in_dev)->cnf.promote_secondaries)
+#define IPV4_DEVCONF(cnf, attr) ((cnf).data[NET_IPV4_CONF_ ## attr - 1])
+#define IPV4_DEVCONF_ALL(attr) IPV4_DEVCONF(ipv4_devconf, attr)
+
+static inline int ipv4_devconf_get(struct in_device *in_dev, int index)
+{
+       index--;
+       return in_dev->cnf.data[index];
+}
+
+static inline void ipv4_devconf_set(struct in_device *in_dev, int index,
+                                   int val)
+{
+       index--;
+       in_dev->cnf.data[index] = val;
+}
+
+#define IN_DEV_CONF_GET(in_dev, attr) \
+       ipv4_devconf_get((in_dev), NET_IPV4_CONF_ ## attr)
+#define IN_DEV_CONF_SET(in_dev, attr, val) \
+       ipv4_devconf_set((in_dev), NET_IPV4_CONF_ ## attr, (val))
+
+#define IN_DEV_ANDCONF(in_dev, attr) \
+       (IPV4_DEVCONF_ALL(attr) && IN_DEV_CONF_GET((in_dev), attr))
+#define IN_DEV_ORCONF(in_dev, attr) \
+       (IPV4_DEVCONF_ALL(attr) || IN_DEV_CONF_GET((in_dev), attr))
+#define IN_DEV_MAXCONF(in_dev, attr) \
+       (max(IPV4_DEVCONF_ALL(attr), IN_DEV_CONF_GET((in_dev), attr)))
+
+#define IN_DEV_FORWARD(in_dev)         IN_DEV_CONF_GET((in_dev), FORWARDING)
+#define IN_DEV_MFORWARD(in_dev)                (IPV4_DEVCONF_ALL(MC_FORWARDING) && \
+                                        IPV4_DEVCONF((in_dev)->cnf, \
+                                                     MC_FORWARDING))
+#define IN_DEV_RPFILTER(in_dev)                IN_DEV_ANDCONF((in_dev), RP_FILTER)
+#define IN_DEV_SOURCE_ROUTE(in_dev)    IN_DEV_ANDCONF((in_dev), \
+                                                      ACCEPT_SOURCE_ROUTE)
+#define IN_DEV_BOOTP_RELAY(in_dev)     IN_DEV_ANDCONF((in_dev), BOOTP_RELAY)
+
+#define IN_DEV_LOG_MARTIANS(in_dev)    IN_DEV_ORCONF((in_dev), LOG_MARTIANS)
+#define IN_DEV_PROXY_ARP(in_dev)       IN_DEV_ORCONF((in_dev), PROXY_ARP)
+#define IN_DEV_SHARED_MEDIA(in_dev)    IN_DEV_ORCONF((in_dev), SHARED_MEDIA)
+#define IN_DEV_TX_REDIRECTS(in_dev)    IN_DEV_ORCONF((in_dev), SEND_REDIRECTS)
+#define IN_DEV_SEC_REDIRECTS(in_dev)   IN_DEV_ORCONF((in_dev), \
+                                                     SECURE_REDIRECTS)
+#define IN_DEV_IDTAG(in_dev)           IN_DEV_CONF_GET(in_dev, TAG)
+#define IN_DEV_MEDIUM_ID(in_dev)       IN_DEV_CONF_GET(in_dev, MEDIUM_ID)
+#define IN_DEV_PROMOTE_SECONDARIES(in_dev) \
+                                       IN_DEV_ORCONF((in_dev), \
+                                                     PROMOTE_SECONDARIES)
 
 #define IN_DEV_RX_REDIRECTS(in_dev) \
        ((IN_DEV_FORWARD(in_dev) && \
-         (ipv4_devconf.accept_redirects && (in_dev)->cnf.accept_redirects)) \
+         IN_DEV_ANDCONF((in_dev), ACCEPT_REDIRECTS)) \
         || (!IN_DEV_FORWARD(in_dev) && \
-         (ipv4_devconf.accept_redirects || (in_dev)->cnf.accept_redirects)))
+         IN_DEV_ORCONF((in_dev), ACCEPT_REDIRECTS)))
 
-#define IN_DEV_ARPFILTER(in_dev)       (ipv4_devconf.arp_filter || (in_dev)->cnf.arp_filter)
-#define IN_DEV_ARP_ANNOUNCE(in_dev)    (max(ipv4_devconf.arp_announce, (in_dev)->cnf.arp_announce))
-#define IN_DEV_ARP_IGNORE(in_dev)      (max(ipv4_devconf.arp_ignore, (in_dev)->cnf.arp_ignore))
+#define IN_DEV_ARPFILTER(in_dev)       IN_DEV_ORCONF((in_dev), ARPFILTER)
+#define IN_DEV_ARP_ANNOUNCE(in_dev)    IN_DEV_MAXCONF((in_dev), ARP_ANNOUNCE)
+#define IN_DEV_ARP_IGNORE(in_dev)      IN_DEV_MAXCONF((in_dev), ARP_IGNORE)
 
 struct in_ifaddr
 {
 
 #include <net/rtnetlink.h>
 
 struct ipv4_devconf ipv4_devconf = {
-       .accept_redirects = 1,
-       .send_redirects =  1,
-       .secure_redirects = 1,
-       .shared_media =   1,
+       .data = {
+               [NET_IPV4_CONF_ACCEPT_REDIRECTS - 1] = 1,
+               [NET_IPV4_CONF_SEND_REDIRECTS - 1] = 1,
+               [NET_IPV4_CONF_SECURE_REDIRECTS - 1] = 1,
+               [NET_IPV4_CONF_SHARED_MEDIA - 1] = 1,
+       },
 };
 
 static struct ipv4_devconf ipv4_devconf_dflt = {
-       .accept_redirects =  1,
-       .send_redirects =    1,
-       .secure_redirects =  1,
-       .shared_media =      1,
-       .accept_source_route = 1,
+       .data = {
+               [NET_IPV4_CONF_ACCEPT_REDIRECTS - 1] = 1,
+               [NET_IPV4_CONF_SEND_REDIRECTS - 1] = 1,
+               [NET_IPV4_CONF_SECURE_REDIRECTS - 1] = 1,
+               [NET_IPV4_CONF_SHARED_MEDIA - 1] = 1,
+               [NET_IPV4_CONF_ACCEPT_SOURCE_ROUTE - 1] = 1,
+       },
 };
 
+#define IPV4_DEVCONF_DFLT(attr) IPV4_DEVCONF(ipv4_devconf_dflt, attr)
+
 static struct nla_policy ifa_ipv4_policy[IFA_MAX+1] __read_mostly = {
        [IFA_LOCAL]             = { .type = NLA_U32 },
        [IFA_ADDRESS]           = { .type = NLA_U32 },
                                if (!in_dev)
                                        panic("devinet: "
                                              "Failed to create loopback\n");
-                               in_dev->cnf.no_xfrm = 1;
-                               in_dev->cnf.no_policy = 1;
+                               IN_DEV_CONF_SET(in_dev, NOXFRM, 1);
+                               IN_DEV_CONF_SET(in_dev, NOPOLICY, 1);
                        }
                }
                goto out;
 void inet_forward_change(void)
 {
        struct net_device *dev;
-       int on = ipv4_devconf.forwarding;
+       int on = IPV4_DEVCONF_ALL(FORWARDING);
 
-       ipv4_devconf.accept_redirects = !on;
-       ipv4_devconf_dflt.forwarding = on;
+       IPV4_DEVCONF_ALL(ACCEPT_REDIRECTS) = !on;
+       IPV4_DEVCONF_DFLT(FORWARDING) = on;
 
        read_lock(&dev_base_lock);
        for_each_netdev(dev) {
                rcu_read_lock();
                in_dev = __in_dev_get_rcu(dev);
                if (in_dev)
-                       in_dev->cnf.forwarding = on;
+                       IN_DEV_CONF_SET(in_dev, FORWARDING, on);
                rcu_read_unlock();
        }
        read_unlock(&dev_base_lock);
        int ret = proc_dointvec(ctl, write, filp, buffer, lenp, ppos);
 
        if (write && *valp != val) {
-               if (valp == &ipv4_devconf.forwarding)
+               if (valp == &IPV4_DEVCONF_ALL(FORWARDING))
                        inet_forward_change();
-               else if (valp != &ipv4_devconf_dflt.forwarding)
+               else if (valp != &IPV4_DEVCONF_DFLT(FORWARDING))
                        rt_cache_flush(0);
        }
 
 }
 
 
+#define DEVINET_SYSCTL_ENTRY(attr, name, mval, proc, sysctl) \
+       { \
+               .ctl_name       = NET_IPV4_CONF_ ## attr, \
+               .procname       = name, \
+               .data           = ipv4_devconf.data + \
+                                 NET_IPV4_CONF_ ## attr - 1, \
+               .maxlen         = sizeof(int), \
+               .mode           = mval, \
+               .proc_handler   = proc, \
+               .strategy       = sysctl, \
+       }
+
+#define DEVINET_SYSCTL_RW_ENTRY(attr, name) \
+       DEVINET_SYSCTL_ENTRY(attr, name, 0644, &proc_dointvec, NULL)
+
+#define DEVINET_SYSCTL_RO_ENTRY(attr, name) \
+       DEVINET_SYSCTL_ENTRY(attr, name, 0444, &proc_dointvec, NULL)
+
+#define DEVINET_SYSCTL_COMPLEX_ENTRY(attr, name, proc, sysctl) \
+       DEVINET_SYSCTL_ENTRY(attr, name, 0644, proc, sysctl)
+
+#define DEVINET_SYSCTL_FLUSHING_ENTRY(attr, name) \
+       DEVINET_SYSCTL_COMPLEX_ENTRY(attr, name, ipv4_doint_and_flush, \
+                                    ipv4_doint_and_flush_strategy)
+
 static struct devinet_sysctl_table {
        struct ctl_table_header *sysctl_header;
        ctl_table               devinet_vars[__NET_IPV4_CONF_MAX];
        ctl_table               devinet_root_dir[2];
 } devinet_sysctl = {
        .devinet_vars = {
-               {
-                       .ctl_name       = NET_IPV4_CONF_FORWARDING,
-                       .procname       = "forwarding",
-                       .data           = &ipv4_devconf.forwarding,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &devinet_sysctl_forward,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_MC_FORWARDING,
-                       .procname       = "mc_forwarding",
-                       .data           = &ipv4_devconf.mc_forwarding,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0444,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_ACCEPT_REDIRECTS,
-                       .procname       = "accept_redirects",
-                       .data           = &ipv4_devconf.accept_redirects,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_SECURE_REDIRECTS,
-                       .procname       = "secure_redirects",
-                       .data           = &ipv4_devconf.secure_redirects,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_SHARED_MEDIA,
-                       .procname       = "shared_media",
-                       .data           = &ipv4_devconf.shared_media,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_RP_FILTER,
-                       .procname       = "rp_filter",
-                       .data           = &ipv4_devconf.rp_filter,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_SEND_REDIRECTS,
-                       .procname       = "send_redirects",
-                       .data           = &ipv4_devconf.send_redirects,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_ACCEPT_SOURCE_ROUTE,
-                       .procname       = "accept_source_route",
-                       .data           = &ipv4_devconf.accept_source_route,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_PROXY_ARP,
-                       .procname       = "proxy_arp",
-                       .data           = &ipv4_devconf.proxy_arp,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_MEDIUM_ID,
-                       .procname       = "medium_id",
-                       .data           = &ipv4_devconf.medium_id,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_BOOTP_RELAY,
-                       .procname       = "bootp_relay",
-                       .data           = &ipv4_devconf.bootp_relay,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_LOG_MARTIANS,
-                       .procname       = "log_martians",
-                       .data           = &ipv4_devconf.log_martians,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_TAG,
-                       .procname       = "tag",
-                       .data           = &ipv4_devconf.tag,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_ARPFILTER,
-                       .procname       = "arp_filter",
-                       .data           = &ipv4_devconf.arp_filter,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_ARP_ANNOUNCE,
-                       .procname       = "arp_announce",
-                       .data           = &ipv4_devconf.arp_announce,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_ARP_IGNORE,
-                       .procname       = "arp_ignore",
-                       .data           = &ipv4_devconf.arp_ignore,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_ARP_ACCEPT,
-                       .procname       = "arp_accept",
-                       .data           = &ipv4_devconf.arp_accept,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &proc_dointvec,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_NOXFRM,
-                       .procname       = "disable_xfrm",
-                       .data           = &ipv4_devconf.no_xfrm,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &ipv4_doint_and_flush,
-                       .strategy       = &ipv4_doint_and_flush_strategy,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_NOPOLICY,
-                       .procname       = "disable_policy",
-                       .data           = &ipv4_devconf.no_policy,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &ipv4_doint_and_flush,
-                       .strategy       = &ipv4_doint_and_flush_strategy,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_FORCE_IGMP_VERSION,
-                       .procname       = "force_igmp_version",
-                       .data           = &ipv4_devconf.force_igmp_version,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &ipv4_doint_and_flush,
-                       .strategy       = &ipv4_doint_and_flush_strategy,
-               },
-               {
-                       .ctl_name       = NET_IPV4_CONF_PROMOTE_SECONDARIES,
-                       .procname       = "promote_secondaries",
-                       .data           = &ipv4_devconf.promote_secondaries,
-                       .maxlen         = sizeof(int),
-                       .mode           = 0644,
-                       .proc_handler   = &ipv4_doint_and_flush,
-                       .strategy       = &ipv4_doint_and_flush_strategy,
-               },
+               DEVINET_SYSCTL_COMPLEX_ENTRY(FORWARDING, "forwarding",
+                                            devinet_sysctl_forward, NULL),
+               DEVINET_SYSCTL_RO_ENTRY(MC_FORWARDING, "mc_forwarding"),
+
+               DEVINET_SYSCTL_RW_ENTRY(ACCEPT_REDIRECTS, "accept_redirects"),
+               DEVINET_SYSCTL_RW_ENTRY(SECURE_REDIRECTS, "secure_redirects"),
+               DEVINET_SYSCTL_RW_ENTRY(SHARED_MEDIA, "shared_media"),
+               DEVINET_SYSCTL_RW_ENTRY(RP_FILTER, "rp_filter"),
+               DEVINET_SYSCTL_RW_ENTRY(SEND_REDIRECTS, "send_redirects"),
+               DEVINET_SYSCTL_RW_ENTRY(ACCEPT_SOURCE_ROUTE,
+                                       "accept_source_route"),
+               DEVINET_SYSCTL_RW_ENTRY(PROXY_ARP, "proxy_arp"),
+               DEVINET_SYSCTL_RW_ENTRY(MEDIUM_ID, "medium_id"),
+               DEVINET_SYSCTL_RW_ENTRY(BOOTP_RELAY, "bootp_relay"),
+               DEVINET_SYSCTL_RW_ENTRY(LOG_MARTIANS, "log_martians"),
+               DEVINET_SYSCTL_RW_ENTRY(TAG, "tag"),
+               DEVINET_SYSCTL_RW_ENTRY(ARPFILTER, "arp_filter"),
+               DEVINET_SYSCTL_RW_ENTRY(ARP_ANNOUNCE, "arp_announce"),
+               DEVINET_SYSCTL_RW_ENTRY(ARP_IGNORE, "arp_ignore"),
+               DEVINET_SYSCTL_RW_ENTRY(ARP_ACCEPT, "arp_accept"),
+
+               DEVINET_SYSCTL_FLUSHING_ENTRY(NOXFRM, "disable_xfrm"),
+               DEVINET_SYSCTL_FLUSHING_ENTRY(NOPOLICY, "disable_policy"),
+               DEVINET_SYSCTL_FLUSHING_ENTRY(FORCE_IGMP_VERSION,
+                                             "force_igmp_version"),
+               DEVINET_SYSCTL_FLUSHING_ENTRY(PROMOTE_SECONDARIES,
+                                             "promote_secondaries"),
        },
        .devinet_dev = {
                {