Skip to content

updates for ctnetlink and conntrack core

Pablo Neira Ayuso netfilter-devel 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest10 patches 21 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/10mark conntrack eventinclude/linux/netfilter/nf_conntrack_common.h net/netfilter/xt_CONNMARK.c+18 -20 replies
2/10dump conntrack marknet/ipv4/netfilter/ip_conntrack_netlink.c net/netfilter/nf_conntrack_netlink.c+8 -00 replies
3/10Fix race condition on conntrack creationnet/ipv4/netfilter/ip_conntrack_netlink.c net/netfilter/nf_conntrack_netlink.c+10 -73 replies
4/10remove write lock in ip_conntrack_hash_insertnet/ipv4/netfilter/ip_conntrack_core.c net/netfilter/nf_conntrack_core.c+4 -40 replies
5/10Remove unused helper_[find_get|put] functionsinclude/linux/netfilter_ipv4/ip_conntrack.h include/net/netfilter/nf_conntrack.h net/ipv4/netfilter/ip_conntrack_core.c +3 more+11 -710 replies
6/10dump counters iif connection ended or counters filled upnet/ipv4/netfilter/ip_conntrack_netlink.c net/netfilter/nf_conntrack_netlink.c+8 -48 replies
7/10send conntrack events on ctnetlink actionsnet/ipv4/netfilter/ip_conntrack_core.c net/ipv4/netfilter/ip_conntrack_netlink.c net/netfilter/nf_conntrack_core.c +1 more+92 -390 replies
8/10Do not dump everything on new conntracks eventsnet/ipv4/netfilter/ip_conntrack_netlink.c net/netfilter/nf_conntrack_netlink.c+0 -40 replies
9/10send expectation events if someone is listening tonet/ipv4/netfilter/ip_conntrack_netlink.c net/netfilter/nf_conntrack_netlink.c+6 -00 replies
10/10introduce the pickup flag to take over connectionsinclude/linux/netfilter/nf_conntrack_common.h net/ipv4/netfilter/ip_conntrack_proto_tcp.c net/netfilter/nf_conntrack_proto_tcp.c+76 -403 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/10] updates for ctnetlink and conntrack core

Hi,

Here follows a set of patches for ctnetlink and the conntrack core API.

Basically, at the time that I was working on the ctnetlink patches, I tried to keep in mind the idea of reducing the netlink bandwidth consumption following the principle of just dumping meaningful fields depending on the type of event.

Please let me know what you think. Thanks!

cheers,
Pablo

Signature · 1 line
The dawn of the fourth age of Linux firewalling is coming; a time of great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris