Ritaro Takenaka 2738d9d963 netfilter: flowtable: move dst_check to packet path
Fixes sporadic IPv6 packet loss when flow offloading is enabled.

IPv6 route GC and flowtable GC are not synchronized.
When dst_cache becomes stale and a packet passes through the flow before
the flowtable GC teardowns it, the packet can be dropped.
So, it is necessary to check dst every time in packet path.

Fixes: 227e1e4d0d6c ("netfilter: nf_flowtable: skip device lookup from interface index")
Signed-off-by: Ritaro Takenaka <ritarot634@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2022-05-18 17:34:26 +02:00
..
2022-03-17 16:34:49 -07:00
2022-01-22 08:33:37 +02:00
2022-03-29 10:24:34 +02:00
2022-02-25 09:36:06 +01:00
2022-03-04 12:02:19 +00:00
2022-01-27 13:53:27 +00:00
2022-02-10 15:29:39 +00:00
2022-03-07 11:40:41 +00:00
2022-03-03 09:55:28 +00:00