Pablo Neira Ayuso 735795f68b netfilter: flowtable: GC pushes back packets to classic path
Since 41f2c7c342d3 ("net/sched: act_ct: Fix promotion of offloaded
unreplied tuple"), flowtable GC pushes back flows with IPS_SEEN_REPLY
back to classic path in every run, ie. every second. This is because of
a new check for NF_FLOW_HW_ESTABLISHED which is specific of sched/act_ct.

In Netfilter's flowtable case, NF_FLOW_HW_ESTABLISHED never gets set on
and IPS_SEEN_REPLY is unreliable since users decide when to offload the
flow before, such bit might be set on at a later stage.

Fix it by adding a custom .gc handler that sched/act_ct can use to
deal with its NF_FLOW_HW_ESTABLISHED bit.

Fixes: 41f2c7c342d3 ("net/sched: act_ct: Fix promotion of offloaded unreplied tuple")
Reported-by: Vladimir Smelhaus <vl.sm@email.cz>
Reviewed-by: Paul Blakey <paulb@nvidia.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2023-10-25 11:35:46 +02:00
..
2023-03-17 08:56:37 +00:00
2022-08-09 22:14:02 -07:00
2021-12-16 07:18:35 -08:00
2023-08-15 15:01:03 -07:00
2021-10-15 11:33:08 +01:00
2023-09-06 06:05:59 +01:00
2023-04-22 01:39:41 +02:00
2021-10-13 09:40:46 -07:00
2023-08-25 18:35:09 -07:00
2023-08-22 17:31:18 -07:00
2022-05-11 12:43:10 +01:00
2023-08-29 17:39:15 -07:00
2023-05-11 18:07:05 -07:00
2023-07-14 20:39:30 -07:00
2023-02-16 09:27:07 +01:00
2023-07-28 14:07:59 -07:00
2022-12-12 15:04:39 -08:00
2023-08-02 10:58:26 +01:00
2023-07-19 09:56:49 -07:00
2023-07-19 09:56:49 -07:00