]> git.ipfire.org Git - thirdparty/linux.git/commit
netfilter: nf_conncount: use per-rule hash initval
authorFlorian Westphal <fw@strlen.de>
Wed, 29 Apr 2026 06:30:00 +0000 (08:30 +0200)
committerFlorian Westphal <fw@strlen.de>
Sun, 24 May 2026 20:55:47 +0000 (22:55 +0200)
commite9fd2fb09cfe4abb5c6238141ffbbfcb4a01aa4b
tree2440e0107ccd3b6b77b444aa1c55616bc05a98ff
parentd4349ba9872d0c97a31fb2a18789297731061e88
netfilter: nf_conncount: use per-rule hash initval

As-is, different netns will use same slots if the key is the same.
OVS uses this infrastructure to limit conntrack counts per zones.
Those can easily overlap. Make them hash to different slots internally.

Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nf_conncount.c