summaryrefslogtreecommitdiff
path: root/scripts
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2025-03-21 23:24:20 +0100
committerPablo Neira Ayuso <pablo@netfilter.org>2025-04-02 22:50:56 +0200
commit9d74da1177c800eb3d51c13f9821b7b0683845a5 (patch)
tree6d10a227eecb828b89c0dadb72f1717a14ed3c4e /scripts
parented3ba9b6e280e14cc3148c1b226ba453f02fa76c (diff)
netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
conncount has its own GC handler which determines when to reap stale elements, this is convenient for dynamic sets. However, this also reaps non-dynamic sets with static configurations coming from control plane. Always run connlimit gc handler but honor feedback to reap element if this set is dynamic. Fixes: 290180e2448c ("netfilter: nf_tables: add connlimit support") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions