diff options
| author | Ritaro Takenaka <ritarot634@gmail.com> | 2022-05-17 12:55:30 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-05-18 17:34:26 +0200 |
| commit | 2738d9d963bd1f06d5114c2b4fa5771a95703991 (patch) | |
| tree | a7d192ce684e8e9b070cc62fc936388647d27e41 /MAINTAINERS | |
| parent | e5eaac2beb54f0a16ff851125082d9faeb475572 (diff) | |
netfilter: flowtable: move dst_check to packet path
Fixes sporadic IPv6 packet loss when flow offloading is enabled.
IPv6 route GC and flowtable GC are not synchronized.
When dst_cache becomes stale and a packet passes through the flow before
the flowtable GC teardowns it, the packet can be dropped.
So, it is necessary to check dst every time in packet path.
Fixes: 227e1e4d0d6c ("netfilter: nf_flowtable: skip device lookup from interface index")
Signed-off-by: Ritaro Takenaka <ritarot634@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'MAINTAINERS')
0 files changed, 0 insertions, 0 deletions