diff options
| author |  Vlad Buslov <vladbu@nvidia.com>
| 2023-02-01 17:30:55 +0100 |
|---|---|---|
| committer |  David S. Miller <davem@davemloft.net>
| 2023-02-03 09:31:24 +0000 |
| commit | 0eb5acb16418898c3d813e2c2d59a7ea7763a824 (patch) | |
| tree | 11b08fe17c967e94342fc718d5e60a30bf3bd202 | |
| parent | net: flow_offload: provision conntrack info in ct_metadata (diff) | |
| download | linux-0eb5acb16418898c3d813e2c2d59a7ea7763a824.tar.gz linux-0eb5acb16418898c3d813e2c2d59a7ea7763a824.tar.bz2 linux-0eb5acb16418898c3d813e2c2d59a7ea7763a824.zip | |
netfilter: flowtable: fixup UDP timeout depending on ct state
Currently flow_offload_fixup_ct() function assumes that only replied UDP
connections can be offloaded and hardcodes UDP_CT_REPLIED timeout value. To
enable UDP NEW connection offload in following patches extract the actual
connections state from ct->status and set the timeout according to it.
Signed-off-by: Vlad Buslov <vladbu@nvidia.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | net/netfilter/nf_flow_table_core.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/net/netfilter/nf_flow_table_core.c b/net/netfilter/nf_flow_table_core.c index 81c26a96c30b..04bd0ed4d2ae 100644 --- a/net/netfilter/nf_flow_table_core.c +++ b/net/netfilter/nf_flow_table_core.c @@ -193,8 +193,11 @@ static void flow_offload_fixup_ct(struct nf_conn *ct) timeout -= tn->offload_timeout; } else if (l4num == IPPROTO_UDP) { struct nf_udp_net *tn = nf_udp_pernet(net); + enum udp_conntrack state = + test_bit(IPS_SEEN_REPLY_BIT, &ct->status) ? + UDP_CT_REPLIED : UDP_CT_UNREPLIED; - timeout = tn->timeouts[UDP_CT_REPLIED]; + timeout = tn->timeouts[state]; timeout -= tn->offload_timeout; } else { return; |