aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nf_conntrack_core.c
AgeCommit message (Expand)AuthorFilesLines
2024-02-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+1
2024-02-29netfilter: bridge: confirm multicast packets before passing them up the stackFlorian Westphal1-0/+1
2024-02-12netfilter: conntrack: expedite rcu in nf_conntrack_cleanup_net_listEric Dumazet1-1/+1
2023-10-18netfilter: conntrack: convert nf_conntrack_update to netfilter verdictsFlorian Westphal1-25/+33
2023-10-10netfilter: conntrack: simplify nf_conntrack_alter_replyFlorian Westphal1-18/+0
2023-07-20netfilter: allow exp not to be removed in nf_ct_find_expectationXin Long1-1/+1
2023-07-05netfilter: conntrack: don't fold port numbers into addresses before hashingFlorian Westphal1-13/+7
2023-06-07netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelperTijs Van Buggenhout1-0/+3
2023-04-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni1-1/+0
2023-04-19netfilter: conntrack: restore IPS_CONFIRMED out of nf_conntrack_hash_check_in...Pablo Neira Ayuso1-1/+0
2023-03-09Merge branch 'main' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilte...Jakub Kicinski1-1/+1
2023-03-08netfilter: conntrack: fix typoJeremy Sowden1-1/+1
2023-03-07netfilter: conntrack: adopt safer max chain lengthEric Dumazet1-2/+2
2023-02-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski1-10/+15
2023-02-22netfilter: conntrack: fix rmmod double-free raceFlorian Westphal1-10/+15
2023-02-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller1-0/+12
2023-02-17netfilter: let reset rules clean out conntrack entriesFlorian Westphal1-0/+12
2023-02-03netfilter: nf_conntrack: allow early drop of offloaded UDP connsVlad Buslov1-5/+6
2023-01-18netfilter: conntrack: move rcu read lock to nf_conntrack_find_getFlorian Westphal1-8/+9
2023-01-18netfilter: conntrack: avoid reload of ct->statusFlorian Westphal1-4/+5
2023-01-18netfilter: conntrack: remove pr_debug callsFlorian Westphal1-18/+2
2022-12-13Merge tag 'net-next-6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-17/+13
2022-12-12Merge tag 'random-6.2-rc1-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds1-2/+2
2022-12-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+3
2022-11-30netfilter: conntrack: fix using __this_cpu_add in preemptibleXin Long1-3/+3
2022-11-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2022-11-18netfilter: conntrack: Fix data-races around ct markDaniel Xu1-1/+1
2022-11-18treewide: use get_random_u32_below() instead of deprecated functionJason A. Donenfeld1-2/+2
2022-11-15netfilter: conntrack: use siphash_4u64Florian Westphal1-17/+13
2022-10-03Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-0/+1
2022-09-21netfilter: conntrack: revisit the gc initial rescheduling biasAntoine Tenart1-4/+6
2022-09-21netfilter: conntrack: fix the gc rescheduling delayAntoine Tenart1-2/+8
2022-09-10bpf: Add support for writing to nf_conn:markDaniel Xu1-0/+1
2022-09-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni1-6/+1
2022-08-31netfilter: remove nf_conntrack_helper sysctl and modparam togglesPablo Neira Ayuso1-6/+1
2022-08-09net: netfilter: Remove ifdefs for code shared by BPF and ctnetlinkKumar Kartikeya Dwivedi1-6/+0
2022-07-22Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-0/+62
2022-07-21net: netfilter: Add kfuncs to set and change CT statusLorenzo Bianconi1-0/+40
2022-07-21net: netfilter: Add kfuncs to set and change CT timeoutKumar Kartikeya Dwivedi1-0/+22
2022-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski1-5/+3
2022-07-11netfilter: conntrack: use fallthrough to cleanupJackie Liu1-5/+3
2022-07-07netfilter: conntrack: fix crash due to confirmed bit load reorderingFlorian Westphal1-0/+22
2022-05-13netfilter: conntrack: add nf_conntrack_events autodetect modeFlorian Westphal1-1/+2
2022-05-13netfilter: conntrack: un-inline nf_ct_ecache_ext_addFlorian Westphal1-3/+11
2022-05-13netfilter: conntrack: add nf_ct_iter_data object for nf_ct_iterate_cleanup*()Pablo Neira Ayuso1-34/+22
2022-05-13netfilter: conntrack: avoid unconditional local_bh_disableFlorian Westphal1-5/+2
2022-05-13netfilter: conntrack: remove unconfirmed listFlorian Westphal1-55/+2
2022-05-13netfilter: conntrack: remove __nf_ct_unconfirmed_destroyFlorian Westphal1-33/+13
2022-05-13netfilter: extensions: introduce extension genid countFlorian Westphal1-0/+55
2022-05-13netfilter: remove nf_ct_unconfirmed_destroy helperFlorian Westphal1-14/+0
2022-05-13netfilter: conntrack: remove the percpu dying listFlorian Westphal1-29/+6
2022-05-13netfilter: ecache: use dedicated list for event redeliveryFlorian Westphal1-5/+28
2022-03-19netfilter: conntrack: revisit gc autotuningFlorian Westphal1-17/+68
2022-03-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+0
2022-03-08Revert "netfilter: conntrack: tag conntracks picked up in local out hook"Florian Westphal1-3/+0
2022-02-04netfilter: conntrack: remove extension register apiFlorian Westphal1-43/+0
2022-02-04netfilter: conntrack: handle ->destroy hook via nat_ops insteadFlorian Westphal1-2/+12
2022-02-04netfilter: conntrack: move extension sizes into coreFlorian Westphal1-37/+0
2022-01-24Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-0/+8
2022-01-18net/netfilter: Add unstable CT lookup helpers for XDP and TC-BPFKumar Kartikeya Dwivedi1-0/+8
2022-01-16netfilter: conntrack: don't increment invalid counter on NF_REPEATFlorian Westphal1-3/+5
2022-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski1-26/+27
2022-01-09net: prefer nf_ct_put instead of nf_conntrack_putFlorian Westphal1-2/+2
2022-01-09netfilter: conntrack: avoid useless indirection during conntrack destructionFlorian Westphal1-6/+6
2022-01-09netfilter: make function op structures constFlorian Westphal1-2/+2
2022-01-09netfilter: core: move ip_ct_attach indirection to struct nf_ct_hookFlorian Westphal1-3/+1
2022-01-09netfilter: conntrack: convert to refcount_t apiFlorian Westphal1-13/+13
2022-01-04net/sched: act_ct: Fill offloading tuple iifidxPaul Blakey1-1/+5
2021-12-23netfilter: conntrack: tag conntracks picked up in local out hookFlorian Westphal1-0/+3
2021-12-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski1-4/+1
2021-12-16netfilter: conntrack: Remove useless assignment statementsluo penghao1-1/+0
2021-12-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+3
2021-12-08netfilter: conntrack: annotate data-races around ct->timeoutEric Dumazet1-3/+3
2021-11-30netfilter: conntrack: Use memset_startat() to zero struct nf_connKees Cook1-3/+1
2021-11-16net: align static siphash keysEric Dumazet1-2/+2
2021-09-21netfilter: conntrack: serialize hash resizes and cleanupsEric Dumazet1-33/+37
2021-09-21netfilter: conntrack: include zone id in tuple hash againFlorian Westphal1-15/+52
2021-09-21netfilter: conntrack: make max chain length randomFlorian Westphal1-6/+11
2021-08-30netfilter: refuse insertion if chain has grown too largeFlorian Westphal1-7/+35
2021-08-30netfilter: conntrack: switch to siphashFlorian Westphal1-13/+18
2021-08-30netfilter: conntrack: sanitize table size default settingsFlorian Westphal1-16/+14
2021-08-06netfilter: conntrack: collect all entries in one cycleFlorian Westphal1-49/+22
2021-07-23netfilter: conntrack: adjust stop timestamp to real expiry valueFlorian Westphal1-1/+6
2021-07-06netfilter: conntrack: Mark access for KCSANManfred Spraul1-1/+9
2021-07-02netfilter: conntrack: nf_ct_gre_keymap_flush() removalVasily Averin1-1/+0
2021-06-07netfilter: nftables: add nf_ct_pernet() helper functionPablo Neira Ayuso1-13/+9
2021-04-13netfilter: conntrack: move ct counter to net_generic dataFlorian Westphal1-12/+28
2021-04-13netfilter: conntrack: move expect counter to net_generic dataFlorian Westphal1-1/+5
2021-04-06netfilter: conntrack: move ecache dwork to net_generic infraFlorian Westphal1-2/+5
2021-02-09netfilter: conntrack: skip identical origin tuple in same zone onlyFlorian Westphal1-1/+2
2020-08-28netfilter: conntrack: remove unneeded nf_ct_putFlorian Westphal1-4/+3
2020-08-28netfilter: conntrack: add clash resolution stat counterFlorian Westphal1-4/+5
2020-08-28netfilter: conntrack: remove ignore statsFlorian Westphal1-3/+1
2020-08-28netfilter: conntrack: do not increment two error counters at same timeFlorian Westphal1-4/+1
2020-08-10Merge tag 'locking-urgent-2020-08-10' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds1-2/+3
2020-08-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-12/+0
2020-08-03netfilter: conntrack: Move nf_ct_offload_timeout to header fileRoi Dayan1-12/+0
2020-07-29netfilter: conntrack: Use sequence counter with associated spinlockAhmed S. Darwish1-2/+3
2020-07-13net: netfilter: kerneldoc fixesAndrew Lunn1-1/+1
2020-07-03netfilter: conntrack: refetch conntrack after nf_conntrack_update()Pablo Neira Ayuso1-0/+2
2020-06-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-5/+14
2020-05-27netfilter: ctnetlink: add kernel side filtering for dumpRomain Bellan1-5/+14
2020-05-27netfilter: conntrack: comparison of unsigned in cthelper confirmationPablo Neira Ayuso1-1/+1
2020-05-27netfilter: conntrack: Pass value of ctinfo to __nf_conntrack_updateNathan Chancellor1-3/+3
2020-05-25netfilter: conntrack: make conntrack userspace helpers work againPablo Neira Ayuso1-6/+72
2020-05-11netfilter: conntrack: fix infinite loop on rmmodFlorian Westphal1-1/+12
2020-05-10netfilter: conntrack: avoid gcc-10 zero-length-bounds warningArnd Bergmann1-2/+2
2020-03-30netfilter: conntrack: add nf_ct_acct_add()wenxu1-3/+4
2020-03-27netfilter: conntrack: export nf_ct_acct_update()Pablo Neira Ayuso1-8/+7
2020-03-27netfilter: conntrack: Add missing annotations for nf_conntrack_all_lock() and...Jules Irenge1-0/+2
2020-03-15netfilter: cleanup unused macroLi RongQing1-1/+0
2020-02-17netfilter: conntrack: allow insertion of clashing entriesFlorian Westphal1-2/+74
2020-02-11netfilter: conntrack: split resolve_clash functionFlorian Westphal1-17/+41
2020-02-11netfilter: conntrack: place confirm-bit setting in a helperFlorian Westphal1-7/+14
2020-02-11netfilter: conntrack: remove two args from resolve_clashFlorian Westphal1-18/+51
2020-01-31netfilter: Use kvcallocJoe Perches1-2/+1
2019-12-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-1/+0
2019-12-17netfilter: conntrack: remove two export symbolsFlorian Westphal1-1/+0
2019-11-30netfilter: conntrack: tell compiler to not inline nf_ct_resolve_clashFlorian Westphal1-3/+4
2019-10-26Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-2/+0
2019-10-17netfilter: conntrack: free extension area immediatelyFlorian Westphal1-2/+0
2019-10-09netfilter: conntrack: avoid possible false sharingEric Dumazet1-2/+2
2019-08-27netfilter: not mark a spinlock as __read_mostlyLi RongQing1-2/+1
2019-08-13netfilter: conntrack: Use consistent ct id hash calculationDirk Morris1-8/+8
2019-07-16netfilter: Update obsolete comments referring to ip_conntrackYonatan Goldschmidt1-3/+1
2019-06-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso1-4/+1
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-06-17netfilter: conntrack: small conntrack lookup optimizationFlorian Westphal1-12/+13
2019-04-22netfilter: never get/set skb->tstampFlorian Westphal1-5/+2
2019-04-15netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal1-0/+35
2019-04-13netfilter: conntrack: initialize ct->timeoutAlexander Potapenko1-0/+1
2019-03-01netfilter: nf_conntrack: ensure that CONNTRACK_LOCKS is power of 2Li RongQing1-0/+1
2019-02-27netfilter: conntrack: avoid same-timeout updateFlorian Westphal1-5/+4
2019-02-27netfilter: nat: remove nf_nat_l3proto.h and nf_nat_core.hFlorian Westphal1-1/+0
2019-02-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-3/+11
2019-02-12netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrac...Chieh-Min Wang1-3/+11
2019-02-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+16
2019-02-04netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis1-0/+16
2019-01-22netfilter: conntrack: fix bogus port values for other l4 protocolsFlorian Westphal1-11/+35
2019-01-22netfilter: conntrack: fix IPV6=n buildsFlorian Westphal1-0/+8
2019-01-18netfilter: conntrack: remove nf_ct_l4proto_find_getFlorian Westphal1-8/+3
2019-01-18netfilter: conntrack: remove l4proto destroy hookFlorian Westphal1-4/+11
2019-01-18netfilter: conntrack: avoid unneeded nf_conntrack_l4proto lookupsFlorian Westphal1-44/+9
2019-01-18netfilter: conntrack: remove remaining l4proto indirect packet callsFlorian Westphal1-7/+19
2019-01-18netfilter: conntrack: remove invert_tuple callbackFlorian Westphal1-2/+6
2019-01-18netfilter: conntrack: remove pkt_to_tuple callbackFlorian Westphal1-2/+4
2019-01-18netfilter: conntrack: handle icmp pkt_to_tuple helper via direct callsFlorian Westphal1-0/+6
2019-01-18netfilter: conntrack: handle builtin l4proto packet functions via direct callsFlorian Westphal1-1/+44
2018-12-28mm: convert totalram_pages and totalhigh_pages variables to atomicArun KS1-1/+1
2018-12-28mm: reference totalram_pages and managed_pages once per functionArun KS1-3/+4
2018-12-21netfilter: conntrack: remove empty pernet fini stubsFlorian Westphal1-22/+6
2018-11-03netfilter: conntrack: fix calculation of next bucket number in early_dropVasily Khoruzhick1-5/+8
2018-09-20netfilter: conntrack: remove l3->l4 mapping informationFlorian Westphal1-8/+7
2018-09-20netfilter: conntrack: remove error callback and handle icmp from coreFlorian Westphal1-7/+36
2018-09-20netfilter: conntrack: remove the l4proto->new() functionFlorian Westphal1-6/+0
2018-09-20netfilter: conntrack: pass nf_hook_state to packet and error handlersFlorian Westphal1-24/+25
2018-08-03netfilter: use kvmalloc_array to allocate memory for hashtableLi RongQing1-23/+6
2018-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-67/+185
2018-07-20Merge ra.kernel.org:/pub/scm/linux/kernel/git/torvalds/linuxDavid S. Miller1-1/+1
2018-07-18netfilter: Remove useless param helper of nf_ct_helper_ext_addGao Feng1-2/+1
2018-07-18netfilter: nf_conntrack: resolve clash for matching conntracksMartynas Pumputis1-8/+22
2018-07-17netfilter: conntrack: remove l3proto abstractionFlorian Westphal1-7/+4
2018-07-16netfilter: conntrack: remove get_timeout() indirectionFlorian Westphal1-14/+2
2018-07-16netfilter: conntrack: avoid l4proto pkt_to_tuple callsFlorian Westphal1-1/+15
2018-07-16netfilter: conntrack: avoid calls to l4proto invert_tupleFlorian Westphal1-1/+7
2018-07-16netfilter: conntrack: remove get_l4proto indirection from l3 protocol trackersFlorian Westphal1-20/+88
2018-07-16netfilter: conntrack: remove invert_tuple indirection from l3 protocol trackersFlorian Westphal1-10/+16
2018-07-16netfilter: conntrack: remove pkt_to_tuple indirection from l3 protocol trackersFlorian Westphal1-6/+33
2018-07-16openvswitch: use nf_ct_get_tuplepr, invert_tupleprFlorian Westphal1-2/+1
2018-07-10netfilter: Add nf_ct_get_tuple_skb global lookup functionToke Høiland-Jørgensen1-0/+36
2018-07-09netfilter: nf_conntrack: Fix possible possible crash on module loading.Andrey Ryabinin1-1/+1
2018-05-23netfilter: nfnetlink_queue: resolve clash for unconfirmed conntracksPablo Neira Ayuso1-0/+77
2018-05-23netfilter: add struct nf_nat_hook and use itPablo Neira Ayuso1-5/+0
2018-05-23netfilter: add struct nf_ct_hook and use itPablo Neira Ayuso1-3/+6
2018-05-07netfilter: ctnetlink: export nf_conntrack_maxFlorent Fourcot1-0/+1
2018-03-29net: Remove rtnl_lock() in nf_ct_iterate_destroy()Kirill Tkhai1-2/+0
2018-03-29net: Introduce net_rwsem to protect net_namespace_listKirill Tkhai1-0/+2
2018-01-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-6/+20
2018-01-19netfilter: remove messages print and boot/module load timePablo Neira Ayuso1-6/+0
2018-01-08netfilter: nf_conntrack: add IPS_OFFLOAD status bitPablo Neira Ayuso1-0/+20
2017-11-28netfilter: Eliminate cond_resched_rcu_qs() in favor of cond_resched()Paul E. McKenney1-1/+1
2017-11-15Merge tag 'modules-for-v4.15' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+1
2017-11-07netfilter: conntrack: use power efficient workqueueVincent Guittot1-2/+2
2017-11-06netfilter: conntrack: don't cache nlattr_tuple_size result in nla_sizeFlorian Westphal1-2/+7
2017-10-31treewide: Fix function prototypes for module_param_call()Kees Cook1-1/+1
2017-10-24netfilter: conntrack: remove pf argument from l4 packet functionsFlorian Westphal1-1/+1
2017-09-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-25/+32
2017-09-04net: Replace NF_CT_ASSERT() with WARN_ON().Varsha Rao1-6/+5
2017-09-04netfilter: remove unused hooknum arg from packet functionsFlorian Westphal1-1/+1
2017-08-24netfilter: conntrack: make protocol tracker pointers constFlorian Westphal1-6/+6
2017-08-02netfilter: constify nf_conntrack_l3/4proto parametersJulia Lawall1-4/+4
2017-07-31netfilter: conntrack: destroy functions need to free queued packetsFlorian Westphal1-0/+4
2017-07-31netfilter: add and use nf_ct_unconfirmed_destroyFlorian Westphal1-4/+11
2017-07-31netfilter: conntrack: Change to deferable work queuesubashab@codeaurora.org1-1/+1
2017-07-25net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()Manfred Spraul1-23/+29
2017-07-24netfilter: Remove duplicated rcu_read_lock.Taehee Yoo1-3/+0
2017-06-19netns: add and use net_ns_barrierFlorian Westphal1-0/+9
2017-05-29netfilter: conntrack: restart iteration on resizeFlorian Westphal1-6/+14
2017-05-29netfilter: conntrack: add nf_ct_iterate_destroyFlorian Westphal1-13/+74
2017-05-29netfilter: conntrack: don't call iter for non-confirmed conntracksFlorian Westphal1-10/+29
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-03 09:28:35 +0000