CT userspace behavior is not aligned with the kernel's one in some cases. Handle it.
v2-v1: - Added NEWS entries for the behavior changes. - Removed Fixes tags. - Simplified the NAT-binding selection helpers. - Reduced to only rejecting stale ct_orig_tuple. Eli Britstein (2): conntrack: Align userspace NAT binding on ct(commit) with kernel. conntrack: Reject stale ct_orig_tuple on forward lookups. Tim Rozet (1): conntrack: Match kernel NAT handling for new packets. NEWS | 13 +++ lib/conntrack.c | 117 ++++++++++++++++--- tests/system-kmod-macros.at | 45 ++++++++ tests/system-traffic.at | 192 +++++++++++++++++++++++++++++++ tests/system-userspace-macros.at | 9 ++ tests/test-conntrack.c | 116 +++++++++++++++++++ 6 files changed, 475 insertions(+), 17 deletions(-) -- 2.43.0 _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
