Re: [PATCH nf-next] netfilter: flowtables: use fixed renew timeout on teardown

2018-06-27 Thread Pablo Neira Ayuso
On Fri, Jun 15, 2018 at 11:46:42PM +0200, Florian Westphal wrote: > This is one of the very few external callers of ->get_timeouts(), > > We can use a fixed timeout instead, conntrack core will refresh this in > case a new packet comes within this period. > > Use of ESTABLISHED timeout seems way

[PATCH nf-next] netfilter: flowtables: use fixed renew timeout on teardown

2018-06-15 Thread Florian Westphal
This is one of the very few external callers of ->get_timeouts(), We can use a fixed timeout instead, conntrack core will refresh this in case a new packet comes within this period. Use of ESTABLISHED timeout seems way too huge anyway. Signed-off-by: Florian Westphal ---